{"report_id":"8413b197-47b2-432a-a753-0805ee6b736b","version":0,"status":"done","tags":[],"date":"2026-07-07T21:29:58Z","url":{"schema":"http","addr":"96.casino/","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"104.21.63.95","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"96.casino/","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"title":"96.com — Casino \u0026 Sports","dom":{"size":58272,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (835)","md5":"db03f486f38e8daa0e8309b1b26daaa5","sha1":"c89f7ed79e23c929d21e444bcc02e662f009295c","sha256":"642115d23d7d1b6c1346648eb579709792caa3fbd74f497f9173f00a92b37ab6","sha512":"0da66540f5d358d7a4096511024ac46f44117bf19ede943035fb96ba45dcc3fe018b796352fa6628b59de1aa6833880a7c2acb258a0b59221bd513678443e0db","ssdeep":"384:XvEyBh55RB5P6FFh56JYVc8PEOLcRq3Y9rQCaQIWq3pPBN0FGQsAvXk14/jU14uf:cyBh55RB5EtjQ03ppN0F5vQTTrJOY","tlshash":"b443837156cf173bd21704c380627bfa20fc1abeda06084afeb5afa953cdc45692596c","dom_hash":"domhash748adeaf07ec0625c2c38a6f3149f277","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"96.casino/","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"104.21.63.95","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-11T21:29:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"domennc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"domennc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":4,"received_data":173684,"sent_data":2252,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-05T22:22:24.069932Z","alert_count":0,"request_count":1,"received_data":12553,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"domennc.com","ip":{"addr":"104.21.45.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-02","domain_rank":0,"first_seen":"2026-02-03T09:24:27.525541Z","last_seen":"2026-03-26T04:10:12.110452Z","alert_count":2,"request_count":1,"received_data":327376,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"96.casino","ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-07T21:29:59.946048Z","last_seen":"2026-07-07T21:29:59.946048Z","alert_count":148,"request_count":74,"received_data":528832,"sent_data":38804,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"oooweb32play.shop","ip":{"addr":"172.67.162.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-12T20:48:17.943509Z","last_seen":"2026-06-23T09:44:32.683502Z","alert_count":0,"request_count":2,"received_data":2478,"sent_data":1052,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"domennc.com/static/tron/bundle.js","fqdn":"domennc.com","domain":"domennc.com","tld":"com"},"ip":{"addr":"104.21.45.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5f4dac62ba734937927cf4e53db1ab3","sha1":"2ebf3e3302bdd7c26fc77b86716495591344f52b","sha256":"01502045495ae1228799305ea3b47ecb524a90dea5950d059d69182be5cf4aa3","sha512":"e0b3b6ef3449e5b81676b2fa0e52485884ba9d9fe57ee59f2aed69117339999a173a39206b3a441e7aac3a7a6c1b2487919859f5d8b022270d974058e4b60abd","ssdeep":"6144:7t/PRxD0LvLVNughJdwlVCZXZgzCN4JyYtKxfz8h:ZPRxkDVNughJdwlVCZXZP2Uf8","tlshash":"6d645c51b7a53129076b0bd2407b1117f2376d9cb10a80acb3acecd66a7c589e46ff78","size":326689,"data":"","first_seen":"2026-06-12T20:48:24.111463Z","last_seen":"2026-07-19T22:08:06.748339Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/js/main.js","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fecc1e2d4a87c1f11e6ea86db887f18","sha1":"9d35b91b5296c96269cda8ee74a6ec4c9a626841","sha256":"621823cb1ee7e78e848c216e299dd344291535ee097e72c39461e30f363f297a","sha512":"3bc33d6505f776b817a7d063874278929513a8d2b9b59664daf5a56a47758c342387336628f9601e1d24fb584c0d018489e5bd6f876090b9fc1ab6891718103e","ssdeep":"","tlshash":"0571002eb9e3157250b771af53afe26832b40447500ace113e9cca945f60935177aed8","size":3512,"data":"","first_seen":"2026-07-07T21:30:05.757928Z","last_seen":"2026-07-07T21:30:05.757928Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"[TomoWalletAdapter] Only supported in mobile app for now","filename":"https://domennc.com/static/tron/bundle.js","line_number":2,"column_number":229975}]},"http":[{"url":{"schema":"https","addr":"96.casino/assets/de157e00bf69ea241be85edd80426a64.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.083Z","timestamp":1783459775083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/de157e00bf69ea241be85edd80426a64.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ATXe9IVKx7neJPyHvz29KDHUwwydVXT27oKJyBGuCKCMIpIX%2BGMu55GffMhjdtiFeBJC09OaKEkJVJxz13v1XD29FwiLszEzo9jaRtk61tRxEO7JLNQPXSQoVY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a49addfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7676,"size_decoded":8330,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0a53338921e55b32845386eb34f718ec","sha1":"8cb1fd5e9ca529c1d243f08d39698511f87ae824","sha256":"019e7b436b9556ece4944101809947fd1214cee08c14d3be244b73bd67e18111","sha512":"9513f8078fd2c75dddff83c56c17cd4b6c79cc73855497bbc883fa31a0c4f02084d2a10ebb5f9374ac89240644841bf17a0f08e52081d09eb86e93ea378208b7","ssdeep":"192:rGYdujmGl2iS5u9njhZ70xpMXFKRrebgF0NY:rVujmvJu9nPTFKBa/NY","tlshash":"dff1bf6daa8aad6fc8c022b647c75f247a557c3a0133729fc94377c38c1d9354c36182","first_seen":"2026-07-07T21:30:05.712104Z","last_seen":"2026-07-07T21:30:05.712104Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/db1356963b4065f09b41a824f3558144.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.124Z","timestamp":1783459775124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/db1356963b4065f09b41a824f3558144.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9VnPwkgWOw%2BQVudJi6x8GKVQa3j%2FlyBkjSNyDuyc0nZtxpQXVrgaWFIqj8eO16ZyzcHunxuYuY1UZtzH5hwFlp7s%2FjTob2WlSiYOQBRMh2DnTMlJdsij4dMaPqE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a89f2dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4689\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4689,"size_decoded":5347,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"667d4c9407922ce690c5eda09908d4d0","sha1":"db31d82394691fc9b7ce9f344bce1ff9dd077bab","sha256":"b592fb4c7ea1a52275ab2b8292c0117c7b9accb1055dd05ef1d4b09ea3869685","sha512":"b46c0ee69f33fc7e664766ad3fd56de4c0af3f356a3b79d055b17dcd7cd8e733a5aab2c19126859abce0311f053a985cc4b67fc2080941c47344fced0bf4b9c8","ssdeep":"96:rGPK/sZGFqR9XCuMz+dPFDdXuDHy5oguPwSFPwLvsEp:rGS/sZGmyuMCRFDdXuDHmGwUPUkk","tlshash":"e0a19ec68326cd03e4afd8f411a36f5f6274d4b46b0a5263ed5270038eb4d83ac6d95c","first_seen":"2026-07-07T21:30:05.71367Z","last_seen":"2026-07-07T21:30:05.71367Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oooweb32play.shop/modal-config/public","fqdn":"oooweb32play.shop","domain":"oooweb32play.shop","tld":"shop"},"ip":{"addr":"172.67.162.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.143Z","timestamp":1783459775143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oooweb32play.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 10:20:56 GMT","end":"Thu, 10 Sep 2026 11:19:18 GMT"},"fingerprint":{"sha1":"B2:9E:63:18:D5:19:17:E4:C3:73:64:C4:44:FB:44:56:C4:FC:95:01","sha256":"D2:6F:8B:E0:22:38:47:29:B3:FD:ED:08:5A:11:AA:C9:6B:63:67:DE:27:28:27:4D:1C:AD:C8:D0:36:6A:00:B3"}}},"request":{"raw":"GET /modal-config/public HTTP/1.1\r\nHost: oooweb32play.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://96.casino/\r\nContent-Type: application/json\r\nOrigin: https://96.casino\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N5JfhqgwXUHL0j8Y9uZMICclloTMQJgUAvUC8XoJXV3ZBvqp%2FYfcNpwRnGc2eO4houvYXvO%2FLYtlIN41XgyaWC%2F0g6Nol8HnpM%2BRXR52ySqHKohgIPzeR9YK%2BeEHfqSaWt5W1A%3D%3D\"}]}\r\ncf-ray: a179f20c2f8075ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":946,"size_decoded":1094,"mime_type":"application/json","magic":"JSON text data","md5":"8cd2054e5f03d49a96caa130550f7c82","sha1":"0211e044e7f6f0c7926fd85775cf25be85538af4","sha256":"c478418a33983965d3377466366f67aca234077e775deaf2b5fd8a38455964e8","sha512":"df8fbb6301dd04612c31914e47e049e7b3ef5b9a2ec3810b7d650ee2eee220508f4115506b9b67a9d5ddc6e3e3c0c22cc671eb33edb1ea93ffdc94d56efd526b","ssdeep":"","tlshash":"a6117d1ecb15537e0287e781e0474bfb691744b0432a4579abb85039e19a5284ed39a2","first_seen":"2026-07-07T21:30:05.715518Z","last_seen":"2026-07-07T21:30:05.715518Z","times_seen":1,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oooweb32play.shop/modal-config/public","fqdn":"oooweb32play.shop","domain":"oooweb32play.shop","tld":"shop"},"ip":{"addr":"172.67.162.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.167Z","timestamp":1783459775167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oooweb32play.shop","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 10:20:56 GMT","end":"Thu, 10 Sep 2026 11:19:18 GMT"},"fingerprint":{"sha1":"B2:9E:63:18:D5:19:17:E4:C3:73:64:C4:44:FB:44:56:C4:FC:95:01","sha256":"D2:6F:8B:E0:22:38:47:29:B3:FD:ED:08:5A:11:AA:C9:6B:63:67:DE:27:28:27:4D:1C:AD:C8:D0:36:6A:00:B3"}}},"request":{"raw":"OPTIONS /modal-config/public HTTP/1.1\r\nHost: oooweb32play.shop\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://96.casino/\r\nOrigin: https://96.casino\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\nvary: Origin\r\naccess-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 600\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://96.casino\r\naccess-control-allow-headers: content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CotsoIoparx%2BojX1p4E7XHMe4Lqv70IY093PRLhmn2R6o9HVdjpMlqCjmBv1imeGdthxDhzboI2yk6i4lwwBcmI46CMIYPmPuozBbQs6tdO%2FSigCgRSIWqlovUgHExUqo%2FDlVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20aff6f75ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":845,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-07-24T12:53:13.306861Z","times_seen":354437,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":5,"connect":17,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/e806a0c759adb7f33f9df94d62750a8c.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.041Z","timestamp":1783459775041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/e806a0c759adb7f33f9df94d62750a8c.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yIYNcEsc2UFkU0pIdJ8wTUlHcmfDBKk2wiL1wTiHWp%2FJoF4K1wZwGVNZq2H1SXF%2Bvk3bxzZnRQxslmC8DM%2FHJKoC78Hjux%2BDpxkdK9mdTZIPzLjjexuJQSxuSKE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a097ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25289\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25289,"size_decoded":25950,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"16c66a41ad9d9a07a2d6626407f09a13","sha1":"5f44c755409abf3de3d55dba170a0298e1b3fcfa","sha256":"0b7e28ff7d828f92331e5234e23693f56299bf061106ee6578d8d1ecc9cd61f6","sha512":"6a30bf0212111ec2ed512ad33dce30b7e3c0edd07e632bd4151636e0b1fc16fb1c59c1b728f6fdc44ede5a40695498bf3ea040211cf6bec2b32ce439aedbdc43","ssdeep":"384:rqzBNAsGfzdLDyFGhCeylNHWI4psp05v7YiMeKhUaczxGH6Y7Q+jjPRK2:+zbK05eyD24mjAeKyacVGaY7pjFK2","tlshash":"4fb2e14127a84fc0e0e45477aa78390f705c89cf4d3391f2789b350b65b9aab545cbcc","first_seen":"2026-07-07T21:30:05.718769Z","last_seen":"2026-07-07T21:30:05.718769Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/14a7d9daf893c8b5120aaa97d1bfa11a.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.086Z","timestamp":1783459775086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/14a7d9daf893c8b5120aaa97d1bfa11a.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yzqz1OCab5f9FvFH%2Bs1aVS9vOGfvGKvo8jHXqc4FTfP2GHTEy9Xum2%2FWxQlHTjgeaT5GHMkYc%2BXChDEblhJRYWz4Ue5rFxUynLd%2Fa8zRG7ddK6XKQ%2B9Xr8f5rr8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a49afdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9067\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9067,"size_decoded":9729,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2d70a35b575351f8fc51953e5f1a26d5","sha1":"b2cb9247a2d986e0f90f598f27fd5d2f9b541005","sha256":"d46e247fef68d12bd79489bfa51b5df261f9c9eb0f803426a2047b9ab8d01991","sha512":"706a10287fe2325e155261df2fee57bb357ac105cd8361e684cb1a8a7343863d5b29a55b6076ca58d89d7b8a6c67d441f35b1e77981c3baef8ad053a595dddf5","ssdeep":"192:rGp6KXSJksdEi74B24WbMedRcj/pZFz06OJweborW:r/AS53zZRiD0Gu","tlshash":"f312bfdadc76ac16d186253f6ba03f0d0db99c36c066118b01c3f3380e3e22a5605f3a","first_seen":"2026-07-07T21:30:05.720217Z","last_seen":"2026-07-07T21:30:05.720217Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/favicon.ico","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.432Z","timestamp":1783459775432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/plain\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8MHEOU%2BBAbfgkC692URihCl7FKoHzZmmclZFQXnMcCCP%2BsLRkcFt0zgpl3jpFwxzH5JHNGEo1TpfNfL9whLuRSZD5HsAlzLqe747%2BB2M%2B7AQ4JE%2B%2BWEABTkrDeQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20c7ad0dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13,"size_decoded":610,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"1e6cd917ed71a1241e4bedc29264bd98","sha1":"5b65037351caeb0e5a48d963d7ffa88d0271d546","sha256":"7d04f7431bbfa41a04bcc7e6b98b9de0d919756c4c671c5785c99fff45f16402","sha512":"90e7e9f406dbb9a55b45643d6b4afce103cd565b33e40397b8422e3347ad3778220f8d1ae7befe66db61ce796d3e22d24cbef5fd3ecbbcb5f89a852d19f47e99","ssdeep":"","tlshash":"eb60000c0003c3cc0000003033c00003c000030c303300330000c000000c03c00c00cc","first_seen":"2023-03-08T15:13:39Z","last_seen":"2026-07-24T12:21:00.916479Z","times_seen":16255,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.723Z","timestamp":1783459775723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://96.casino\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 01:48:31 GMT\r\nexpires: Fri, 02 Jul 2027 01:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 502864\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-24T12:52:38.642296Z","times_seen":245054,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":30,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/css/assets/instant_bg.9dc351a5.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.963Z","timestamp":1783459774963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /css/assets/instant_bg.9dc351a5.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/css/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/plain\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dVjKlp%2BoWoaVUk7yc9jp%2FywBUSJ%2BH1PvC2tzmH3meLfv2E6l5nfje91JmKkIsW5qaq07LAXvy2VpFs9PzIbL59hryM4Qp9SIx6qqHjnxW8n0Dq0rEQIi2YIC%2B3g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2098932dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13,"size_decoded":603,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"1e6cd917ed71a1241e4bedc29264bd98","sha1":"5b65037351caeb0e5a48d963d7ffa88d0271d546","sha256":"7d04f7431bbfa41a04bcc7e6b98b9de0d919756c4c671c5785c99fff45f16402","sha512":"90e7e9f406dbb9a55b45643d6b4afce103cd565b33e40397b8422e3347ad3778220f8d1ae7befe66db61ce796d3e22d24cbef5fd3ecbbcb5f89a852d19f47e99","ssdeep":"","tlshash":"eb60000c0003c3cc0000003033c00003c000030c303300330000c000000c03c00c00cc","first_seen":"2023-03-08T15:13:39Z","last_seen":"2026-07-24T12:21:00.916479Z","times_seen":16255,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/fef30799ca49d90b6113e236b03a1e02.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.023Z","timestamp":1783459775023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/fef30799ca49d90b6113e236b03a1e02.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FA%2BMdINCPqxXU5VG%2FB3EnoWUYQViNJNaEI9cWdhs4e27l6hrTJ8v9mldAJHBeEFXfZilJE4oh6svVmVhesLQKOBjPeIbHi3hWUWvSNrCOV4IaoZEPrzXGiu2EnA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f209e969dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33569\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33569,"size_decoded":34226,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"4892c41644dd58a0127044d46add893b","sha1":"c7354de391cdd01b6358187152e00e315119c58b","sha256":"de56342051965232691a9bb5d7ac6f57a31d9b48760c405e669040f016013937","sha512":"9b8f5930a9e39f6e321ae9e178e491b87452a883ddb10da04560305654b4177581b18fe3f5c157a02e9ccd4a192e6156300b9d276bdf560b2e8c75035ae8b980","ssdeep":"768:eucsL8oSEp69qN9LkhdwNkLVANWdCVGWfqoEdQUzOCR7j4U:exsL8tEA9OLkTwNkLVANWdCVGnobU68f","tlshash":"b9e2f13305057af0ebbc30b72d6636293dd4c445cf218aac1a5eedab22694794c54fb6","first_seen":"2026-07-07T21:30:05.723705Z","last_seen":"2026-07-07T21:30:05.723705Z","times_seen":1,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/c912a7bbe13aa342b2aed20526dffe80.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.081Z","timestamp":1783459775081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/c912a7bbe13aa342b2aed20526dffe80.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DbS9SKOW1TKWvGc%2FyO13b8F3xf%2FeFnKlSbbHmy5cJYFTBiTQr2oZhT%2BBISF3Rm1ZZoHI4PRtCLP6pq%2BnaVdisAvMq%2Bmd7w9nn%2FLT5STOv%2F2LE45GH6XC7bUgGtE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a49a6dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7583\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7583,"size_decoded":8249,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f31a86f536ef5f6190c2d3d2cc6dba24","sha1":"15a4ab681029c84fdf90c7a363e0e4a803ed614a","sha256":"461110a1ea3e6c61d8169da409d9431bfedd2f21e319d635e7ad153d20c5adf8","sha512":"5cff71308d246113dda3081bcdf6a2fe76c12a311a1488581162cde800a8b39f442c9b8439a84f6240fa894fd603d21f44cab678b0fa0269b5a49dd2a62f33e7","ssdeep":"192:rGeN9+pLiopVjNeuxGdT3+ZK42vdCLN66UHAEfFoS:r983pxxGp+842vduN662AvS","tlshash":"82f19f3884b577b9e91401311472a6570fd6c23dae6a0a667d16f140b8dc5abaf03afc","first_seen":"2026-03-03T09:05:10.382112Z","last_seen":"2026-07-07T21:30:05.725893Z","times_seen":3,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/662cc4f1a39d73f5ac585cfcd292e323.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.104Z","timestamp":1783459775104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/662cc4f1a39d73f5ac585cfcd292e323.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hs6xYRPgTs5C%2B0hDvcotJMwd0ckS5O8ysyNWISjA4Cx%2FqIzNqJmvZci3s4JB7UHAlWpeHdTGkisJAQbOozfGvqiQFPZf76etFEDAqleFIXNto%2Bpi7BlrdwT7MGA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a69d4dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8134,"size_decoded":8792,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"180ad7b71a49a57de5646fc7e012e08e","sha1":"0e670deba3054c6e0c67fe313f84d2e1ee2f1473","sha256":"03af599e569da47e9b837adfc5397a02ccbcd9491f2b43c8117d5f07047d4a70","sha512":"fc9e08c2e6c4efa24018c3d120a26fa28b15bf66093820e356fcbb360a345264727c6de2d9ed3a2053c0abd7552b2010c1f5c52a40f62ab60b96bba911b30e4c","ssdeep":"192:rGEoVzS+lFEz3X9GBw14KW6ob0pV/W7S1KZy4G41O4WBvbw1K0BZin:rQhXGX97WupV/W21P4uCBZin","tlshash":"86f1afb71156778bc2c1c6b91855861143413f180f44a34fea96661c2fbeae7b6b4207","first_seen":"2026-03-03T09:05:10.388669Z","last_seen":"2026-07-07T21:30:05.728051Z","times_seen":3,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/1d05d4cc113ddc0897ed543ca2eae0ef.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.116Z","timestamp":1783459775116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/1d05d4cc113ddc0897ed543ca2eae0ef.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q7z5hTK2AuDA%2BJips5Lo8ZFSI64F%2BMmhSmxnb1MOv54MGetnF%2FnWARZc2xmg0zi%2FtiwE7nTgv%2BQxdIAlSwsDxjIB745LB8o8ozAYXzG%2Fx6J%2FG8mrH3CyrE69Iaw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a79ebdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5840\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5840,"size_decoded":6506,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e640a533bf72682699c0ff4827df1e6a","sha1":"60161230c031d94ad1bf26376c8825ce569e9440","sha256":"26bee13a3ef1e193553cda38856b81e476bc80f82041a9069651766a50821714","sha512":"2b348faf2255d131b2ce20b3e1df8a038a875971e74b877e38095d2aafe1bae620aba6a2619e3c77662bb382a53c78411d9e1575c76e8f877b4de295002cb093","ssdeep":"96:rGPb9jHmU2ZQGcUtcdBoCsq0Pu/S7BrE7nbdXgzyjqkUaeJJTC3HtLstf4TLABIp:rGj9jHTjGcDeG/wI7nZQIFeLTcNk4TLf","tlshash":"e5c17d1032a34a87d04c617e30dac72926c8a6b838f59ab689c5aeedc11656166bf258","first_seen":"2026-03-03T09:05:10.31371Z","last_seen":"2026-07-07T21:30:05.729873Z","times_seen":3,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/d867a24959743e8d4d0991fc514d734c.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.128Z","timestamp":1783459775128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/d867a24959743e8d4d0991fc514d734c.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ITHbZoPQ7d0Dbrkt6S5kdK5T7cioOh7AG5oDnmHXk3qxAWgjbE1DVplPIUJN2NW%2BCrP8VAXAJDpSXixRrrPpcjjQFvNYVFbr%2B0UR8qFKh4aFvt9xwUJlenvNZJ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a99f6dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4126\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4126,"size_decoded":4782,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"0feb94b048ca0a1cc31da15b4a7fd837","sha1":"564bb17a8a8a7c4a874eaa9d3ffc2d9840e248c4","sha256":"1ffa147329f682125a6d108c7fe81fd861f20a6c519cbf6dabc041aeed1d088b","sha512":"a7356551d6ccec7db4e5bf343493eaf6dd7bea42d270c1f1976eeaa1d060ad2ee09f750ada5f251130f3286bd6be0f8bb531134cb355ddc495792473fc00bfac","ssdeep":"96:rGPHsUFNbmKUnJgOyyvok2aF7oq3pZx9z+4scxlgHyqiz3ZCZYKJ:rGfsYmKUnCj0o1K7lT+4sT7t+KJ","tlshash":"d6817d6d0b722ef1c51440b0961864222bb0d28fa5c5634c5dc175ca8de1bfd9d7edf9","first_seen":"2026-07-07T21:30:05.731858Z","last_seen":"2026-07-07T21:30:05.731858Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/b093f84dbd04a663cf8948fe138828f5.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.133Z","timestamp":1783459775133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/b093f84dbd04a663cf8948fe138828f5.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bd8Gl2f%2Ft%2FNwwMYvNpTMthHmXRJI39r6rVAySqyBNWbJi4E0a5es7CONxxD8C02gZDQq6CzB5%2F4GowMuqVXWN%2FVkeHwKkCNWbyAk4VDlPP%2B4BaS%2FZxSy6GAEFp4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a99fadfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6511\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6511,"size_decoded":7175,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"a86264cea3e819376dc31f3a90c372f3","sha1":"84f16701c535f7d933d02c858f750bb5d413fadd","sha256":"6a0d37657fa2a621396594829ce7ce9b9d910c22132fd92e6dccfebb537749e3","sha512":"fe43aafd3ab57ce48bbb0d9a24e3cc9eda9413f3cf6baaf9de2c69ea33a68a5bfe85f0b7c0dbb725002b78b9aea084d0b024850d5816097f97cc151aad816476","ssdeep":"96:rGPTSNhKG01ngBcx7X/X0czeTEO1gOkvV3i5J82RUOVuGX3uneV/WwVqESlTHT:rGrOhG1KqzOEaKd34JbmOwm3878C","tlshash":"3fd1ae79508e4488e4743ff1ee039aa35a6762142e642bc37607bcaf5f75c858c91cb0","first_seen":"2026-07-07T21:30:05.732922Z","last_seen":"2026-07-07T21:30:05.732922Z","times_seen":1,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/a42afc6d4d9649754caf6d6ceba6438d.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.106Z","timestamp":1783459775106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/a42afc6d4d9649754caf6d6ceba6438d.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fgOFNEDa1A%2Fi441RCD79iex8mxQLVF0WLpVYt5h8V4gR4v%2FWopHUGmcUaqWb6onUB3A5fvUHoZFksHbrifqAUM40hQNn9dgIw3A5bhCZld%2FEBubWIViMVRu1LbY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a79dbdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6997\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6997,"size_decoded":7655,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"32ad8c7b78a4d1792024d12fae4c2124","sha1":"1b1c8bfb670040e23bebb247470c23084abc7c77","sha256":"170f7e19c44a3aecb3799a0f65ca9f9d2b6d5af80845207ed8d2bdf13aa46ecc","sha512":"997c6ffeb6c739986862a3a056d1b4d56d6377e07788bd850fb5f2dde3def551c61219f1c1af93c1e11c78f5180c19020fe4163a3888e86966871f453fb8b1fa","ssdeep":"192:rGX2ha5PgRYM9Zer91TfKZvBg7gESsAN/TW5a:rBhyM9OSJBg7gTsANEa","tlshash":"42e19ee81d74c384c4d10af82442860cc635f5a1b9002dc9a2eb6b783afe5f5ee9a4c8","first_seen":"2026-03-03T09:05:10.300867Z","last_seen":"2026-07-07T21:30:05.73424Z","times_seen":3,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/13e2070d93165b0da8a532fee2a56824.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.126Z","timestamp":1783459775126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/13e2070d93165b0da8a532fee2a56824.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2BfnokKDsAy3i9rTU7flkUV4gz3Woq491%2FsF97v1TYYBl9k3j9dZ8PGtYm86e1C3FwqLlyprK%2FUGUgxCI%2FClINQnTh9o5pThFEV1Jyl%2ByEqINJPpwhAvxGv8UrA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a89f3dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6114\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6114,"size_decoded":6776,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3d26a270d86c5df240c992a1c928afce","sha1":"bc8409cc6b1830274d50c86330389ddd0aa4f579","sha256":"86a8b1cd6b6f1472e4fc6a2a1ac45e701ce0ec4fcba07458aa46679166b56fcd","sha512":"b19ffefc75b0d9f963099345c8f5d1a1e56c253f27d2c0506b4058de5288b683cb7fad40cbe58f46a58ef2c9f8275efd3e3bcb117df01a9520c3f8ac2cac85f7","ssdeep":"96:rGP4xLfqN8SYD180TIXM1JI8PkdrV5oGBgFv026GuvdZigNTAWyiUMgUAWrKxG1h:rGAxrqO9Z8UIc1Jh8zg9PpQdZixWyhWv","tlshash":"d8c1a0264516bcb0d84c91bd5dc0452b3db1ca1fa7bc19448c477a477ce05ef80df915","first_seen":"2026-07-07T21:30:05.735588Z","last_seen":"2026-07-07T21:30:05.735588Z","times_seen":1,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Manrope:wght@400;700\u0026family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.618Z","timestamp":1783459775618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:40:55 GMT","end":"Mon, 07 Sep 2026 08:40:54 GMT"},"fingerprint":{"sha1":"D9:28:A9:54:1A:AB:B3:F7:ED:1C:3D:AC:A2:8B:E9:4C:31:2E:49:90","sha256":"2B:CC:2C:CF:85:D1:93:0A:F6:63:9E:9B:B5:2F:BF:5D:31:8C:49:5F:95:46:90:73:08:3E:85:F4:71:40:AA:9B"}}},"request":{"raw":"GET /css2?family=Manrope:wght@400;700\u0026family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 07 Jul 2026 21:29:35 GMT\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11869,"size_decoded":1525,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"090172ba7f45d35751e151b6892c8ab7","sha1":"22f013c3ef878c7e947e6c4d48b5f265de904cbf","sha256":"19e8057c906990ec71561f17c48dd4fa867195e4c1e85b2e687516e72466b036","sha512":"466b9971efbc3a23128bbd4dabc5b8a078cf4adb0f0607333c20b81d8076b75ed048b0bf7d56a131e96efecaa77136afae91a8f2b0649e6fb75df1d7730d0bc1","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExl1JDEV3WW89/JGNV3TT80s:vXuM0p3w62w","tlshash":"66329991002be400ab871cc273cf7e3aad8e60856085d5ba5bfd0cc9acefd62536475e","first_seen":"2026-01-24T15:12:09.11449Z","last_seen":"2026-07-19T22:08:06.742732Z","times_seen":63,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":12,"connect":8,"send":0,"wait":21,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/6b06e197100fdcf3ad8c04510bcb86d4.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.422Z","timestamp":1783459774422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/6b06e197100fdcf3ad8c04510bcb86d4.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Gud6MR6koEPPSU2VBfSMe%2FIuICTmtIsHz83CqXXPSF%2FlHE4wMGMG7ZnBSsZ%2FCXb4yFkSz%2ByXaacCILuLiN2CBWdikBdnIgbY6VkZMmVKoLAw9KzXzXecg7Gr74%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2062f61dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3093\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3093,"size_decoded":3753,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"fff54d1f21ebc559a4b4c7dff79693b4","sha1":"1876f6d28dd2945ac7b3a8623db808280156e70a","sha256":"e285bb41e2ee56bc985b0de79eafb942ec17e4da8e7f63172c3006d1be392ac1","sha512":"d1507d1371ffcfc74f5e07d846500e54d9ef64f6a6e66baabdf804381942b9db3f2ec874ba1abb4d3893dc93b193b03a7ad81c5b6efce2b419b053ec23ca6c80","ssdeep":"","tlshash":"fb515c3cfaac8a45d04903333aacd8122c0ca56895037b2aadd7b29375e419ac41b828","first_seen":"2025-11-23T07:50:03.934919Z","last_seen":"2026-07-07T21:30:05.740537Z","times_seen":6,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/a5daa5afa057a94e9aa0eea021c10562.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.428Z","timestamp":1783459774428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/a5daa5afa057a94e9aa0eea021c10562.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Db99n4CYS1JiF8rw%2BMAs0AmtYkArkGo0JVO%2BMAUkYwzSjeTm1wqOBibVkLwKZ%2Fxi%2FqtU%2FoO%2BxwrzwAUN7gqTHwgzONzAOayxVeTikxKkh1Hf%2BdiHT4L%2FgNeue2g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2063f69dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1529\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1529,"size_decoded":2197,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2f014fd21c069d9d09a5dd7edfd45b93","sha1":"e5579696cba4763508a6311823dc3ab4930e3895","sha256":"fe281fe5d9c3391b153066c8c9af59a98dd598309bb4dc011cc9b19c61cf014b","sha512":"76122a538d83d224d1f00495b61ec3befd44f11b052d44e0e3556ff59f91260b522c2294aea874da1ea59cfa8206ebbf298003d5c9d6b1df2a455d25d4428171","ssdeep":"","tlshash":"7531e905b3146c11e4592b76158e0221b33dc7b133f3ad0d5a02f420cd2d2a7cabdc14","first_seen":"2025-08-30T04:55:23.60497Z","last_seen":"2026-07-07T21:30:05.743142Z","times_seen":12,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/eebf6e65bd3ac7cb3de007bfde4217cf.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.434Z","timestamp":1783459774434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/eebf6e65bd3ac7cb3de007bfde4217cf.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MZbXtb%2FHRe670i3x07w2FE8wgQlupq4oyaWlpTiUYOUfNdCzavrEhGENacDvFrclZmw1G9z%2FYydIl6lFhCQLTSh%2FEMUyws3GcH8Xqtf8k28PLjCb83K3XZOxZDE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2063f6ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2424\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2424,"size_decoded":3082,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1d3ae251cb9ae49f0ccd9db9d09828fc","sha1":"0ae54cf074def52e619e7422e753e5ddf533fcd7","sha256":"51f3c9616bde6d3f6c7bbf112e9e0ef3e7de19aac04406cf45cf227814320184","sha512":"b2fb9246970c614bf5d848208180305c262391966b598d604afd8baf43fa083c95b76a5f5ecebd41977e16075e3f37201fc4ca313acd9c5f69b9c5930ce2e400","ssdeep":"","tlshash":"40410a1756485e8eec6d03721442871ea129cbbe23923b583cc1d25d09b4babc80fc70","first_seen":"2025-08-30T04:55:23.634975Z","last_seen":"2026-07-07T21:30:05.745165Z","times_seen":12,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.725Z","timestamp":1783459775725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://96.casino\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 01:48:31 GMT\r\nexpires: Fri, 02 Jul 2027 01:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 502864\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-24T12:52:38.642296Z","times_seen":245054,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":24,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/083229cf47e8c26c63c1ec7d50fd2616.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.399Z","timestamp":1783459774399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/083229cf47e8c26c63c1ec7d50fd2616.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4N748hDoohuVXvwKsFVzBUCErZTniNoKUEeZzt3kvFst2nXObHp0Zmj716Pp75XMEB6rQ26%2Fp9ziy3hN9glcwWa4n5X4IIjX0qX3sPDjCR4v%2FhJhsbiTZKiMLjw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2060f3fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2075\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2075,"size_decoded":2731,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"014f8c0700f2e1c2ec236d60d37e74d0","sha1":"4da84989e5c9b9ee2bb9379612272d097f2e1303","sha256":"0e57ce19e6047586c0bc618fbe712d434fef068b51d0818b71ef220773032b09","sha512":"f423b0d1ca1d8491465e3de77c56d74101224bb9af03bd28fca08de88891c7b88ac2fdfcbbc8affa4e885fc07c9adcf09a5999a6977210801ffc168d9f1c1617","ssdeep":"","tlshash":"df41e842e678390ac95a033501edcb2237656d6863c65f91b9d1b658086d1f6c923a6c","first_seen":"2025-08-30T04:55:23.485545Z","last_seen":"2026-07-07T21:30:05.748239Z","times_seen":12,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/f692ce80dffb36d4471ecb792a59de43.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.403Z","timestamp":1783459774403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/f692ce80dffb36d4471ecb792a59de43.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZtZigWygkZzx8few9X77en4rjMa9AIG4zVhCB9syisF8JP0iDqJTPwNsxxVReq9vPhmmQII%2FwcLa6AZm6Lmcg6UtMMs25%2FFz%2B1vljKGe1sX1Oot3OilZb%2Fjwio%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2060f45dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1492\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1492,"size_decoded":2152,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"5962fe371782fec5c9f60d346d5e9c12","sha1":"b16f59d7b8fd046da9f26f67763bf905210b15a4","sha256":"e15515429d028b8e8e105322a8ceaf5c419d16ec2613eac6e4821ef7993c7963","sha512":"6b8a730201ecbaee31b5d499d4a0cd3b03387e029dc07e58fca6f609ff0c4d3bc7ded93ad5c31156d7adab70ab744ff27ddee95b27218a03731a0788a41923c4","ssdeep":"","tlshash":"4b31c609aa740d0aeb9d133042490670727191b772775f17eac2bf258a343a3a013e5c","first_seen":"2025-08-30T04:55:23.442138Z","last_seen":"2026-07-07T21:30:05.750205Z","times_seen":12,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/8e495b9e73e12c1bf1a4769574bd1d14.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.419Z","timestamp":1783459774419,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/8e495b9e73e12c1bf1a4769574bd1d14.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BcL9Dv9XioTwjPvoT5NX1evnT%2BRvw%2BwVoFkmWNBq4a2Rh8C3mrsYddGo9iA45qkRIOuljxXianPubleIvpAr3JiPb2m4JZZqFu7C0yLcYMmBKeyTV0AektfehSg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2062f56dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2115\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2115,"size_decoded":2773,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"05cbe12bc2f2ee9beba89d0173e8a77c","sha1":"f42f19e70480a33bdff29a363488f633895ee522","sha256":"69e05d5cb18468a097e4c3e351d221bae156e6c2a3ee456f0ac80f13a64b706a","sha512":"27260a0048b2f1cf9c623c0907e160e309de883d517353a79fd5fe3e966da1f74a20fdd6c4c729e9e9a6d464660bb8affeb5f2fe2318736207ee0c604199ef70","ssdeep":"","tlshash":"f9410a11f5967d22ddec1671597a44320efce7b8e62326b58c8570169220a3bff03c08","first_seen":"2025-08-30T04:55:23.63395Z","last_seen":"2026-07-07T21:30:05.753547Z","times_seen":12,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/626a595a8850d0fcb96f0c8752fd0201.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.423Z","timestamp":1783459774423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/626a595a8850d0fcb96f0c8752fd0201.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aiDXky1mriCKMoZbECBjqu%2FWeB3MjkBAzwwr6Lbm5iBK0FiRTObhVjrVWmw1jdXh7%2F5VjaWCVTGuTrTMHs5v651jKhsPkHoh%2FaUtVrrXF5gBJA%2Bg9rGDVWzEzw8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2062f62dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2925\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2925,"size_decoded":3585,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3efbd2d0ae2aa80a453408a2226aab5e","sha1":"b5f27857ba8ece1fdfe259e8aa8a5383a7460e75","sha256":"77b6b0a8b4414afda24e9304f5870f8028a2fb0811cce103a404e73c1d1164c8","sha512":"3b00007004642ab73174e2b0d283da5acfba7bab27d56829cb0ec300600e7a885d3c179e07a7d8ccfd74591646d705cd1318dbcc5fcf68bdceed91a41b171fdf","ssdeep":"","tlshash":"c7510a5932a4bb66ec8b077518c9430e77324a613b0a8b932c4f7522e9e49a3490be1d","first_seen":"2025-08-30T04:55:23.576211Z","last_seen":"2026-07-07T21:30:05.754874Z","times_seen":12,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/7ffbd160c16b1adcafbfbd7ee0ab7ac2.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.432Z","timestamp":1783459774432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/7ffbd160c16b1adcafbfbd7ee0ab7ac2.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hdhKDDLYqZDONfd%2FfPMmrUw%2F6ODYGp%2B9JI4uwNaCgZUkmFAAz5noUIOp7gFWq%2BxUN5pKaITLR4WxgnVYtUKXeXenRR481JY2UFYAERBAKI6xC1U1ZsFw9Qk%2BW0E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2063f6edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3146\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3146,"size_decoded":3808,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"8212f459d8d8043c6c54cfeadf2984b7","sha1":"67319de12b096d97f8c8ef75ab3ff64c6696865a","sha256":"69b1f313780cbc2a83a2416f86038d27aec9bb96d63ddd18613b2f8cdb45d73b","sha512":"92049e5b524075368b3d82fd68801de2d9f8dd31f48ec1a8043704a60caf1cefce8b03a07ea134a8368f29c015a84769934908be3e777eff5067e8bfc89dfbaa","ssdeep":"","tlshash":"33513c12630a4d92f39c733782dde1d52a2765c5bb930aeabc51f0519b3d029c007404","first_seen":"2025-08-30T04:55:23.453161Z","last_seen":"2026-07-07T21:30:05.756369Z","times_seen":12,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/css/assets/sports_bg.7c3326af.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.957Z","timestamp":1783459774957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /css/assets/sports_bg.7c3326af.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/css/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/plain\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vQOy%2FRDP6YDKcSg8L7blwgCNX4xxn%2FNsOV8bAXmmROAqhtyb6KcHe0e31eXr07BhffPBGtmgMPGwujuq0R3HwxMl%2BQTYTeoOWKiMXlzyn%2FPgK6nw4B5dvzXXWSc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2098924dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13,"size_decoded":603,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"1e6cd917ed71a1241e4bedc29264bd98","sha1":"5b65037351caeb0e5a48d963d7ffa88d0271d546","sha256":"7d04f7431bbfa41a04bcc7e6b98b9de0d919756c4c671c5785c99fff45f16402","sha512":"90e7e9f406dbb9a55b45643d6b4afce103cd565b33e40397b8422e3347ad3778220f8d1ae7befe66db61ce796d3e22d24cbef5fd3ecbbcb5f89a852d19f47e99","ssdeep":"","tlshash":"eb60000c0003c3cc0000003033c00003c000030c303300330000c000000c03c00c00cc","first_seen":"2023-03-08T15:13:39Z","last_seen":"2026-07-24T12:21:00.916479Z","times_seen":16255,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/css/assets/slots_bg.cf8c7458.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.966Z","timestamp":1783459774966,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /css/assets/slots_bg.cf8c7458.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/css/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/plain\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kAAV0MzGPIL7yjcfF6oepLbs6e7AZUAlJ9gVwJNc%2Flq3i4xSyMgLVKSQW5ekX4u6HhW5sjJrqNFJuINgjgqsXkFxxChLWv1ChbEm54n%2FGXAV00YhvW22Lg1z018%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2098935dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13,"size_decoded":599,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"1e6cd917ed71a1241e4bedc29264bd98","sha1":"5b65037351caeb0e5a48d963d7ffa88d0271d546","sha256":"7d04f7431bbfa41a04bcc7e6b98b9de0d919756c4c671c5785c99fff45f16402","sha512":"90e7e9f406dbb9a55b45643d6b4afce103cd565b33e40397b8422e3347ad3778220f8d1ae7befe66db61ce796d3e22d24cbef5fd3ecbbcb5f89a852d19f47e99","ssdeep":"","tlshash":"eb60000c0003c3cc0000003033c00003c000030c303300330000c000000c03c00c00cc","first_seen":"2023-03-08T15:13:39Z","last_seen":"2026-07-24T12:21:00.916479Z","times_seen":16255,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/js/main.js","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.391Z","timestamp":1783459774391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NMTQvfTvDBOCuHFiXZsJsrvHM67JEFXICOjWkeW2g7aJyrvTqnQt5%2Bij0iqsGI1%2F7N4WtV27NlsvxdxNFtwWJ7KTsiJK6ARVCm%2FKCpG6gdhmpvnOmIPYXGP2OYc%3D\"}]}\r\ncf-ray: a179f205ff3adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3512,"size_decoded":1852,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"2fecc1e2d4a87c1f11e6ea86db887f18","sha1":"9d35b91b5296c96269cda8ee74a6ec4c9a626841","sha256":"621823cb1ee7e78e848c216e299dd344291535ee097e72c39461e30f363f297a","sha512":"3bc33d6505f776b817a7d063874278929513a8d2b9b59664daf5a56a47758c342387336628f9601e1d24fb584c0d018489e5bd6f876090b9fc1ab6891718103e","ssdeep":"","tlshash":"0571002eb9e3157250b771af53afe26832b40447500ace113e9cca945f60935177aed8","first_seen":"2026-07-07T21:30:05.757928Z","last_seen":"2026-07-07T21:30:05.757928Z","times_seen":1,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/2be9d3e09b5a8fbc51a3488d677363df.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.413Z","timestamp":1783459774413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/2be9d3e09b5a8fbc51a3488d677363df.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CI811d%2BRSQCEjseJb17eUPYyjQgWtmfElbsQ1urETn17g1agWOg%2BxRIxARvls2v5d9NzpELSUGenmAVzZqN%2FSV9F4XWlwx5CuNRbMfI9IdvhX3NBsQyLv8x6vko%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2062f53dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1601\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1601,"size_decoded":2259,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"534e3425a597692c8810f64b5ce086b2","sha1":"49047a46a3bf43e42302c1cd5196b658d1969160","sha256":"6f9bec03def8859a5222ad7602c389c061ae57470b42f3cae605531c772e419c","sha512":"992637a5d59b456b13967dc20302a69972d0dd84edd2472bdec5e14e23046e8efcde6d2a8843e7d8230bd2bc7e3f00dd6fadfd35bfc8e3c8fd362c488aa5d0ad","ssdeep":"","tlshash":"a031b7811368aca5ed9e0778165e4b2327394ea45bab626b84e172501a38773cd3f861","first_seen":"2025-08-30T04:55:23.589185Z","last_seen":"2026-07-07T21:30:05.759126Z","times_seen":12,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/icons-sprite.svg","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.940Z","timestamp":1783459774940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /icons-sprite.svg HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z5WiZ%2BYjHCwj7rbFjoOD7K9d%2FQjM5TC5IromHOum7Npq0VUtCHmOkv84MRxPscn2r7%2FG38fort69T4JnTGh9IkylGWilOskMQH%2BPUnqHBwI9Vclsv5w8AGxvwfA%3D\"}]}\r\ncf-ray: a179f2096914dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64978,"size_decoded":21077,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1cea0717f8efc6c7d788c4aca2116154","sha1":"39b78209662b51502c1b08559ab6cef863753cbf","sha256":"5ff207495509c4ee5a02f8699f4d440ff36a835fe4289566d84ecf7d20e672da","sha512":"a3398a84569a8f206dccf4047d6b1f1eaa593c28f9232172cae763b2a406c9becc30344bdc0ad27cf1f48bdd3c81aca1281344151c81ce5a0dccfbe8e6d65fd2","ssdeep":"768:xoicu5dypd+Cm7NB54f4Cc0yAHKlUWO+WDNme5rzzAszkLpiiNoJ8:DcA4U7Sf4ClK8Jfzw88","tlshash":"2a5387f692f8a6d9d107d7e4f921a865651e18ff7fc0cfe48190afe592310da8a4cd80","first_seen":"2026-07-07T21:30:05.762851Z","last_seen":"2026-07-07T21:30:05.762851Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/css/assets/lottery_bg.808d668e.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.969Z","timestamp":1783459774969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /css/assets/lottery_bg.808d668e.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/css/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/plain\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xsT9EP5Q6957M%2B3V1BcwPwv1dpAGCi4BsOYyoIaW7MGBmh2rDcf5FWcNZZMtTSUUnfEyq%2BJME%2BkJSlqODz%2FspoqAYRyxK9Z3Xu9FjWyFLlZ8rdpA%2FX8NkJ47VX0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2099936dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13,"size_decoded":605,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"1e6cd917ed71a1241e4bedc29264bd98","sha1":"5b65037351caeb0e5a48d963d7ffa88d0271d546","sha256":"7d04f7431bbfa41a04bcc7e6b98b9de0d919756c4c671c5785c99fff45f16402","sha512":"90e7e9f406dbb9a55b45643d6b4afce103cd565b33e40397b8422e3347ad3778220f8d1ae7befe66db61ce796d3e22d24cbef5fd3ecbbcb5f89a852d19f47e99","ssdeep":"","tlshash":"eb60000c0003c3cc0000003033c00003c000030c303300330000c000000c03c00c00cc","first_seen":"2023-03-08T15:13:39Z","last_seen":"2026-07-24T12:21:00.916479Z","times_seen":16255,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/e904af778b527a2e6ed5fb13e749f733.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.109Z","timestamp":1783459775109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/e904af778b527a2e6ed5fb13e749f733.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Or0CZAlP7FL%2FF9vv4vabAGzue%2F%2B676SGVVx33cC7VMavcMhNg0tL98ly5u56L0%2Fq1ZqAgAilc3Ph%2F%2BaojCnc8OPHz8RgV9HqVmmFVc99T%2BoZUexHSM%2B2rOVE8jI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a79dfdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7387\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7387,"size_decoded":8055,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7b0a82aebeb2cfabf68ff7de22e40b8e","sha1":"e639ad9a1bdd92f5153595ffb6e5856056c64dc2","sha256":"98129b8a1202892780301902c6a18793c088ed5ea7b25790fdd1063f4dacc208","sha512":"155b478378e37f50e4f719985ef86851496563a458812c41f616f1d4c42207105e24863c5327acc5162f3b2ba766b567f10fc73597f25bdd06f8331b777ea6b7","ssdeep":"192:rGqQpBwSHyDmmaJJmQqyMWbJijan8Dr3hlYS8vj:rWP3m0JmQ95VtW7Yj","tlshash":"8de1afdc71ebadcde4fc2a7a29c5d0005bc5b290277a5f478218be540d53da31c79687","first_seen":"2026-03-03T09:05:10.130854Z","last_seen":"2026-07-07T21:30:05.763966Z","times_seen":3,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/44a934b47824498ca97b18dd4f0d81e1.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.113Z","timestamp":1783459775113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/44a934b47824498ca97b18dd4f0d81e1.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0PNVgAxZ%2FkKCAEol9zmo%2F3q5LDWBzcdk1MK27%2FJZ%2FqntzWG6%2Bx1A6Rx7dMEhDfsL7uYlyONvWMSV%2BWrvNl5OtTe%2BQxAGd09OY5vlzo6%2F6Uk0I6%2Bccc5JrZF9nvY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a79e8dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6399\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6399,"size_decoded":7069,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"10a910cb93af495be9c47bd6c1f62700","sha1":"45e50f9910e78fd283c69f74816d2bbecdbe44ac","sha256":"030e8150d42791b5e69aa1d63e3499e8cb6c0632dd5a49ed04901b98accb9605","sha512":"2199ac3cde6f4377736d06f404812fb8e36463bed28f6cd5cc39f7151211fb9a3dc0349434f7f2264f342f470e387131349696a76b2db90039ee7f232251d435","ssdeep":"96:rGIK3vE5m6zB0YbOB6uMY7KY5bvnx8UjBcBY+aO28sBHPaOm3SWLLCDFFJNi4ue3:rGF/76zSlF7hXEYPOICOkXsJt5nIS","tlshash":"c5d19e1816659d11d07d4572808c833722c1609be6faaadf7fe7f964ec348e01fd8b65","first_seen":"2026-03-03T09:05:10.137642Z","last_seen":"2026-07-07T21:30:05.766816Z","times_seen":3,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/d7ca1629ff9a22f8436911186c050741.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.118Z","timestamp":1783459775118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/d7ca1629ff9a22f8436911186c050741.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ReJhRsV2eCBsKyIjlRFPmnORH8awW%2Bm13bPVBrIfxPbNvAX4kx%2FFGISnhTo5m04voy4WDS%2BDIWK4fO1rImg3hl8JcIRa1F3DI00wz70X5P2E1ss%2Fdu0vTZkrqw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a89ecdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8334\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8334,"size_decoded":8994,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"4b230cfb6ece5b1b3ec176c8c2a4d919","sha1":"d33dd17d79ecb4fccf21f9ae77e6d9b351750efb","sha256":"430a4257281dd051ee8ce3994bc64b5254433ac076318da137fe606cf3ea8f2e","sha512":"bcebd6c0d0e444b8280cc8b94c23acccb011bbfa0565a36f69922ab6810cf6d0aad882482adb005c5f6c9e1c10de4dfd8492f44ea381c2483522e0d00840e31a","ssdeep":"192:rG/WZks6ocgoBgMaCBtm9sLoQhmnI4oLkpNA0tX6XWtH+TKlW7uwWqTIDnzM:rQs6ngnMaCtgsLBwGLkpNA0B6GwTKlWz","tlshash":"f0029e42ca3936f5d09853f808e2f1a47a86c37573299b599cebdb1c640e835976ec0f","first_seen":"2026-07-07T21:30:05.770071Z","last_seen":"2026-07-07T21:30:05.770071Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/7e0ca3ce34a5e6d492dc9844bd1b7f5c.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.409Z","timestamp":1783459774409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/7e0ca3ce34a5e6d492dc9844bd1b7f5c.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ks3m7%2BUYSVf6LfgvxSAJTNiCmIvHVzqiR3q5YwdRV2M4%2FSJ6KO%2BnRlCt%2Fd65vo1Bk3ClTidzpgwdrzc1PiWRPuZoJpstDoUDc%2B1EzWHps2op3IC7CBs8AG3fQwM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2061f4ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1603\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1603,"size_decoded":2265,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7f7c507c0fa1df6430f9dcba2ebe127c","sha1":"941bc81a84fdaba24b8912af8e932bf1c65daacc","sha256":"26386dafe0868971650e1907cae8954a091881f946200d1d87fa185c03e175b0","sha512":"ecefb79ffae6bd06d9adda405d924a77e2970e24ab6c093f619c22f6cfd8d18dc99791cc1d757b473aff130c8cf482629e159d547717a63af8a456fa6fbc1f1c","ssdeep":"","tlshash":"e131b75523101907e869037b085d99273765b4b1e70f8e699a89757581786e3c806e10","first_seen":"2025-08-30T04:55:23.468956Z","last_seen":"2026-07-07T21:30:05.771328Z","times_seen":12,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/f2fec64415aaee01bd04c90c2cdb3730.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.420Z","timestamp":1783459774420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/f2fec64415aaee01bd04c90c2cdb3730.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PdIC6qKULri5fy%2Bd1iRTgdhz5YmImwF%2B3MeQ8zrj0vIuuQFls24uT0Gv3pw0t%2FXMLSo3DhfPbZz9YRNIMb12dLCdVzi1RoqmP5QSKdYn01GpsApKI3lP3ygohOQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2062f60dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1755\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1755,"size_decoded":2413,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"496cee534de9a8c1ff311e709a5b8f02","sha1":"a43525c68f39cd7a8299914655614c71d1daca6f","sha256":"a2a26ba422d3c114be35087bf9fee5171d9c647ede01fa373f5fae85a54f17f5","sha512":"b91c8838b757d3003e08ef51af9072241292e4c17edf814e965a0bbf77dde1608f8761fdd5981ba337c5eb82a00a79a486150a2e8327b60a4d9f179786ac0240","ssdeep":"","tlshash":"5031f82b12103d02e97c53304d4e46222631582f7b2fdf783e83a1b50b0cab0d372ca8","first_seen":"2025-08-30T04:55:23.438095Z","last_seen":"2026-07-07T21:30:05.772495Z","times_seen":12,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/2f48b55c775818737ea423a1d39550f6.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.436Z","timestamp":1783459774436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/2f48b55c775818737ea423a1d39550f6.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FCTfVJlGiq76ddRgt7gPwHfQjCEi2ZhLoLQhGmlgtTmvAGx5LHnsh8E%2FGRyQ%2FwjGgFBKnxlmzSu8Zjhcp96VfeWvEOz9KvS5a%2F3yTbm6Ii4KeYr3W9mGisi%2FS30%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2064f71dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1773\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1773,"size_decoded":2435,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9927820567d84935c0e8b0d84b56a9f8","sha1":"cb162fcd328e4bb042542e97cdfabe69ebbdaedc","sha256":"28332dd1d4885f67043ea9017bff00624c7a34ebf859615fcda51348f4a34e50","sha512":"9c9c555fa9aac549c444fe0bf89b6b4a3667861dc74f087eb0fd5fda7b79421b56a1668329eec60cb9f23259e90e5218f6736dd0677fdeab1e89240ecdd07b7a","ssdeep":"","tlshash":"7131b4222f310847f7ed973a08ea4329a7399f0963559fcaba82b272dc350a34513a55","first_seen":"2025-08-30T04:55:23.473983Z","last_seen":"2026-07-07T21:30:05.773495Z","times_seen":12,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/0c72a85f7321976590721b32302eab16.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.120Z","timestamp":1783459775120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/0c72a85f7321976590721b32302eab16.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u9szfG6HyzZLB8BElYaoBmxEn0f9wCYM6Rm0jMKfQG%2BK4WMPCmlTfHygp6z1FTqJkh99Le%2BYxcCDSqV4xZu3wiN8cuqeG%2B06s4NitHP562URw0yc7iiB5OAMeUM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a89efdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6255\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6255,"size_decoded":6913,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b24467ea549022e16e21e093a60ca370","sha1":"c372d5bd23de92853572a890ed96ea9a8e9cda2d","sha256":"72233ab7fcb4e9a751324518be37b4a2943170576370fc1e34f3e4af1d9d3d5a","sha512":"57bb658bc9f94365acda7701c4a28fb99300e4da94d17e55b4e566792cb9b03f44d1663594ce6e125a65427910fa4bf3fdd21b39efe2ab4a8053fac511d8609b","ssdeep":"192:rGCwHt/RXAI+rmL75h2LUtH736cDy9cG6R:rMtJXAI+r479XG9cN","tlshash":"98d17e7358f71732e118d03cd581ef26873613dc652cb28b0907a8ee1dc99bea5c1969","first_seen":"2026-07-07T21:30:05.774773Z","last_seen":"2026-07-07T21:30:05.774773Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/c09945b7b41a359a3d6887c227b597ed.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.130Z","timestamp":1783459775130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/c09945b7b41a359a3d6887c227b597ed.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wx5tB%2FMWRhUEchmR4SQQVNhTaoGj3G4n81qy0%2BghBzgNDpKZfN0DhzHWBJNIQ7dylUKBk9Te7QGwWMx3qPBPD4gAA1e9f7%2FvbDzQ6S4JWg2Ez50tP9Fsz6AR3gI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a99f9dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5283\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5283,"size_decoded":5941,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"01b080f6b510321f2fef342823574a8e","sha1":"a03c18b7e278ae8ef108df735ab581299ce36b41","sha256":"4a3ddbf478fa5514b786cae90bb891ab886170e89887f7762b24575e3da21a85","sha512":"36bc1378471e7bd1b21d2f6fd965a6ff24a8c25be7a998f8601f06fe7bae1d0f2ec8f461e14faafbb56016b90d8f9b2d6523ce2e884e00dcb7fbdc0e6d6e8f06","ssdeep":"96:rGPSbyPItKYTPQ2mhxKHUZfk7KKVZxL/saPkdJGHvDFVpCE9Y9ZQeFV1:rG6WP0XrQ1hiU18ZxIQrngaYs0X","tlshash":"04b17c9576f01c01e6988774094a3bd4d0f10678278eeb391d2eb6b44e5c8faaa34c2d","first_seen":"2026-07-07T21:30:05.778568Z","last_seen":"2026-07-07T21:30:05.778568Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/css/styles.css","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.384Z","timestamp":1783459774384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NzaxJto85uOcmSLmtn1DqwM6q1WOUepSPFx%2FFeMCk0Xi46l7E2UUnR8q1%2FpRFu501nTAtVSZFsM8VPeVq%2FKoZyI5FVCjIenWseiXMw0NNxzDRHGuLFJabxenlP8%3D\"}]}\r\ncf-ray: a179f205ef34dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14059,"size_decoded":4288,"mime_type":"text/css","magic":"ASCII text","md5":"df95924b7502bb4492c7f2fb5b7247b3","sha1":"e5b08ca2a79a7b75482d0e7e6a6f4533a90fccc3","sha256":"17ffed6314fcf469934fecb2130abf18267abc7e48fd5599cec9c7022f292d2b","sha512":"0cae5e1675d46a6b79fe00d16099548282c7f358340e3f2353e1969d725cab2c5ca3d2b7e8f29afc4001ec97d36a7818ef49058cd6974e5c1c79bffa8c73848a","ssdeep":"192:kulJdVdBt/4lmRGPbWBNzmPpl0hmULKMOefvsOnkZraCOeHrbX4tnRwmr5BfshC1:ffblGPbO+FZ27gP1Hrb4pSxZw","tlshash":"3c5252d26b722574783be5a47587db8a733c9042850ecd7cbef4201c5ec93ea54a2b8d","first_seen":"2026-07-07T21:30:05.780509Z","last_seen":"2026-07-07T21:30:05.780509Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/3ca6bb8ad53bd11495d108fc682ab9b2.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.425Z","timestamp":1783459774425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/3ca6bb8ad53bd11495d108fc682ab9b2.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f9yzGCRtRgFCtwkGBpkpmJhVGRNXd5ZpGlfYqn0RnW0D3rNzdqOD0K%2FhQDb9zlvhFJsOi2iTRY36aft%2BocDFiozsA2zKIJdxoQ6nY9ldKmPUhJmzXOacB8kL7Zs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2062f65dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1922\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1922,"size_decoded":2578,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"03b5d6b9befc65c287c0fdccf4212577","sha1":"ab0af00350e892b9c3ecb755a503e0fd60518a92","sha256":"228ec97f0d40826421b6089404e305d354e6d46942bc9c0362f3ba85febbdbe5","sha512":"30ddb80b425b231ab7586d7ef044187c8e898121a3ff623b89840dc37112738f6624c8bd21cfcac9bdb2f9568146cc8557bd28b91a6e269214bdecf36dd25232","ssdeep":"","tlshash":"c741d729e368aa5acc8c323d8d6a692213ba29179316fb71a196f544d131d73e130c14","first_seen":"2025-08-30T04:55:23.604013Z","last_seen":"2026-07-07T21:30:05.78262Z","times_seen":12,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/2aa185b17ba056933a7ca450164b400d.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.051Z","timestamp":1783459775051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/2aa185b17ba056933a7ca450164b400d.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4VTu2swXeN4AiJXbwBXXj%2FLxHBQ%2B9qlmhLswqDO0NgPBM4vtkKLNRxwPrE%2FNTDQSHBfaDEuNBrNNP8rWM2Cw%2BgRwd7KAlLW9euwz%2BAM2kqKBg5U%2FrXvRUgULCQY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a1989dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5075\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5075,"size_decoded":5739,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9a77dfeb872fc831f936830ebcae53f8","sha1":"97951380ad35bc21e113a0cdb17f048535091c65","sha256":"3f136122491181b18b1cf333a2ee833409c91befd63b081d7ea1cf7ed82f2562","sha512":"1aaf71765d0e3e6119b13dc026dfe503994f2b1f4335a64882a7de14b998fa42fe69a494c7929e8135f2189329f6fcb254d1a6082ebdf30845d6e07d48b288a7","ssdeep":"96:rGgLcSXU7ixksC6goG9CQ+6y0boAMwsAWfSG9r4F22jXr0ks97NSY5mWNDM:rGKc6UwtGIQ+0bpnsAI4F22jXr0jZZNI","tlshash":"7ba1ae8a58bac432c15dbd7760b8037ab23328d105677d4b26c1b9b71f8c6d2d626c2c","first_seen":"2026-03-30T22:45:59.542684Z","last_seen":"2026-07-07T21:30:05.783936Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/9e69a4b10b1521bbb3226ca88329bf23.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.074Z","timestamp":1783459775074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/9e69a4b10b1521bbb3226ca88329bf23.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QK37ghG0n6nx4c6IEY08HgoAirJHk1Z4ZFra5DHhRALN7ULKox31rIIt2u5ssP8%2BvYBUof1ss%2BAv3yXq2jLJH0yv6lxH%2Fu61ahCWl7bdtKz01WqoqmMTAXQzKzM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a399edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3099\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3099,"size_decoded":3757,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"5eaa10cb87d2c264bc4e8a1aa81f0953","sha1":"85ae30bc73d5dae302d53af8084e51974e152f78","sha256":"a07828411fd867b6809856a5979d6ba8d893980002d1cbd9cea197c97c990302","sha512":"2cac0d29ce480423d9ff750c3323d4a61d3000774d7fd768aac5fc6b33442d2ad5d1628a580a7b03937c605fcc47fca90ad8dc9c695e794c2ce8686148669f47","ssdeep":"","tlshash":"c5514dd6426800f2fd01423683916bd101d8dbba9a50fdb3e5897d39597b0f88af4194","first_seen":"2026-03-03T09:05:10.299727Z","last_seen":"2026-07-07T21:30:05.78492Z","times_seen":2,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/b5216efdd83e4788790aa7875416f7f0.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.122Z","timestamp":1783459775122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/b5216efdd83e4788790aa7875416f7f0.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5I%2FOhwP1NpXOZExLgRIfHT5BHFUiU1ewh46vOkpC84fVQgmbC%2BfdQr%2FiNAiIijdYEWBqu8w8gwgwp%2FLweDrkGCGes%2FT6%2Btzm9t6ms5%2FzH%2BArSHyZbM4IWzhhTAc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a89f1dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2721\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2721,"size_decoded":3389,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"106b4d167e146d09fd509395438f99fa","sha1":"e203362077f02ab5915caaf8e2b87f5e3746cebd","sha256":"c9bc8304ec0f5e8c559531e146be8c05645e12260db95974e849d222ba543de2","sha512":"d1d10604599e060091eaf8daa2142b0e5809156bed34421825c8f6065d095b3a0175ab7ed7df0b2dc649cc967966295f163088c05a0a42f65150262fd964ad1d","ssdeep":"","tlshash":"cb514b26b63a59c2e90903f90401b22d015b9174b145bb49baab2d0dbc408335e0ef62","first_seen":"2026-07-07T21:30:05.789546Z","last_seen":"2026-07-07T21:30:05.789546Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/sports.87435137.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.136Z","timestamp":1783459775136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/sports.87435137.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uXu7DdsVaEsV8mZM7bLOGH4uHWhlOlaRsaZW0W6xjLoWixVqzAtIpXvErT3q9%2Fa9sTPUI%2FNmB%2BDfILaYWLMBxPpUhL2E%2FPokiWW5MiuKvAUzacbLnPlH92qa3Ss%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a9a04dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10314,"size_decoded":10975,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"87435137f0827711ce305225201dfe7f","sha1":"d07bcf85d9ee97af1b823447f3cb2136345f0e26","sha256":"1ef712f67121a0652c791425cbed94eb9da26d4f8e7135f0094703e14f440524","sha512":"69045e210d1380f5e4fd16dc9e63077eceaa763a472906942ebabc4bfc883d0b8c9ca8cac9d164180d557f2f6a35bcb99c95dbf45c6bf3ac8a00777bd6d41bb0","ssdeep":"192:rGvDge/Ctfdml6bSN8inmr5JhTE7eIn0V4HAtE68ULuD/8TP0rs/Ye:r05/CxbE8inot6gtEzb84rgYe","tlshash":"6122bf5c42a38602e3b845bd4b8e57043ac2c763e1724734e809e7cdf75386ad7ead66","first_seen":"2026-03-03T09:05:10.408367Z","last_seen":"2026-07-07T21:30:05.791511Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/casino.f664be93.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.140Z","timestamp":1783459775140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/casino.f664be93.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=734REKCy18rP2y37Q8K8vQZPmz00kbHRR1bcBTL84pxTmZC8sAZ33MIeiH%2FjTdnNlF2RrEFVsXfzi2TQ2n1iVIaekFpeehCs0jhhRBvjvN8qWJ0Gi9Mii5LWQds%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20aaa06dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12564\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12564,"size_decoded":13219,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f664be9375062145ca87f7412f11be10","sha1":"964560d175d6e1acda0aadafa556049a68d3271e","sha256":"f1d03325fe2b6318b730fd74bad13037c9ea66cca586e0f5e47d7adeb1c132f1","sha512":"0b7c200f3c513c2e1f7b59f8dcb8ffb693c83cb54977acddab659435757f040496333a568b08cbe64320b4fe1ff12e0e19e9d8eb95cb6618d81cca400cb84b10","ssdeep":"192:rG/pSq3N8uEwz3AER9eNQYxI28bJg8vFJ785GDJelSnRrbITpomhxQAZ3ow:re/CuAEi738lZJ7iOK2jmhxQs3ow","tlshash":"9842d0c28261dcd5deaf93b80be859a13f811a6cff270cf5a39a31f955f0092f504648","first_seen":"2026-03-03T09:05:10.39923Z","last_seen":"2026-07-07T21:30:05.793635Z","times_seen":4,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/8d89af2c2bc35336785c08c40b7042dd.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.437Z","timestamp":1783459774437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/8d89af2c2bc35336785c08c40b7042dd.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nOECzMtmVnYNxO9R37r87QS8Ne5IWob7Wean1UMz4C5JuOWPMD9EeeGDu%2BGzLKS6ZG30nWcLxLF0fgZQGRYh3VDl74dgG%2F9TksbAp7aaQfV7Jej%2BMn2xdkt8s8c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2064f72dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1377\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1377,"size_decoded":2035,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"5f981df3170f71628891170c65fe36a5","sha1":"d54624d532e2c3b0fbcdc6773b0cd4831d42eaca","sha256":"ab4444c4522aa5e236288faccf812af7ba3e6ec3c960d943d93c1a2ec72e1a72","sha512":"4a7b03e8efd1334f556621756dad3eafcffdd45e1828f8336c71920527eb1fc0e1daad26ac9a97068aaf12bce1b11228888eeaefa02a2d4f25abbb76d668f201","ssdeep":"","tlshash":"4a219817232c5d12e45c7b384adb41213a38d2b8935bab6b9bc1f230493d6f2ee16c50","first_seen":"2025-08-30T04:55:23.523143Z","last_seen":"2026-07-07T21:30:05.796653Z","times_seen":12,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/css/assets/casino_bg.a2253ec0.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.960Z","timestamp":1783459774960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /css/assets/casino_bg.a2253ec0.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/css/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/plain\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xRbknVJnq%2FnVcDY5X4M5DSwpJf21UU9uzuczx2PFyrIAPywvuK9aswbRbs5nBuXbdsHRZ1pOjLsefaxRLeRR1vH%2BqfzonZWA7uklC%2F22334BgaB4wjOlaqN8m%2FE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2098929dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13,"size_decoded":603,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"1e6cd917ed71a1241e4bedc29264bd98","sha1":"5b65037351caeb0e5a48d963d7ffa88d0271d546","sha256":"7d04f7431bbfa41a04bcc7e6b98b9de0d919756c4c671c5785c99fff45f16402","sha512":"90e7e9f406dbb9a55b45643d6b4afce103cd565b33e40397b8422e3347ad3778220f8d1ae7befe66db61ce796d3e22d24cbef5fd3ecbbcb5f89a852d19f47e99","ssdeep":"","tlshash":"eb60000c0003c3cc0000003033c00003c000030c303300330000c000000c03c00c00cc","first_seen":"2023-03-08T15:13:39Z","last_seen":"2026-07-24T12:21:00.916479Z","times_seen":16255,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/7354238ef135d903e5a7eeff4654f8f5.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.075Z","timestamp":1783459775075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/7354238ef135d903e5a7eeff4654f8f5.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S86%2BFbV7IyzUpN00kP9BiUJTO2%2F%2BQmDQS1zMZKBeIq9uCB%2BKAZ1lHMoQ1HMbdsXiynK8yFxpAw7Ok7ZRbMUScL78hkbCx6HS%2B1klgr36dK6yo2XjPN5ttaZgVn8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a399fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3904\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3904,"size_decoded":4566,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"d24842ab7f43f1a9b0ef7c2c4a11c0ff","sha1":"7e0506051492856241ab6395ea1f1c8ad4ae85ed","sha256":"b1037c36a4c6f816b5fe36cce59f254074bc3c4d5c9a7eb6c10a8d2198abc462","sha512":"7544b204cdb14982545437b6569bfbb55ad0c8d362d3fda1d173a882fe77c03673ad5f64b06e66232e3d98c70bdacfb7109ea51a31a20db0c10463f80c4f4495","ssdeep":"","tlshash":"b5814c2676fa5a09f52c02b41fe09f662740ed26e38cc24d45af75088c3db80fc245db","first_seen":"2026-07-07T21:30:05.798535Z","last_seen":"2026-07-07T21:30:05.798535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.728Z","timestamp":1783459775728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://96.casino\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 01:48:31 GMT\r\nexpires: Fri, 02 Jul 2027 01:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 502864\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-24T12:52:38.642296Z","times_seen":245054,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":36,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/6ffd92cc1bb6835547e5f8d057c93b10.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.405Z","timestamp":1783459774405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/6ffd92cc1bb6835547e5f8d057c93b10.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K37f4dDAJumJtzTV6oJ53spozIV0BfNfkuG2Dx7Y%2Fuzwj4kRKbRhogj1Kv4qhcL%2BBxx4%2FPpnjU0ZGjTY4OB6p9evrF8NE6Z9J8wnOTcYrW4%2B8CS%2FUf1t0UF7%2Fvo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2061f4adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2138\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2138,"size_decoded":2802,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"97f441f4b26279a5f9691f127b1bb804","sha1":"0197f1b55506dcd96a507329d835ddcb39033034","sha256":"306a1322d3212c140e087b4c1850438d52e8c2a8f31bbb7100c342b8db819110","sha512":"e22adfd645e7007348caa13243fd6d70392f595925b36a11fe04dc6ae766b0702468b69c1b72ddd3f9e5a588930ba12b544d2c9a17e5c4bdbd6b24b014b1bff1","ssdeep":"","tlshash":"5f41181299e05c97ecd8477d08eb03527318a6b4332b9fa650c6747884a8dd38919d08","first_seen":"2025-08-30T04:55:23.508007Z","last_seen":"2026-07-07T21:30:05.799709Z","times_seen":12,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/css/assets/bg01.19d36018.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.954Z","timestamp":1783459774954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /css/assets/bg01.19d36018.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/css/styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncontent-type: text/plain\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U94TEoNghwqLYPzACNB48FqtdUuXcbmKCuW6yAEtxSB6TfBDZ6hs0kLL9iUxY%2FfMUZOXYrf52XHmoB1BaOngkuU1qRhP2xqN%2FpTEBDhJwHM6A4uEWnx%2BAwoeKEQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2097920dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13,"size_decoded":601,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"1e6cd917ed71a1241e4bedc29264bd98","sha1":"5b65037351caeb0e5a48d963d7ffa88d0271d546","sha256":"7d04f7431bbfa41a04bcc7e6b98b9de0d919756c4c671c5785c99fff45f16402","sha512":"90e7e9f406dbb9a55b45643d6b4afce103cd565b33e40397b8422e3347ad3778220f8d1ae7befe66db61ce796d3e22d24cbef5fd3ecbbcb5f89a852d19f47e99","ssdeep":"","tlshash":"eb60000c0003c3cc0000003033c00003c000030c303300330000c000000c03c00c00cc","first_seen":"2023-03-08T15:13:39Z","last_seen":"2026-07-24T12:21:00.916479Z","times_seen":16255,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.721Z","timestamp":1783459775721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://96.casino\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Jul 2026 10:13:52 GMT\r\nexpires: Mon, 05 Jul 2027 10:13:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 213343\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-24T12:51:31.325246Z","times_seen":35465,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":5,"connect":38,"send":0,"wait":19,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T21:29:30.458Z","timestamp":1783459770458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 21:29:33 GMT\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TdEgVvfV9%2FNB9WD%2FZrUdlGfsguO59LW0Jcyc1PiKeuH3PDflwt66Cvem%2FPEyCf%2FUgoQV4gORyFvbh6a0MAsFvJE9RTQxB2x0dBSIYH8v9DuHAJzzez%2Fc5A%2FLQkg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a179f201ab2b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34504,"size_decoded":6100,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"edcc3c844fe61fa0c7c534b9df4e27ac","sha1":"1eba7ca3b36a08d4b9c83749f2b5e8e11a3ff433","sha256":"510bbd1a8e14511d9e075ee0e9554303b531e8b0be53cea104ef3143673286aa","sha512":"43f369a63cda70d63c989598e5ec855fd3580147a2a29b4a1725c15e829ba3ad90777e67b9ad07ed2bc00c6f47afb539822844aa3926ead492d98424351d6458","ssdeep":"384:oapYFc8OBCtQIWq8pPBa0FGQsAvXk14/jU14u814P+wM062+XZa:0OBWQ08ppa0F5vQmTfJa","tlshash":"7ff2227060c7647f812300c6d066ab6e70e54a5aed05144ec7f9dfea67dec82fd218ad","first_seen":"2026-07-07T21:30:05.802166Z","last_seen":"2026-07-07T21:30:05.802166Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3402,"timings":{"blocked":-1,"dns":100,"connect":3,"send":0,"wait":162,"receive":0,"ssl":3137},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/75d54d115608301ef6333bf296994948.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.431Z","timestamp":1783459774431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/75d54d115608301ef6333bf296994948.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F5LeQrnv3CovLU7i5%2BhKjHIIqcIL1MIkx6AeeMveuIbxugohBarAWFd3%2FfD5BR8IKfB1z1lDj0vTEBb7y0fD8tgUftkSCC5Brq2bIXF%2FgSHLg7zzot8fDYaamNY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2063f6bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1973\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1973,"size_decoded":2631,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e5b639a64550047d83faccdc39af5391","sha1":"634933467439d6444a8ba527d42879e6ff6a41b3","sha256":"7620ce0b2bb6b6fe528154ec05bd00c32dc1c5ca268ee4cd0a056268f3411bbd","sha512":"602e4d6073aea38571c0473c0be013a585d4be4837176112d77856afed00189e2261e04044b08e5fae55f6204c95b0c49c50e8bb4361a3879f93aad4a6116b07","ssdeep":"","tlshash":"4441e875b5b42c01ecec077903d88a0f33f58645b3070d0686d3e8369eab553c467e15","first_seen":"2025-11-23T07:50:03.935867Z","last_seen":"2026-07-07T21:30:05.805482Z","times_seen":6,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/67f89398428dca83ed8d431ed2795402.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.435Z","timestamp":1783459774435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/67f89398428dca83ed8d431ed2795402.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JZUgx2THU0cxywvfaOB0RZjCMl8YbIO5iuX5erhRRCd%2FoGovlHRDNWl8U0rXTezaAXuhWJ6W5jeN5wd1AK1gudqw%2FrwNaZTY7%2FRcFD0X5CaNfImGZqUU1CRAul8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2063f6fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3231\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3231,"size_decoded":3889,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"bf52ac3ae27cec51a8a5fd290b0f6a00","sha1":"ed62dc9eecf7cdde0e4bd5b45c4722ec8978f0da","sha256":"423ce5989adce4bb1a2c6c6488da9688d508d204c6b1aa8515aab63a37c41c7f","sha512":"f23561e2fb2172d0d34a9aa8580afcd4ad2be3f71571b3ceed929b69777c85c6a666c743ac8a218bbf62632a6026618685326407a269dbc2a134c744c336422f","ssdeep":"","tlshash":"a9615b08334a5941d0bc3a730edc5ba50faa407372322d12ffb9b36a5ab7e42c634c24","first_seen":"2025-08-30T04:55:23.505986Z","last_seen":"2026-07-07T21:30:05.807804Z","times_seen":12,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/e43ebd0ec7c2251ee80f61686ebb1812.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.044Z","timestamp":1783459775044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/e43ebd0ec7c2251ee80f61686ebb1812.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qB%2BsoBXdur4ViBsLW2%2FPVx%2BFObL9O7YHufd%2Bm69z5SvFy6rlVKzTZIPlbCTog5%2FsFMVKKW0mgTYRyr6SCVthlM1UA%2B2y2Yg73fuWOP0nxx6aQvLeLD2xV1tzAaM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a097fdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20420\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20420,"size_decoded":21085,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"424f5b59ebe66642bceb14cf4201d835","sha1":"6124204e2d3dc60773a16e4bf52be24ae99e838b","sha256":"0c55c112066d2ed82524656a12aa7b4bde2a7b4c55ba66e64885db6c4e68fe27","sha512":"b81eb0ca900802c1331ddaa15351e0fb55efca54af731dcdbe380c37b11b45e3d903fefad1b9cc50d5e2e8efe6699dab538a0f4b2032f3040b5384004b0dc04e","ssdeep":"384:rgD5lMxDVbrYBuDJG60CchJQke5TbehqcImTCmJkpmxSSPrrZi6S32Z29o:kD5lab/GgcEHTbTcImTC/pm5A3mZAo","tlshash":"8a92d1aea1abe45ccfa985b28d599e19396bc82cc6d3ed51ce543bcc5c400227690749","first_seen":"2026-07-07T21:30:05.811414Z","last_seen":"2026-07-07T21:30:05.811414Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/dbe28a282edbe277d0d9d9fed35939c1.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.441Z","timestamp":1783459774441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/dbe28a282edbe277d0d9d9fed35939c1.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5gkXOhdNeMUO1CJ8ka0oIMpoNEOAUcZz6d78vbj8WnIgXiQ5W2tC4e7dEcZHcrlwWj9J5%2BxDjk7tOi3tdQaX5Yxphi0enOAA%2B9nOmoR%2Fc%2F3qqaSlPBMbAEkPJPc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2064f75dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 873\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":873,"size_decoded":1532,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"65d39f55e57b0c761ac43fec1ff1ca98","sha1":"ae5798312ee40740c6a4f3b8e611d0f7b7b4c108","sha256":"98b69c839e5745e20dc50ee52f9042bf3fccb51427f0ef235f78e6f56cd4abf8","sha512":"af911406ad7d76873435a9135d5512d15e8f3542cfbc0d9a133801598e53f7c30064ec5009fe39623e192862e93f0c160fe382663f73e01bab72877d35331000","ssdeep":"","tlshash":"6c11252a97b41d33dcac0375c0454b3513344719a39aff874c467454adab73acc15c0d","first_seen":"2025-11-28T10:39:44.543794Z","last_seen":"2026-07-11T09:57:09.424583Z","times_seen":7,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/f1f0c873878be7e6d8fb11f1c3dc10cf.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.028Z","timestamp":1783459775028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/f1f0c873878be7e6d8fb11f1c3dc10cf.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S98x9PRetDawD7HaeMJrHp7EUTxVaEXvuBs5zfHe8Npxha4j5XKjxGnOBZvE9JJoBannqw52692kHRCvNymQDs2FtTaYCOvQxZbfz5uRykt6Ao6LQls9i3Z5ATE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f209f96cdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27651\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27651,"size_decoded":28304,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"bce12340460d67d163e26cfcedac463b","sha1":"1e66551881b3c3263eba0fe5ea6034a5c552d43d","sha256":"35b471ad73bd5b4b258110c66b3e2d44a3c79aec6e6ca9f83966b41247ee9cc9","sha512":"89c6043d2123387567fce0da5a19d6a527bbed5a48ee64c0a81cc823201231b8cc60882b03ba0b826aed37ae0b9cf5161a716f709056b6559911387fa1073bd4","ssdeep":"768:jjvVqnJeJKmkod5wCBrXaMC60+a4z3lrzGv:/tsJeJKmkodiCBrXa94lg","tlshash":"5fc2e0d66f85e347e4fbe138fa438f06a114cf0f37da466ba202a205c7499a203459cb","first_seen":"2026-07-07T21:30:05.817588Z","last_seen":"2026-07-07T21:30:05.817588Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/591048c397aa515bd5aebfb302be4ce7.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.070Z","timestamp":1783459775070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/591048c397aa515bd5aebfb302be4ce7.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EYptygG1NAS%2BFQEEmoZSCg4%2FIonVyCl9VrAh%2BD6m2tLuNzxsJWR%2FT34R%2F%2B8%2F9nLmYGAXlh%2F1a2LQjVHktZyRNen8fxUrqt0TLrDvBUcGGkYT%2FB3EkRrFVtSnE8E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a399bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3394\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3394,"size_decoded":4064,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"c1c5e63c7daea9e0c0ffe5d01a7fe139","sha1":"0e00e9c4bb1f07171aa207cfaf740dda8132922f","sha256":"91be6d66027e97015ed99f268c498123a82c02f5b1bbf79319c3ef445f9d4a70","sha512":"7e782b41a143cd97081ffa41060b709e898dab0f53d8cb05b3d364790984880ac99f3fcce3a213ce9f7610ec2c948dd010fe3e043c312f7da74d7482fc0344ff","ssdeep":"","tlshash":"13614a6bb7240cf9cb4946335d4c4a63e9bac75192081aa0c705fe24b8ba446f6b6184","first_seen":"2026-03-03T09:05:10.153025Z","last_seen":"2026-07-07T21:30:05.818798Z","times_seen":3,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/0d73e0124ef64f2b89a0a452b4dfab34.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.079Z","timestamp":1783459775079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/0d73e0124ef64f2b89a0a452b4dfab34.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2FkDVn3VtcawMbuk6iu503ZAo1vaerepJNrw%2B9L52Ca2PkCTqZoLxwPt6v6x9Pb9eZo7OfqoRw%2BwKEeWCRFlX1OJMEmP%2FHbnXpRoaXXPVSQhiNMawCWv%2B4nylqU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a49a3dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9040\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9040,"size_decoded":9702,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f6b382bcccfc97890c32caf25c409380","sha1":"5d53a6771719eb35daa1eac58b9e77c84053f0d2","sha256":"4517d169b8d00229d742878e88d22b6c0e5456a776858c2d8131e985e0f87183","sha512":"825e23173ddada76de0955375b3c434a238f04e4d55881738c89448514bca2b1316ea1ef59bebe1b9a53bc259d1599c383310533e912dedaa17dcd78ee901b78","ssdeep":"192:rG2bIH3rLrpG2mBZjX8rz3gUS6X/OkohtxHxfe3Q3C00UhoA7e:rh+rf/m/j83gWohTNGeol","tlshash":"8b12af9ce9f01328e4d95bb1a2ad2015e2cd4b02e23fef71749ff0a649389e467f5614","first_seen":"2026-03-03T09:05:10.327173Z","last_seen":"2026-07-07T21:30:05.820134Z","times_seen":3,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/c0e6ff4516945de97b03ac1ea74ebd68.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.088Z","timestamp":1783459775088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/c0e6ff4516945de97b03ac1ea74ebd68.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OavYgJ649bG4nIQhIrhI1txy1gdq%2BPXcnp6SBvKY7fd2cF6jH6LNkWpH%2FOjm0Z%2Fb5J6vd3CnRkV1%2B0Fe4N6mXXMAFoSlNt7smHYy%2BevGSX6XNNRaeBJeXyydGSU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a59b7dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6196\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6196,"size_decoded":6858,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"2af04948e29f04250f58c127da235ad5","sha1":"7624ccc770c20b5ffd42cb5460cb05127866ba00","sha256":"d750e325cba8d4d9b52e42e6ce49e3e5bde2a442d92ed34a2b086756a084e846","sha512":"3f9a8f2b10447b987d7bf52b19eb9e3422f8a4b419570da472539956dc6c07b350a65ce479fbed6f9172375369cf94627d296b031c126ce998a87c03affe7cca","ssdeep":"96:rGIiDAPV5sM9myx3iC0EPb05qneqq81+gBn/8id8wM21e+w7s3MisThgsS04S:rGlDm5B9Vx5TdPL/8id8Tsc/FghS","tlshash":"99d17e1488e54dd1ff9c457609e206223b19ce1bb979a50de1f0d1df791713481cae6e","first_seen":"2026-07-07T21:30:05.821282Z","last_seen":"2026-07-07T21:30:05.821282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/logo.eadb49bc.png","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.397Z","timestamp":1783459774397,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/logo.eadb49bc.png HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oDReOgIntp3o9OD6YZAwrVyRXQ3M%2BzEnJ%2FTRz%2F1ECUS0qEVPta%2F0Fx16zUJZgHUsgYnC26pe4SIdw6TYCqN57qjPI4Cg%2Bf2ElDOTRy9hHsSCAOSIo2dHGRLsNq8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f205ff3edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2970\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2970,"size_decoded":3631,"mime_type":"image/png","magic":"PNG image data, 200 x 65, 8-bit colormap, non-interlaced","md5":"eadb49bca71a7d021093813f1ba8a55b","sha1":"f77bfa15967861a25cc074adaf6ce3baf8473b8c","sha256":"2788d840eb2a0272557e855fd4769cd7a02db27df9a8fc5570f7f32efedda975","sha512":"25cd3bb5db17fec1757ccf72fbf1da90ffc0b5ec8745fa737185c9ab2393bb33dc6e29bed69f37c315c507b7e4a9e85c1ef50ee1ab115009e18582f5eaada019","ssdeep":"","tlshash":"ed516e2f1f149c59d30d09a607fd56065da7e8642bd303ef4887c68c690ff80bcb6905","first_seen":"2026-07-07T21:30:05.822706Z","last_seen":"2026-07-11T09:57:09.467622Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/624a99ea82e28dbf8dafb70e5bf983fa.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.415Z","timestamp":1783459774415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/624a99ea82e28dbf8dafb70e5bf983fa.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pw1ryyUxdY02KEAtsRELEtlyk1Gw0vj8QRriqs%2BM8m1xBLCPrwpLPRkaLnVvnXFUGWqevNtor3k1dbZLvfJqHjwSKrHOYLKFOw4Yr8CK1ADPBE4zrSPZVMZcv8Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2062f54dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2306\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2306,"size_decoded":2960,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"47800c34217e0f749ca1f642e5720f66","sha1":"94d3147092a67cf113bb1a8fb0e3d148c8169a60","sha256":"cba6b948cd06dfe7ced3f7dd76175b23c26ad56bd1794fcdba5db9c4330cb358","sha512":"e64fe0e43a5389f52fe2b86f6ae0e4c549781390c9e8107120d1452cb171b208f656dc8286e4f89adfb0aaa4bb1df226219b1d4827e95eb1188082af8297328e","ssdeep":"","tlshash":"b141d9162af84d82d91f0f3206fe97136a33c5142766b61a758372b29e201f1df179a1","first_seen":"2025-08-30T04:55:23.46702Z","last_seen":"2026-07-07T21:30:05.826339Z","times_seen":12,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/e339a5230e165f85365506b0855ca794.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.439Z","timestamp":1783459774439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/e339a5230e165f85365506b0855ca794.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c1e39WW0zoDzq2dwmPTr%2B3UlywRQbtbBT7XMD5hufOAZkXlviOWqzwmUdWrru%2Fz4gv7qKSR%2FVehohy%2FK3vE13wtvooBM4GTpzUHES1TIlnUqmPD20tHAWBGgkUE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2064f74dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1603\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1603,"size_decoded":2263,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"5a46e6694e2f3af3a271739fdf137bc8","sha1":"e598bd6825fa6f41b2bbd7bb49c4f0963a357256","sha256":"bc867a83977c2bb3fbe12d13562c076623a54d49df94b4c289b92c629555c6f9","sha512":"7e02a1fbcfbe4ded028caf022019ffdb6cc651481a3a8fc8abcd81b21dbb84fe2528441a4628766ecf2380f9624295290391e003a76f12a4ae6ea5db59cb5da4","ssdeep":"","tlshash":"b131b54172758c01e89dd73f191d4f67b2a04d7d429bad22aad3b509acacaf3d904c14","first_seen":"2025-11-23T07:50:03.751589Z","last_seen":"2026-07-07T21:30:05.828142Z","times_seen":6,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/314997b012bd14a408487be79e8793e6.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.053Z","timestamp":1783459775053,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/314997b012bd14a408487be79e8793e6.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rpS1028Lr07EParSZhAgalWOAivMhnQA3sBdZbL68K5PmUu5gwadA23AUI82Ezefseoo7m9eW6INxLLbvWor6GazyGloP8EIabOROC%2FA6dPzV9liBLM5JmW4O6g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a1992dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4176\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4176,"size_decoded":4830,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"4071cace8e05b079b8126c54d31a78bb","sha1":"00b6eccb1e34aa0a400991450a54bf183c74ce08","sha256":"3ca10b943acb3a8bb5978ce5a6839c97ef29d71c57b8ebd7411708f68cf46f47","sha512":"dd808cc7477271b973c7121f942249f330821526e43d55b244f7838488777c3126caff2b535e56581003d5eaf229c008ce7a92ee4c1714afcbf6312cd76cebd0","ssdeep":"96:rGPJXJeG7Jh8Xy5TekBijOaFvzU11zR5bYi6c:rGhXJP7cC5TBijOqvi1NGi6c","tlshash":"01815e2a71240c33c0a6d9350b2346d74261da5c16b19913bc07ed32d52522dfeef949","first_seen":"2026-03-03T09:05:10.336645Z","last_seen":"2026-07-07T21:30:05.829845Z","times_seen":3,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/82acc1d38643b1d7ba647cec013553a1.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.077Z","timestamp":1783459775077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/82acc1d38643b1d7ba647cec013553a1.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rRRfzTgloE7Yj1v5HaSXlyuqneb8jP%2FhkXJ7Cerp2tFqeLIzP2CtGI2ZN9p9IdJ6vNLRQ4q6T2isCeUoiCHui2bjEcHgCAwT%2FYRb8EYUBfkxXSNeMqNs3WFdj5E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a39a2dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4435\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4435,"size_decoded":5091,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"b192fa262c8596137979b8714f934cd7","sha1":"5199b432cf847aa231b997cc7bde7f95ce274eb7","sha256":"ff5790bb7d5bade1e51aacaa35b25dea11f7fa9d4eba0bd2df23bda0e19229bb","sha512":"0d201ef3fb25a6ea7456c5ff817990482a6436b3c871b25ff084a5a60662a1f92bb93d9665b591560b03c2cc618ec2e9d036c74c2ec78589f8896641b5a7f135","ssdeep":"96:rGPDbZyehIYcxh5hdb93Cmd49JIPFmhyO4BRfyJ8Sugs80af2AJp:rGrbZyefUh53xSmd49JIMhhuAJp","tlshash":"5b918da10027ac02ca550778cd4d836c21c27b85a3e345dbf9a3a07cf5f8cb7e661066","first_seen":"2026-07-07T21:30:05.831517Z","last_seen":"2026-07-07T21:30:05.831517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/52ea4ef91c3da3183a080859a2f98906.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.401Z","timestamp":1783459774401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/52ea4ef91c3da3183a080859a2f98906.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M8oCKQSy8DbuiuH%2BvQ%2B%2BvrAntC0Nseotk8C7ShTD8WCSGdE2F8XuR1kjE8BWFphj1OvR4n9QOuPu8RCqE6nJFlzOiKHQcaazyPdnmDUIubZVQvv3B1ITNTUcEkI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2060f42dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1683\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1683,"size_decoded":2341,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"256ec81c04e78091cd1c3f40d947c1d3","sha1":"540e5267853fd0173eb0a920c7cb77fc837d0989","sha256":"8e3dea2d8b4615a009e0ccb813b6862d952437096c47f587109910917c0d3531","sha512":"94697d256972d5fd2128d46fc350151e67ca7aa032e66c9e2af813297cbc358a15d9de61cca94960d747c1d7de9cc9e7cc7b334c3ff3e849cdc2d335c3989f19","ssdeep":"","tlshash":"3d31ea5117194dbad0ad4bb508ed5510131ae636239feff6708274a08aec35bed78c1d","first_seen":"2025-11-23T07:50:03.952237Z","last_seen":"2026-07-07T21:30:05.832793Z","times_seen":6,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/8bc8a834e5178a2c7b4b22d2be640b74.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.066Z","timestamp":1783459775066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/8bc8a834e5178a2c7b4b22d2be640b74.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BvF7CmSzzlFddFe6szjfKsSFGDl4f80KTRZFXk1rTBha6x%2FcaoDE604ihvf%2F5VAa5Mgd09zXXmCoIzvMWd1poe8DXbcjpFdyixoAh62tAEF4OfUd6vVvuRt6v%2FU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a2995dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3658\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3658,"size_decoded":4316,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"673f40800c83cfc151e7c64f15f4c342","sha1":"af2d54a714853ce60d66711bd7968d47b0ce2206","sha256":"7e46183d669f91672d837f56a7f4002ad104ef967d671e069d4a01e14b87b413","sha512":"808b16d4956907fe7e451cd205f65b1a4bd1c6e86d0a865e4ed5697d2895198ecbd91aeba35467cf8192eb9fc888b76a3476912ec7f2fafa01985de27893a966","ssdeep":"","tlshash":"10714ccbe84ace44db05b33d32a6ca5c8329d2cbe7eb11c7670703226dac1250d1f525","first_seen":"2026-03-03T09:05:10.251032Z","last_seen":"2026-07-07T21:30:05.834071Z","times_seen":3,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/7857aec704fbbe774e71cb8e0e806903.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.091Z","timestamp":1783459775091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/7857aec704fbbe774e71cb8e0e806903.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nrqEjoVB7AAYlrvDFPCSkr3pvfNasnqkVZemLhbQC1N8nypaDAk2xIFUpL5lh%2BzRSBtwd5ZxxiE90XY0oxn8k5ivlvz41WJz5zTevYgI4RctGnR3Q1yesNQfux8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a59badfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3541\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3541,"size_decoded":4195,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"1f65a2170f3433a9bd307af1e082d312","sha1":"a67cb565d83733e97b718784a3906860fc6d320f","sha256":"cf302b8d608fae6feb1574cf62d313ab5fc6240f5e7acb4fdb17acec05c997f2","sha512":"240ac99c5f9f01157e3cb6f959ddd0b95a30b13c06e9f37f62bc73d4727a7e02efb8c48698ebbb72b7f2c5e6b59e1fb9155b694c5e694b4eee30c8afecab7082","ssdeep":"","tlshash":"8a715d7af253a280e7a4d5f4ec431380472e01a91990cf12d5817ee689bb137b8766d5","first_seen":"2026-03-03T09:05:10.242171Z","last_seen":"2026-07-07T21:30:05.836124Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/92d1716da1f9ea1971b509ab0fea02b2.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.095Z","timestamp":1783459775095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/92d1716da1f9ea1971b509ab0fea02b2.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=54RnUjQlI97GaE7dh7s3abRnSKt8xaOD9a3P02vUhrAtVS6XE7HSOVmFqDiSEvB0dJJ7a%2FflmT%2FSgNj4xZ6SW1zVl2FTH4T3idFccoQDq9Lw%2BdT19uvbjEbEwTc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a59bddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5112\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5112,"size_decoded":5770,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"49ab8d9fcd3aec92fea7bf155cffb095","sha1":"6c3d1958ac4a7ef3cc4962701f5ffacbd0bdaa7e","sha256":"016e6d54b161ad42c3a4046f740c01926b80b2baa3565633d6a3f88fcab18ac8","sha512":"f8331bbee0af27481149e46557372265691df51027267e4495a4b188e15d9524d24b8d4d18cb07702c74a38693d2aa9355e09c2c2834ddebd5a8baaf7be8ee9a","ssdeep":"96:rGP2bP5GL+y8uEwDWuERdmXjLqie3GN/2dIkuDglPZ5KzZ665mqz:rGObP5XHICgnqj3GN/2eAlPZ5KzZEqz","tlshash":"48b17ee7df1c2a01c4480532a39d82b936158cea67c2bd1a9e51b3a5bd956f33931de0","first_seen":"2026-07-07T21:30:05.839929Z","last_seen":"2026-07-07T21:30:05.839929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/abc74f38019d52c87b2ae1e3712d8b98.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.099Z","timestamp":1783459775099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/abc74f38019d52c87b2ae1e3712d8b98.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2Fw0%2BQHQLU5sw4b7c1%2Fl7q0NLDU7CqpEgaSiGVtToCrdb8P7kl9TCmomEzSTAksHijTrOuVdHfeJSHXQ2ROMEVPqxlSq%2FZ0S%2FRPsssR2aDbdLveZapf%2BG88f9%2BU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a69c8dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6687\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6687,"size_decoded":7353,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"7249218028d50af7f827240dde09ca3d","sha1":"26793b7161f294966f4861aa0148f42dea36665c","sha256":"d7f237ff4feeb56938ec5877f28277a32a09011ea6e9f6c2e3d418e6682f6558","sha512":"1606d4f0e000d7df738b566738731555a9a441915f052ebee3e22df9965c302ab7456bff42e87daee6c0dcb4175c065ed810a9755705df63d30b600627d8dac7","ssdeep":"96:rGPEb/jv5WIayJhzQ7TzFjYEnONizuxHUylL6Jj6MzKLGY45EAwGt37PNmORs:rG8b/75WIVAzZVzumJ+hX455597lhs","tlshash":"cad19fabd9c12057c508e1b6033429d4196126adee8c968fe4a5e17298e4db71c3c979","first_seen":"2026-07-07T21:30:05.843623Z","last_seen":"2026-07-07T21:30:05.843623Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/f0508049d205cb423ab49add3ad05398.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.135Z","timestamp":1783459775135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/f0508049d205cb423ab49add3ad05398.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JOWAeKZ76XNQKN8sYmeIp0FAqHunQ0RlddLyfEwBBL716m5P55copgqVku9ZAuboreEEcB3QhCt%2B4zGjLkaN7i07MDW%2BXPFdu68dUL8tYAypGt5jvctJkuHcMqs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a99ffdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5785\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5785,"size_decoded":6441,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"74623e47b9202cf16b23817ae0c63ece","sha1":"d5177331f99707b42810400c620e95917ca57ab5","sha256":"7bb73ea360c871b744a4e4df232ca3ffe590f91ae10c567287b310080da3fed7","sha512":"61b8cc22cca3d472bec375b68dd89b0ebaef7f99f92db59ae4ef253f3cb5c26edb746d3eb0e95d0f084af1d677a186cd79cfbf84c14e9fa7528c39c0df2d97fd","ssdeep":"96:rGILcuPglkn38jwBAAAEt0ZiNlQr6+tN8IrfiD8St0NdUq9TyJqjw2Bkm002R7Vp:rGwhAkavA0ZoQrRjzr6D8SC9yUjwskm4","tlshash":"e7c1afeb930a283ad0847b3524a72707b037c20861e10e41dec6f3a0edac0f1dd7766a","first_seen":"2026-07-07T21:30:05.845008Z","last_seen":"2026-07-07T21:30:05.845008Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"domennc.com/static/tron/bundle.js","fqdn":"domennc.com","domain":"domennc.com","tld":"com"},"ip":{"addr":"104.21.45.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.382Z","timestamp":1783459774382,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"domennc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 31 May 2026 14:47:17 GMT","end":"Sat, 29 Aug 2026 15:44:53 GMT"},"fingerprint":{"sha1":"1A:05:83:B7:48:8B:2D:0A:9D:F0:25:0A:80:68:EF:1E:C5:11:6D:28","sha256":"B3:E2:54:3C:14:2C:C2:17:23:9C:B2:1C:04:0C:22:5A:BA:CD:3D:4E:94:4A:CA:B7:DF:4F:7F:D2:4E:47:7D:F0"}}},"request":{"raw":"GET /static/tron/bundle.js HTTP/1.1\r\nHost: domennc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 12 Jun 2026 10:53:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"6a2be539-4fc21\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NO30TTYLZhHxKrZXw%2BNmpfLiGuzIMKQZeD3HTyAtqSSC4qKndAMiuPrxbIFzTFU39WW7nqjeoBGLr%2FIAs%2FQwXG2uVx%2Bz3WBGICYHRS12SPuNV4%2BshkgxegRfUzPlEg%3D%3D\"}]}\r\ncf-ray: a179f206285e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":326689,"size_decoded":104477,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"b5f4dac62ba734937927cf4e53db1ab3","sha1":"2ebf3e3302bdd7c26fc77b86716495591344f52b","sha256":"01502045495ae1228799305ea3b47ecb524a90dea5950d059d69182be5cf4aa3","sha512":"e0b3b6ef3449e5b81676b2fa0e52485884ba9d9fe57ee59f2aed69117339999a173a39206b3a441e7aac3a7a6c1b2487919859f5d8b022270d974058e4b60abd","ssdeep":"6144:7t/PRxD0LvLVNughJdwlVCZXZgzCN4JyYtKxfz8h:ZPRxkDVNughJdwlVCZXZP2Uf8","tlshash":"6d645c51b7a53129076b0bd2407b1117f2376d9cb10a80acb3acecd66a7c589e46ff78","first_seen":"2026-06-12T20:48:24.111463Z","last_seen":"2026-07-19T22:08:06.748339Z","times_seen":14,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":9,"connect":1,"send":0,"wait":170,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"domennc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"domennc.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/8baaef7b511bd05c440480883679ac42.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.426Z","timestamp":1783459774426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/8baaef7b511bd05c440480883679ac42.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QkBFW5ubNn70Jr5i6%2BqTq1UozekB5oPcWuR5Xux3cHVyWm3%2BlJk2pa0YZHdLuSetP5DV5dRZfppal1yUa3vHSMJn65kEqHEO1muDrMRhvLsRwSG%2FPWVHuXd%2BQqM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2063f68dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2079\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2079,"size_decoded":2739,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"209f766e3e50ea3eb469d7cfe47906b5","sha1":"38642219e038381537b41059575290c7028395e8","sha256":"9d94eb8f386612564f5a5e0997325b93f8d61720f8fda03fd334c813645ff62b","sha512":"b76fef4b87affdb87abadd245ca3032054777a5f6fec028eb02c89b23ae584e44c6c7683c5fbfe2ef0b44f9c265a111d8a7daa30b60209a8cfab5ee8cbd7a00a","ssdeep":"","tlshash":"41410a50ba501d51fcec83340ddacb11d3680778b7938fe58dc1721499adae6d4b2c1d","first_seen":"2025-08-30T04:55:23.49974Z","last_seen":"2026-07-07T21:30:05.851287Z","times_seen":12,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/2801b8744883e35ba4e349717e7e51fb.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.429Z","timestamp":1783459774429,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/2801b8744883e35ba4e349717e7e51fb.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BKrtwy3WgRsdmTMxpDpHkoCLIiLgE30cBE%2BBOoOZglB6QtTiiewPmqIkJCnSNvQ3DE3cBnXSxqYCzVHqDM6EExDIlqZBPvctd7ow63cR94XBukySSoZ2HRf5OIQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2063f6adfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1959\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1959,"size_decoded":2613,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"50f56c5a839f9e777f1d99349a078fc6","sha1":"49d663230846be32df07ab92a1351e6e982a8e18","sha256":"7ef3e43aec60cdd81d0e5e2fe192e12fb8068a64f0075df93da90e24391932d5","sha512":"f5ebf91431d2eb477eccf12210851ac96c87bcc09ebd9baf0bf89ab4393f72eb838c55b7b05df8f8711a9e3b7809cdae04aac94861ff97cd10ea00bcc9ebb9f5","ssdeep":"","tlshash":"cb41f914a65a5816d88c3335b5acfd76362a9d6c93627a689c883e90d0b0162c92dd8b","first_seen":"2025-08-30T04:55:23.463609Z","last_seen":"2026-07-07T21:30:05.854156Z","times_seen":11,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/4fe8de787f93da5938a90bd98b23e9d3.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.068Z","timestamp":1783459775068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/4fe8de787f93da5938a90bd98b23e9d3.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=POkBt6FedNl8CAeYweKaesj6mflQNxZp%2FRhBsYRAet3d9MAOipzTmEdRi2j7rOA8Gchd4ulcrhwt6hmXq94Tu6QSPQwDxukbKKwuP0i2%2BaWsyg7BYZLVBs9%2BZ3w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a3998dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3816\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3816,"size_decoded":4474,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"9e61340fcbab082f9174f41fe3991ff3","sha1":"b8b83cf203a8d98e9ad82ec63ba85a4069006821","sha256":"eb02251bb8d85e1ce46029a7af5558b74f39262da9027c6cef895e47c082f071","sha512":"ca5ea5121dce967eb3aafebbb3a03480618be4282fbf8911063f689ba9419503478a78b72eae9627c19ddff00b97684096e39f6f53772042a44dd77340adb36f","ssdeep":"","tlshash":"c4716c76cb556c41f21473b04929e798e53f06e5be88f1eab80b97140e2c5bb3a0dbd0","first_seen":"2026-03-03T09:05:10.226414Z","last_seen":"2026-07-07T21:30:05.856875Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/fef3bb42cf43d927341d3bbbfde3c876.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.071Z","timestamp":1783459775071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/fef3bb42cf43d927341d3bbbfde3c876.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vEu%2FQhiKIoViAQlBWn3VC2PIB6w2fI5%2FrIZ72YaPpwxIiUxIP%2FJ0wnAVz4IbRADBLG5FTMuc5UADQNQl4dhyA%2BBK0KWFxwAhGlGdyggoxoyH2punih396a0BhKA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a399ddfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4466\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4466,"size_decoded":5126,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3f3ac23412fc7443c0491f22b046541c","sha1":"e7ae7fdd580af3a49c91fc9c17fa4eda67babfc1","sha256":"da09ed0be2db8045a92b1336584abe2ab005604907db351d2a8065e88ceba872","sha512":"39c4b8eaca21d0a558bf0037171e8650da6b42a8845895eb2a4829a1dbeff18b6532f22066b655e8173453e77f8657d7777b116f605718d67fe2f22ab565b179","ssdeep":"96:rGP61MpwnhUCevDgVPcdHZKZSaPHO0rxc6FG16fXEyXoee:rGC1UCevWcd5KYaPuEN87","tlshash":"1a917cd6303060a1ed0c00335f15226a73c25865c663ff63e91d6064eee998b5d32ed9","first_seen":"2026-03-03T09:05:10.180804Z","last_seen":"2026-07-07T21:30:05.858554Z","times_seen":3,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/35f59ce7c694d083261e0e731fbac04a.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:35.102Z","timestamp":1783459775102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/35f59ce7c694d083261e0e731fbac04a.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:35 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:35 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BfLSPOFI8fNRaBsxppAZXHbVciPbCcSpP9bdxtfbYNHL%2BtpnHgVjn9LXdu%2Bth280YP10Bw3Ndry5uFfFq6pgqCIFiKMECZp%2Bz1cRsKW7k4CdvjwJjqcVb3PnSVk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f20a69d2dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6482\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6482,"size_decoded":7140,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e83fe9d11f2f9383217daba3a7d5da3a","sha1":"5b8e1f780d6f61f15f036ebc3d61a277521ce23b","sha256":"de4a86ea12bc0de318497c1ec593cbf6ffa6b7737bd0bd00c94b186b375119fb","sha512":"597814081b3bc1a33b3c6f05e1f0df44bb0031b3317b98474f7a8d47dadd0bd1d1cce717b0fd9018aa8ab827b06952dcad76c30f265cceead96d93854412d952","ssdeep":"192:rGqIhKLF174UEwy6/Y2jXXU6MU8zSh4NjTOI4l17QB7:rKhKLF35bwiOC7e7","tlshash":"23d1bff797a9c946c3c90e707736132b7a268f3262c827d6711606186c7804914e1daf","first_seen":"2026-03-03T09:05:10.155266Z","last_seen":"2026-07-07T21:30:05.860518Z","times_seen":3,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"96.casino/assets/6221bd20a8dd8b2e1fddab7186d00474.avif","fqdn":"96.casino","domain":"96.casino","tld":"casino"},"ip":{"addr":"172.67.145.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://96.casino/","date":"2026-07-07T21:29:34.417Z","timestamp":1783459774417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"96.casino","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jun 2026 09:35:14 GMT","end":"Sun, 20 Sep 2026 09:35:13 GMT"},"fingerprint":{"sha1":"53:AF:B9:59:DE:BA:FC:0A:2E:1D:C0:F7:93:AF:84:1B:8A:AC:39:EA","sha256":"C7:23:94:F0:3B:4D:DC:E8:13:1D:94:02:00:02:39:59:94:C7:DB:DF:4E:82:E6:43:50:97:E8:05:8C:EE:0F:54"}}},"request":{"raw":"GET /assets/6221bd20a8dd8b2e1fddab7186d00474.avif HTTP/1.1\r\nHost: 96.casino\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://96.casino/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\ndate: Tue, 07 Jul 2026 21:29:34 GMT\r\naccept-ranges: bytes\r\nlast-modified: Tue, 07 Jul 2026 21:29:34 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TS1wJHlagJ17Nw0AxiBjfGEP97OuDF8tsand7Y2N7RmlSyojJzrWLOhJ4S6aQPe8NPtJfxrHjDya6l2pWpfvge0VLosnzo90A9Uag9mCsV29XxQA%2BOc20%2B5TiTo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a179f2062f55dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2070\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2070,"size_decoded":2726,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e5910e1b6284dc3a8f7db688b14959a0","sha1":"d3c2311a8996262930a392d8d67fdf21e670e824","sha256":"47ebebd8f9f415cda876ebb4e2e44ab00f95e20c03144d00ccfb3649f940da52","sha512":"f442f50099f1011531f05ce5ad8f9d5d61f3050b6eaf622692d65402cdc250b3d76fd34a47be4c93eddd57cb5e962061a6053f8ba1944f123ce5d2bd4f435862","ssdeep":"","tlshash":"8141b841a3562d82e5b843784c9536373b315f34738ed584675bb40c89bcbb6ea70c19","first_seen":"2025-11-23T07:50:03.901379Z","last_seen":"2026-07-07T21:30:05.862513Z","times_seen":6,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"96.casino","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}