{"report_id":"8851db23-4ba3-402c-a303-a93d5c97a7e1","version":6,"status":"done","tags":[],"date":"2026-04-28T16:38:07Z","url":{"schema":"http","addr":"casinos-quickwin.com","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"172.67.137.204","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"casinos-quickwin.com/","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"title":"QuickWin Casino: Jouez en ligne et gagnez de l'argent réel","dom":{"size":70635,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (42927)","md5":"2d590f34ea4634ab27f78c220a265a26","sha1":"04264a46310b3bfd5e70240dea0ba06d41a7bbdc","sha256":"da2ab8df022f704c4599de491a0adf8a2f4ac7426f9d6fda8faed47eb729f4e6","sha512":"7680c009fd0965340cb642a33583a2a356658910ac9b71d88db8d1230ded823705d77fd94083c0c85191bd4e91103ba95a005aae748ca44bcff6f578cdc111f4","ssdeep":"1536:1rDdR1HD4fm7Fva8/4j6NRYoymEujvP3OHNLI:1rBR1HzuI","tlshash":"1863c851adc49d52729781c2b003bbfefbad5406ca524db47aec96b4efcb9771290320","dom_hash":"domhashc0ce86503ed3ac491ebc115e3af65167","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"casinos-quickwin.com","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"172.67.137.204","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T16:38:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"casinos-quickwin.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-17","domain_rank":0,"first_seen":"2026-04-28T16:38:09.608663Z","last_seen":"2026-04-28T16:38:09.608663Z","alert_count":47,"request_count":47,"received_data":1755585,"sent_data":23389,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/webpack-2a71d08f41489676.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0051df9a48dfedc7c417f25c22e87d48","sha1":"71ebca39f43d7baacfe05a7bfc8c24b7fca5ba60","sha256":"042ebeb512014ab62f7835ba9fb4ab2259ca1eeba75afb3adcb5cbe43f0fd8ec","sha512":"b5e2f8c68d65da4de1c395f7a6478f8e8751098c0cebdaf4e50afab3c68b4da237ad5a6dfa3130579e1495daf7b14a55c6a788af1ad888153376569ae87d5ba6","ssdeep":"96:6IAgDpEzqynRRuEKjmvFqMug1kkNxNF9VTlVHO/jeE2UjKBOK6nRVG/OGfIfRY8q:64GzxnjuEMOFLBkQNF9Xe7jKl6nRVG/n","tlshash":"5ec1c69e72a4f8b61343a5a4493f9056f13e247b781ed0a0c70ac9b4bc349688533fe5","size":5968,"data":"","first_seen":"2026-04-28T16:38:13.976342Z","last_seen":"2026-04-28T17:06:34.994205Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/4.f2ef4f30cb3500e7.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"36af3c2988de78db7237a2c14e91404c","sha1":"3b93976560451fcdf82b5c4c895cb776e153222a","sha256":"875a60121b561168e9698428d97f0a10e381c33b3ae13ad2e36a94311b492ea5","sha512":"84dab761876641c799bb903aa325c21627aa29e75f5d5c77dfb557f044be51552c1bc195483d7f11cbb84dc34f9df2698135b88318d8c8a6d788c1a143f9dc25","ssdeep":"96:RttlM7abFph7VcQfHX129/QlkJM6c0618vOG18vOLjdwmbbBg1z0sX4l:VlNhDdEQW1jCmbbBg1IsIl","tlshash":"d0f164c2e2c6bfb5adbb18c2412f950d732e2949cb364cb4f974a8015590ce8b1d6bcd","size":7521,"data":"","first_seen":"2026-04-28T16:38:13.955623Z","last_seen":"2026-04-28T17:06:35.015236Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","size":98298,"data":"","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-06-02T03:03:59.004649Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","size":141013,"data":"","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-06-02T03:03:59.000906Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/BdIYLVsK-vFMZ9sLEOM7E/_buildManifest.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"22003aaf1de1b4ff770a49f4ed090ead","sha1":"3722363258d328d7c46517c77b7be383c5ca7a24","sha256":"97a4ddb85a172f771d488f14a572e39ba2906bb030d7c1999652bc305b16034e","sha512":"314e12999c684520307040fedc8168bdd677b5ab1ac533a34da96b0d33311d9d55eb9103a985cb587799d62e1d85dcad4c43d1c7144ca24598b18bca64bbe4ae","ssdeep":"","tlshash":"4b11bd82010ae61a2de8fd47373f1363af528036663c0ab68bcc1d6c55900675f3a462","size":1014,"data":"","first_seen":"2026-04-28T16:38:13.997684Z","last_seen":"2026-04-28T17:06:35.000493Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/BdIYLVsK-vFMZ9sLEOM7E/_ssgManifest.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-06-06T23:10:39.808192Z","times_seen":232184,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","size":2376,"data":"","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-06-02T03:03:58.995982Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","size":8192,"data":"","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-06-02T03:03:59.001644Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","size":828,"data":"","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-06-02T03:03:59.017415Z","times_seen":251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/pages/_app-1d4a0bf23532c9cc.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6aa1510aec7deebfa3dda81632c2a30","sha1":"24cae410307ed9257b788f334dff034835eec0ff","sha256":"bfd7b1f53cfbfcbb1b191e425a6665aef027bc9bc2676c6f5f1272dd166c67a7","sha512":"87e88af059444a12d5f6633e6a3cfdc05365c9b42f1ce1528bbe4443e8c2846aed0b9f04f1879558bd058704903bddb184b57063ddf9cc3e4156f7165137d2a4","ssdeep":"3072:ii1PkPUKsWkGB4HtlYw0kn5DU+djxlozNm8ad6/QQX+uhuxOEowsB489M4cJkcxU:iiCcKsRGu3dCadhQ7wxNJiRs1+HZ","tlshash":"f9a4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","size":487964,"data":"","first_seen":"2026-04-28T16:38:13.958507Z","last_seen":"2026-04-28T17:06:35.011161Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/59-4af4c12333e2822f.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1abe0f2597ce578f1535a7b7ac51bdb0","sha1":"0cf5a627b576d66fa40352f25b5894ac59d68efa","sha256":"28e5b91395bed0926a89a6ae8b20d94ec052c158ecc86cc56dd21a0bf54bf0d8","sha512":"a73ff0e5523210e622e4907038bea6e0c2986e10d26afe1d50ae2bd40449066a8e881f605dd3779abc11f3ee84c5ca1520a4407f7608f5775c15b26272ec5ca6","ssdeep":"192:mzBOuoWDsUDQ9XB73m4O8UbD5y+Au+fJq+p4h3ns2Pamh1VV3YMHF9:mzBO3UIor8MZl/","tlshash":"9a62a26e4a860dae9ebd84e4c527510cd3ec6645b1947c20f7a98503b4dbddc62b23cb","size":14830,"data":"","first_seen":"2026-04-28T16:38:13.968995Z","last_seen":"2026-04-28T17:06:35.005657Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","size":98327,"data":"","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-06-02T03:03:58.991334Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/927.a7dc7992c436ba78.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"169204fe2bcc42c380af5e1ac2be7fe3","sha1":"8a03ce5223655c895c434033b81080a819fd917b","sha256":"e77204d4fe82687b08d2c78d02e066935c1b0c697a95682b12decbf3776b528a","sha512":"d47937c3eca1582d992d537eaccc779735e73d5450fdacdb27f801abff617ee8dd60a5fbdbde063b15a402746facd53cf439b115e864099f1c7537b218b3aed3","ssdeep":"","tlshash":"905131059986fdf9f9ba0cc9925fd53e762eb40f990c8da8fa7488414c098843603be6","size":2571,"data":"","first_seen":"2026-01-03T15:12:30.935058Z","last_seen":"2026-06-02T03:03:58.989391Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2F1spin4win_Lucky_Cash_And_Spins_22bcde6483.png\u0026w=1920\u0026q=75","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2F1spin4win_Lucky_Cash_And_Spins_22bcde6483.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20670\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: 9a+gOWjPYY4qiluwI6mRt6tBY5cKmf2dMiZew8Zltd0=\r\ncontent-disposition: inline; filename=\"1spin4win_Lucky_Cash_And_Spins_22bcde6483.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rg935Z7RxnjTirEQiNODVa%2FNtMujyjbcfxrYrBaw9tEqv95gaCH2Zzpx9bwHHWuL0%2Fw3cNqqmGZX5zGZqbqJ4cUwIyGWLlFGYXWZ6jZwGm5KEs50KutUO%2BVMWbXTUSARJUiGWGMKsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e53df2249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":20670,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f7f85b96f2e8ceb54d3d46dec321ae25","sha1":"e3c6fa402468a91bd3197cdee784301c017d93a1","sha256":"f5afa03968cf618e2a8a5bb023a991b7ab4163970a99fd9d32265ec3c665b5dd","sha512":"ad6205008eda336419d800350d86a09be7b0b5e2b96cc1e00637f2de6ec1d9c486eae2154deec67b55281d0f27407750ac0fdf97d70d7be9e75e5c38bc7983cc","ssdeep":"384:eJAiRDRkcPDx6TD5VcHAEdapxkppUHafktrvnTm7gCVQb+vHHhpiu:eJASRkc8TD5VcHAmpCdm7gCVQSHHXiu","tlshash":"b592e09a2d4bfb07548a6dfe39d02b437e8968160618c1fbd44422c7ad75ac8fe4c479","first_seen":"2024-08-19T20:10:03.129742Z","last_seen":"2026-05-27T00:20:53.039784Z","times_seen":89,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/image/?url=%2Fjackpots-wins-place-2%40X2.png\u0026w=48\u0026q=75","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/image/?url=%2Fjackpots-wins-place-2%40X2.png\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1290\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: DkHvEuSDXRB-vLyYwatTedu5bUGez1prcoJbDhBcn1Y=\r\ncontent-disposition: inline; filename=\"jackpots-wins-place-2@X2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mxAQVxP49M7Vr6LqNikpLHMSsN2iQJ5lb1bF5d1rVNlWYbs6KWycSVZ%2ByTbbaqxwN9a8MJL6gX9RsvN7Qb7wt1Ra7aUAW2HOk5X8HDdUGPl1nFQBmdDkaKq061RPSyXjfR%2BfoRIzBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e53ef9949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1290,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5c9c7c18a4380b493bf276ea04ad4787","sha1":"d72fb256081430ce5f22486d39b79f2f302a5da0","sha256":"0e41ef12e4835d107fbcbc98c1ab5379dbb96d419ecf5a6b72825b0e105c9f56","sha512":"7a917a50029837fde70991553896f2ba46375fb1ce9f2215cfb0c7e28d69014429f616f00b92fb9534aa89e7ee030bdfa2262d543b30efe02b1da082f31aa26d","ssdeep":"","tlshash":"0421c8085ced184ae5821c6ce5b950a7922cacca0a6f461be5e2c9fad148c2c03c417b","first_seen":"2024-08-19T18:17:08.891151Z","last_seen":"2026-05-27T00:33:43.228736Z","times_seen":117,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/image/?url=%2Fjackpots-wins-place-3%40X2.png\u0026w=48\u0026q=75","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/image/?url=%2Fjackpots-wins-place-3%40X2.png\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1214\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: ek0UevHZ-FAi0Kfsh5KGMvAuZZH89YxPoXyU38sWils=\r\ncontent-disposition: inline; filename=\"jackpots-wins-place-3@X2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0WJZwV61bmmtV8ZMfWcalSJXqdUS2xfmy6svl%2Fb7923kU1E1Uv0QLhN8R7e%2B%2BG4NbNQdlgsxkV6s6n5TySkCg92dxpt1CRZyODkNISV9q2SdkHlOr74xwlZ6BzMAx7NOT%2FMYXCCzWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e53ef9f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1214,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6460dceeec5235200dceacf11eb0b7ed","sha1":"dc487405685aba83b1df520c2aca70571b903f5d","sha256":"7a4d147af1d9fc5022d0a7ec87928632f02e6591fcf58c4fa17c94dfcb168a5b","sha512":"9bc78b3f48c093a1c113f20fc42273c525d9b47d42e29c3d94b363298e4fd865cb62866064fbb2319664bd40b19a196cb664650d405ca3f78496edc15d613046","ssdeep":"","tlshash":"6921e79fe0b1083d0d800023a027016f42a2419e769b0ae034524e520e1f20d4ebb7a7","first_seen":"2025-03-27T03:50:55.648055Z","last_seen":"2026-05-27T00:33:43.230227Z","times_seen":116,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/chunks/546.767fc6323cdbff4e.js HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"948-19cfc3bcaa7\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mGboi36XshI2Zvi97j5o6red4hyo1M7Aa9ZWPbuiT4p%2Bx2I8B4L2rbk5I6kaRLlldFNqUvhebntC5O1VUglWe5jG%2FdMotFk%2B5Eq5KZvWLsvwGfVGCgekGz9x7onOQMUzKx8vkMa1JA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e52080149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2376,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2376), with no line terminators","md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-06-02T03:03:58.995982Z","times_seen":268,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/4.f2ef4f30cb3500e7.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/chunks/4.f2ef4f30cb3500e7.js HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"1d61-19cfc3bcaa7\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vVatljR2AbDHp8FzM2%2FMFeMjNvE8eoQj2iR8uUX2edcag8xWYtK0PQYrlB77jH2EVFzpIpCjRyvkY12p%2F3AIYkBfDT0SayExhY36BsXW0GnwikYYpQCBv1rbolsfzbm9oD9be0t5Xg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e52080949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":7521,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7521), with no line terminators","md5":"36af3c2988de78db7237a2c14e91404c","sha1":"3b93976560451fcdf82b5c4c895cb776e153222a","sha256":"875a60121b561168e9698428d97f0a10e381c33b3ae13ad2e36a94311b492ea5","sha512":"84dab761876641c799bb903aa325c21627aa29e75f5d5c77dfb557f044be51552c1bc195483d7f11cbb84dc34f9df2698135b88318d8c8a6d788c1a143f9dc25","ssdeep":"96:RttlM7abFph7VcQfHX129/QlkJM6c0618vOG18vOLjdwmbbBg1z0sX4l:VlNhDdEQW1jCmbbBg1IsIl","tlshash":"d0f164c2e2c6bfb5adbb18c2412f950d732e2949cb364cb4f974a8015590ce8b1d6bcd","first_seen":"2026-04-28T16:38:13.955623Z","last_seen":"2026-04-28T17:06:35.015236Z","times_seen":2,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/pages/_app-1d4a0bf23532c9cc.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-1d4a0bf23532c9cc.js HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"7721c-19cfc3bcaa3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cQoPcoTlUrYWKY3mHJtwXIoCjcq%2FMTiodLU6FRwM5iZ2gjScY4%2Bc5dJbdmFE9yA03vQiKjsYeLc4w64wbw%2F3FeuIP167Ipba8MReM6INigy4miTmu9gA4yuGYmqsd17YDE7VrvEhmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e52183949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":487964,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64562)","md5":"a6aa1510aec7deebfa3dda81632c2a30","sha1":"24cae410307ed9257b788f334dff034835eec0ff","sha256":"bfd7b1f53cfbfcbb1b191e425a6665aef027bc9bc2676c6f5f1272dd166c67a7","sha512":"87e88af059444a12d5f6633e6a3cfdc05365c9b42f1ce1528bbe4443e8c2846aed0b9f04f1879558bd058704903bddb184b57063ddf9cc3e4156f7165137d2a4","ssdeep":"3072:ii1PkPUKsWkGB4HtlYw0kn5DU+djxlozNm8ad6/QQX+uhuxOEowsB489M4cJkcxU:iiCcKsRGu3dCadhQ7wxNJiRs1+HZ","tlshash":"f9a4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","first_seen":"2026-04-28T16:38:13.958507Z","last_seen":"2026-04-28T17:06:35.011161Z","times_seen":2,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fbelatra_Big_Wild_Buffalo_88e93f38de.png\u0026w=1920\u0026q=75","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fbelatra_Big_Wild_Buffalo_88e93f38de.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23336\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: um5JvSs61wtREZ4fYJeuVZFG49yLHdJQfQxj69WSHS4=\r\ncontent-disposition: inline; filename=\"belatra_Big_Wild_Buffalo_88e93f38de.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MJxqxK2U3n9sWiJ9dY5MUXbUKMOCvhfCD00%2FP%2BI7V%2BY6xlmI19GMegeQ4pRL5yMNCBA90VbfwlHd8i1toa%2FpEcLWp%2BE%2F0ewXmyyYCxFZAwPHDcOcy6ZvHuXXGut0KdT%2Fg%2F1Nq3PCqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e53cebc49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":23336,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4cf03c14ea2e0929c09871fd8edbe0b5","sha1":"e82a4fbb214910e3e83460521fe777c78615e4cb","sha256":"ba6e49bd2b3ad70b51119e1f6097ae559146e3dc8b1dd2507d0c63ebd5921d2e","sha512":"762421c57ea1e1ad84e18332aed52b64549ce88901e182708e13493e73c9c0933a749050e804d5232e00e5c5ecb0a0eb3d5a18b81b45b2b3f0434d4424685ad2","ssdeep":"384:QeW+eh5s3NTd5h9UXKgqcglgf3S3aC2QX0qhtx+I7zOFCKZ2FISWKbNndmdQ8aEH:Q5s3NTbU6Vcglgf3S3/XdXx+InPRISF4","tlshash":"d7a2e0d641f39996a6057069a88d56fad2838e10ccc4bd179984a8f31c5fe338a74fc6","first_seen":"2024-08-19T20:10:03.092554Z","last_seen":"2026-05-27T00:20:53.016151Z","times_seen":92,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fsoftswiss_Candy_Monsta_f926a8f5ef.png\u0026w=1920\u0026q=75","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fsoftswiss_Candy_Monsta_f926a8f5ef.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22730\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: 62t4TcX051OuvjJyhm2gc55hyCONJ1dRuCOFnSgXYss=\r\ncontent-disposition: inline; filename=\"softswiss_Candy_Monsta_f926a8f5ef.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=netA7tNZ%2B%2B1kvIj4uDze09z1RXAM7QrBHkO00QN8ekErC1V13UqbaMBL9w6F7Ct27wzoxi8WLSRGHGog4HQsi3O4qnVS85VDIcriGs5AARI4KOmTXRXSwhFxNuQEKuqpQX%2FDOyNp3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e53ced049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":22730,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8766790b2d633a9f78ac939b1049c0f6","sha1":"0dc71d15e64969a630ff4b417f5f5b0e27109d74","sha256":"eb6b784dc5f4e753aebe3272866da0739e61c8238d275751b823859d281762cb","sha512":"ef4256c0073f5a75d3ce978de14a0cabc25f655f40c699ac2bf644c79fb55c56d344ccd38ccca03a1d8d07caa60c7c9b3b0e48e4abf0d5a622a78421bc75dd2f","ssdeep":"384:NpstdaWUT2MGuaPjWcLdsJ5igaXFrW0LZmZvgHvscvJS1Far24+uo9AmFk2brxcK:NGeCMG9CcLdzpPZHvs8JSFaP+uoemmC1","tlshash":"02a2d0cbde0aa040ab15d96e4c72120bfe7d99c27f048f6c84d753a0193adb145e87d3","first_seen":"2024-08-19T20:10:03.127Z","last_seen":"2026-05-27T00:20:53.0343Z","times_seen":89,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/image/?url=%2Ftotal-2.png\u0026w=64\u0026q=75","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/image/?url=%2Ftotal-2.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3112\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 1IQ8dZLvJzt7jJSWdq31UItS+8IY-kyELSYl7ymzCN4=\r\ncontent-disposition: inline; filename=\"total-2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LQ8RC23XBenvPJGQHb0AXn1Z1AF47c57LZTwt8UFtehatxSt37CnAsBFebb8wETo%2FwmMzQx6x8WGCFB6zxN%2FKfwaKVcHjKAmrp9WfZT45qL4lVnXMiTcyfl33m330qDuQMb%2Fx7pZZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e53df4a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3112,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9266ec4c0b5e7ea801409c213828352c","sha1":"d902439770a2f68009eb488fcb951baa968cf6bd","sha256":"d4843c7592ef273b7b8c949676adf5508b52fbc218fe4c842d2625ef29b308de","sha512":"91beb28dafe0f3410ab30fa27e1757ac7fd3107e540330bfeaae0e2246cee3e1d628d577072bd51c169e8a066dd03c9b5c371bc833eda40f7703cc3d55ce9aab","ssdeep":"","tlshash":"7e513b5748b32183decf3207914d412d0782d0df18854db9e8bc2ddea97a2f085898e5","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-05-27T00:33:43.209396Z","times_seen":130,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/image/?url=%2Ftotal-3.png\u0026w=64\u0026q=75","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/image/?url=%2Ftotal-3.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2872\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: OCeyBa9dqIJvgkicFaVXDReSu6lIWhkViWkMV02bx38=\r\ncontent-disposition: inline; filename=\"total-3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u89c5kNGeHSSHQi98AWWi%2FB3sJt2AoMLki7YPF395PVqPzx9q5k5OTeVVM6ODjnNJLNj4NobMDfLtpU5HxJWZIi5xd0O6B86D9K0t6bIuKejjw4hAisqH6r%2B3Ra5oSV1vXOjYqxeIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e53df5549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2872,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15d5c9005a37678205724a79e0c94ecf","sha1":"f84013d6e304be3f339edfce9188a5b40a10a8d3","sha256":"3827b205af5da8826f82489c15a5570d1792bba9485a191589690c574d9bc77f","sha512":"610f90da66f2799eccb5895b7a32fa1b4ab6cbaf7234c5740525f9fc953374052e20a11a32f879934fa28beb9772a47b6a8724484c20a71601ed87631dfa9b39","ssdeep":"","tlshash":"10513b1625223524dc707e718a2b13aca80ba84c0fffd767f1428d634c1496e67db8a9","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-05-27T00:33:43.228311Z","times_seen":130,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/api/report-error","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"POST /api/report-error HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casinos-quickwin.com/\r\nContent-Type: application/json\r\nContent-Length: 87\r\nOrigin: https://casinos-quickwin.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":87,"data":"{\"text\":\"https://courage-dream.top/m4r2mz?aff=max-chi\",\"domain\":\"casinos-quickwin.com\"}"}},"response":{"raw":"HTTP/3 403 Forbidden\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpc3iHnOHuQUUQAJRt4NBqphugzCzCDZvw3U8E3zBltPd%2B0xyZV62RFQ24kBXXRmHN39mF0AnffVjGbnf8tShBYEYde7Lw%2Bfa7zfjmiUQtE5JjTYIkAntHnkeGAfnIQuHzRlgUHyrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f377e55cd9b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9fe3cb2b7313dc79bb477bc8fde184a7","sha1":"4d7b3cb41e90618358d0ee066c45c76227a13747","sha256":"32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864","sha512":"c54ad4f5292784e50b4830a8210b0d4d4ee08b803f4975c9859e637d483b3af38cb0436ac501dea0c73867b1a2c41b39ef2c27dc3fb20f3f27519b719ea743db","ssdeep":"","tlshash":"2cc08c26351e2c0c96a322b402c36a50d092c3304c5a19004600420371c31168ac3315","first_seen":"2023-04-05T07:27:09Z","last_seen":"2026-06-06T23:30:21.824426Z","times_seen":95901,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T16:37:45.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Next.js\r\ncache-control: public, s-maxage=10, stale-while-revalidate=59\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lwkXb2ySnj3BmtTRmMQCypPy1sO2X%2FKkBYFsOw6%2BJq%2FxTt7XtVy%2FYICoqDuMA7c4kpfcODJFlvrx22s7MaKlgT1CdYJCgnieQAQlWHalBimh6i37064YY%2FgQOCtRLUFPlr%2Fgl0ihWg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f377e4effdc56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}],"data":{"size":52776,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (50317)","md5":"5afbdc3343ecde5b526ef8840c917723","sha1":"e8ae106a655ac4a2f15a5c2bc4b47efcc88432f9","sha256":"32701f2b6cdf3664fa6492d483750d43bf809420d3d73cf202eea265b2687a9d","sha512":"4a99628190bcc72ca0015dd4aea5efe022aff7fb58fbaf7c069a1efcb153aa7de9c88b5ec5ef06b87229414d60bf4b610b107b705e054c8e5006dd08a43eabc9","ssdeep":"1536:TZ/j3M/AFImSBc4j6NRYoymEujvP3OHNLJ:TZLruJ","tlshash":"2c33d7e08888ed7757e740d77012df6ae3ce540adae60d907edc89d4fbcb82716a5260","first_seen":"2026-04-28T16:38:13.964926Z","last_seen":"2026-04-28T17:06:34.997659Z","times_seen":2,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":38,"dns":18,"connect":1,"send":0,"wait":333,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/chunks/main-69b63e2e16716907.js HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"17ffa-19cfc3bcaa3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QOIyK%2FfrTmxcVDDfFJJyyhKR2eDTHbg8bNP4Ne2IUEpWfsO8kBia5OtDxQOydDBLZKM2BWuZSDt7dXAW8LkDvsJrPZgCfJFgQEqpJB4PUdAwJkeC5UkKW%2FkKVIfePnuxhmXQKLxyEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e52182349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":98298,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-06-02T03:03:59.004649Z","times_seen":271,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/59-4af4c12333e2822f.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/chunks/59-4af4c12333e2822f.js HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"39ee-19cfc3bcaa7\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bhp2qhgwhq1%2Br6hkz%2BscuI9o60Td7FlxaKVD%2B1bUN8j0mxfJbTc0Rx9Tu8ZK5%2FqUnFuU9hcBTMa5yquQSoSlAAwttY4ylFmRkfofGT9zTeDwAnqdbj97cafpG869vOaS2bmpvQqXYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e52184349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":14830,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14830), with no line terminators","md5":"1abe0f2597ce578f1535a7b7ac51bdb0","sha1":"0cf5a627b576d66fa40352f25b5894ac59d68efa","sha256":"28e5b91395bed0926a89a6ae8b20d94ec052c158ecc86cc56dd21a0bf54bf0d8","sha512":"a73ff0e5523210e622e4907038bea6e0c2986e10d26afe1d50ae2bd40449066a8e881f605dd3779abc11f3ee84c5ca1520a4407f7608f5775c15b26272ec5ca6","ssdeep":"192:mzBOuoWDsUDQ9XB73m4O8UbD5y+Au+fJq+p4h3ns2Pamh1VV3YMHF9:mzBO3UIor8MZl/","tlshash":"9a62a26e4a860dae9ebd84e4c527510cd3ec6645b1947c20f7a98503b4dbddc62b23cb","first_seen":"2026-04-28T16:38:13.968995Z","last_seen":"2026-04-28T17:06:35.005657Z","times_seen":2,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/chunks/966-2601235ce9ca419d.js HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"2000-19cfc3bcaa7\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k5gNMUYc2BuZyYeLYH%2FokWZ7MTGoTvYyFgfNY9TPYJklCaymrqY4%2B4gzlWrUWOHQc4lY1P2Zf58i2hK7YU4vV71YBx86cAyjk7WxL09yOBcsPXg442eK0n0uuylOVmXo2yrDgEJQjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e52184949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":8192,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8192), with no line terminators","md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-06-02T03:03:59.001644Z","times_seen":269,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fredgenn_Black_Wolf_0a8ec1c933.png\u0026w=1920\u0026q=75","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fredgenn_Black_Wolf_0a8ec1c933.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21852\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: -U77pMGf5wIflLXK5FT16xq39RkD7+2Vse+9BiIQbMs=\r\ncontent-disposition: inline; filename=\"redgenn_Black_Wolf_0a8ec1c933.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0cXdMO2AK1p%2BeO5fCb8pgLq9SIbelvm4wv6u5COcVvdfqwZdK0FLVBro%2BmzyvpEN32wvd1CfyHidKZpza%2F2%2FoEXYd6wWcArwc8A89qPpYpynAVnAsnOn0olc117zyr9ZSdHUcfKOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e53cecc49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":21852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"53bedb6b67e143164bfa4534fa4f36d3","sha1":"bff968fc4a385ba40ea1a47a2707b4ea24b2e15e","sha256":"fd4efba4c19fe7021f94b5cae454f5eb1ab7f51903efed95b1efbd0622106ccb","sha512":"b63b0dbd6e04300b3c9960af0e34f4cbbbaf938bf476da0fb5556a09c96f312bcf26594b575a17e6d880532a64d9f2668468353b7f4e7aa93c1b6ed670806e2a","ssdeep":"384:pjrM7MlwcHoSV9gGVyZMmz+BZLG6qR4tycM9VghKWHKC6kZr32KcFEP+YW3U51A4:hrMotISVa+yZruJqjcUqhKB+4Kcw+YWO","tlshash":"18a2f1ec78fe79c856add688316621f5094c75982a727ee88484173760cdc10dc3fb3a","first_seen":"2024-08-19T20:10:03.131774Z","last_seen":"2026-05-27T00:20:53.023385Z","times_seen":92,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fbooming_TNT_Bonanza_eab23e7b13.png\u0026w=1920\u0026q=75","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fbooming_TNT_Bonanza_eab23e7b13.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21766\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: rsNlfTOM7gxj80vNfJyVjM30TWfAe1BVsRAQbHPKJXY=\r\ncontent-disposition: inline; filename=\"booming_TNT_Bonanza_eab23e7b13.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ghNSyNG2QAzYn32S5QEfSCbgApIGsaF%2ByvR%2BOMlStJlOuFlbYRORT5ds2kJwEFNRHlO8mQRB1HXp07W7f0W%2FpRz0wGfD8nM61jPB%2BpBf%2BOziQcGTAaiMBaT8WtHVguFL1gk6N6PaDg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e53df2949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21766,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7c9d661601d0190b070657e03baa0498","sha1":"2b10101a8e66aab2dfff86c90f9ab453519badec","sha256":"aec3657d338cee0c63f34bcd7c9c958ccdf44d67c07b5055b110106c73ca2576","sha512":"c8f7a1de5ad688b12602fa125026f539f04985c3fc350a308dc8ad8eda8ac7de8be6024e3bc75a738ca40bc66bef6f375034ae5d59befd8de644df0521c73393","ssdeep":"384:0+RzTo+Fne0nvhpFnpdAaegTyLXQbilCH2NljAuPWeRTf9lKjzkHBFLP3WBcoSg/:tRzT5k6hpFpXuLUila2NljAqlV8MHBFU","tlshash":"25a2d183ceb98d29c614272b937155391cb2979f6fc24833aa4a59f871f4ea0f67016c","first_seen":"2024-08-19T20:10:03.101318Z","last_seen":"2026-05-27T00:20:53.031054Z","times_seen":87,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Ftechnology_Treasure_Chase_bd3669fdfd.png\u0026w=1920\u0026q=75","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Ftechnology_Treasure_Chase_bd3669fdfd.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23300\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: zCIeaPVWnF4punngZxRcFtHVNWhPnKUnAqan3q-KNKE=\r\ncontent-disposition: inline; filename=\"technology_Treasure_Chase_bd3669fdfd.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=600FKXAuV9qeqCrwtB3GwaM5n5svDMkxv08LysvGcCoOqilgUrz95knKHNqUOu4mmktB2o1usVYbsjon0GkEoPvDiLWA%2FYfzGbunpyvi6XLyrcW87r35NqCaN%2BQGx3Z29L0hojvxCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e53df2e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":23300,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7f78e3ac142ad309a3e075f80654783e","sha1":"bc5587eb4d5d683441166e772e0f9ab6635b9d54","sha256":"cc221e68f5569c5e29ba79e067145c16d1d535684f9ca52702a6a7deafca34a1","sha512":"4ebc20bb887d30ab624c995626088d14e6271214b1b76964430cbda03c096731af982f1adafb759e3ccff01ef16777ec770fe92078b87869272c46084000bfbc","ssdeep":"384:RXC24RDcPWbUTGDznGTCZIforIpZleh5CWiy4nF4KTVs8F6WQ55OPUJVNZHo:RXUR2JGD7GzRleCjF4KxnQTMGu","tlshash":"e1a2f1812e9cf744e98092ea2dc41d17922cfd194e320964b33c9188eff43ed7438b22","first_seen":"2025-03-27T03:50:55.666836Z","last_seen":"2026-05-27T00:20:53.030466Z","times_seen":81,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/image/?url=%2Ftotal-1.png\u0026w=64\u0026q=75","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/image/?url=%2Ftotal-1.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3382\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: qtgseq43yCPlc4q7UqXglchdAt0qOBOx8mfDTvJp8OU=\r\ncontent-disposition: inline; filename=\"total-1.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9jwbJZnFO22O9T6NXTeHXutv86VM1MkVeDzqQnrY7%2BogAbSINzyVcZSJiWcxMMpyt4A4gdsyGlsnjia7sQLp2RJCrpGHPYx9e0UBBND7hTvOx1v5uWwq0Gr2yPgETZoWfNQG5OxsxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e53df3349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3382,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50d69df7565f2adff718b334b2be696e","sha1":"32684076332a394e40ac306390e9ef110369572d","sha256":"aad82c7aae37c823e5738abb52a5e095c85d02dd2a3813b1f267c34ef269f0e5","sha512":"6a0091fdf8e0b8f300404d484bbc5883cd3f7e03a1447acc692b051566490697ba2eeb42be05ac285abda18967cf518a9711bb86ca09bb58e7ff6dcf933b5df8","ssdeep":"","tlshash":"5c617e98605178c1c69be8a146878163d1564650d3c6c874bbf4e62472acc7d4331cf5","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-05-27T00:33:43.215238Z","times_seen":130,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/media/c1b11e140b58cf5a-s.p.woff2","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/media/c1b11e140b58cf5a-s.p.woff2 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casinos-quickwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15108\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"3b04-19cfc3bcaa3\"\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GELSWThTraVcMN%2BXSCiPOb4UpAH8AGnWB6nkog%2BP3C9od4k%2B5ExksCANumQDRjrx%2BYUu7lAYQT9LVImWqzdHUqEz8cVIFOhhkDAydaP91euL5VTW9csu7eeyZsnB%2F3pei6hZlOHCow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e51ffcc49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15108, version 1.0","md5":"368f3e99ee207a4a2e2584eba7d3c82f","sha1":"9f907e41605807c4bf4f960745698b1e430a716b","sha256":"963fc62d2cf3e59e6f338db71b85b5ea86dd009fff859116d51a31a9b98d1d30","sha512":"2eb180c4cba21fa77eb89d801d6e55fd10acebe3a25e99228e3ca5861447a393aa60420a21f3cd573cedf5107dd391b5e5e1fcf5e09e799f2cbe7a6826eda2b2","ssdeep":"384:VHJTAkiZnTfVU4LSYdh7Db82J2Werb7VVX0m1+cz7aNw:VpTA9xTfVOA5o0erb7YmcGaNw","tlshash":"c562e16e92dc05534d2bd6f84eebd8cc7bd0f8548133af233905a62a854b810f218be1","first_seen":"2025-06-16T02:04:53.862041Z","last_seen":"2026-06-06T05:47:14.560815Z","times_seen":356,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/webpack-2a71d08f41489676.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/chunks/webpack-2a71d08f41489676.js HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"1750-19cfc3bcaa3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Znma3mfCumDUFyGbpva17c9DnFEorT1cJBtXJgnIREkDbJpFNfGFaGpHF9Nl9ShoNtDf%2F9vNzZ8esqCx9G0o3IYMghvuK5ACMMr0yCjzTeMcblPR1SoMmm1fKGCcky9p%2FQhjdd7BOA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e52181a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5968,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5968), with no line terminators","md5":"0051df9a48dfedc7c417f25c22e87d48","sha1":"71ebca39f43d7baacfe05a7bfc8c24b7fca5ba60","sha256":"042ebeb512014ab62f7835ba9fb4ab2259ca1eeba75afb3adcb5cbe43f0fd8ec","sha512":"b5e2f8c68d65da4de1c395f7a6478f8e8751098c0cebdaf4e50afab3c68b4da237ad5a6dfa3130579e1495daf7b14a55c6a788af1ad888153376569ae87d5ba6","ssdeep":"96:6IAgDpEzqynRRuEKjmvFqMug1kkNxNF9VTlVHO/jeE2UjKBOK6nRVG/OGfIfRY8q:64GzxnjuEMOFLBkQNF9Xe7jKl6nRVG/n","tlshash":"5ec1c69e72a4f8b61343a5a4493f9056f13e247b781ed0a0c70ac9b4bc349688533fe5","first_seen":"2026-04-28T16:38:13.976342Z","last_seen":"2026-04-28T17:06:34.994205Z","times_seen":2,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"89fc-19cfc3bcaa3\"\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SWXRGOwgHe9%2FPQ0KqnQP%2BvoqCd6eMfXBVgZhOnmqyhawzBeArH1CN0AJiQxfgM9m25cUnL65I2U2aLQaAi08iTNt65mCnETIy62aUCddjKxOMbGQUyPAjHjaccn4tK9ujTL0qSvpfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e539de749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-06T15:56:41.92608Z","times_seen":1777,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fsoftswiss_Aztec_Magic_Bonanza_9710f0cffb.png\u0026w=1920\u0026q=75","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fsoftswiss_Aztec_Magic_Bonanza_9710f0cffb.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29982\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: JR2Enbs4kzfL5MG7HLHJOiF77ljUO7jmqskB9x8ZSyk=\r\ncontent-disposition: inline; filename=\"softswiss_Aztec_Magic_Bonanza_9710f0cffb.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BzMY9SPvuojH0P2G90Ajhs6sWbONquDlLQr6zxtazgwl7UjC2Hoe%2BFkkKDBzNJhsgbqmkSfcfzgs3VXztWnqhOsheFnQRiiyJlbc5DgPaz559w725OeXxQlLY%2BB9x39yuJngf8gy%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e53ceb749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":29982,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fa1f178cec4921ae3eeb5931973a7e7f","sha1":"a58afa1dbaedccc362c8033468bd693c5091a794","sha256":"251d849dbb389337cbe4c1bb1cb1c93a217bee58d43bb8e6aac901f71f194b29","sha512":"7daf2f93512667d5bf20704b0a932eef7166af34a62db7fee3fe8979487cacff9def7a0b2a53c34836c9341b3491cf4423487fa78fd6556a53ffdc11fb73e777","ssdeep":"768:VDfWwLEZ51IAy8xU7WdpD0n/T0X2mMGTYzb5Z:VawLs51NU7WdpDaT82kYzb3","tlshash":"8ed2f214fe0f452ca893eaf649c6469e4b30688152f843a087015df18f27d3a4e9dedb","first_seen":"2024-08-19T20:10:03.135853Z","last_seen":"2026-05-27T00:20:53.038543Z","times_seen":91,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/image/?url=%2Fjackpots-wins-place-1%40X2.png\u0026w=48\u0026q=75","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/image/?url=%2Fjackpots-wins-place-1%40X2.png\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1412\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: NWcNEApufzPN1Z6+CYAf9TbOYMw9v7XHucYwPA8FnBs=\r\ncontent-disposition: inline; filename=\"jackpots-wins-place-1@X2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fr39Kj94nU6YhVfeAp%2BfqeIYq0SUVI51FBXgtGnj4SToAUbr8LrCHpz9ryFvbZSQxQ4aFWNxhqnbD2tXSJk2frkRbBmBVJQWNT6H7DeloAsGwYwHBmpOK1PrJKt3qUfoulfwMa%2Befw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e53ef9549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3c79467552a70a7e3b9aac5361dca35c","sha1":"c185808d79c2a23b02504ec935117459b1c1b799","sha256":"35670d100a6e7f33cdd59ebe09801ff536ce60cc3dbfb5c7b9c6303c0f059c1b","sha512":"664ee68f3c1334fc77beabd6037b226504bf74cc23bda66ca67f20612c26275690e730cf2eedca94bed50a3554144240c1c59229d98fd63cf7abcf886b877584","ssdeep":"","tlshash":"56213810768cdbf8e771087b765008810acfa4a290370201ee3f4ea4e62af6b2c3c482","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-05-27T00:33:43.209922Z","times_seen":124,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/css/352d5236847d301d.css","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/css/352d5236847d301d.css HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"644-19cfc3bcaa3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZsVGWbdg4OP17nw5OSd0Mbg3dgRjkGocpeeU%2BED52rTXcHu%2FKgh26yOj6MyUXkaq%2F7fDftLMApyzc4JvA9YQZzJ%2F55XQMhO7PkE5lF2F%2B2QmjQRApAIDYD%2Fnaa5gXNoNNi1e3FeFCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e520ff149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1604,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1604), with no line terminators","md5":"d861c7ab0c20ce2a7a153e0a29f1f60a","sha1":"fc6bd3dab3f134d21c58832d9de3f830d62f1ec9","sha256":"4ded20bf9809d391e7e962e1395b3522283ca30f52fe7a86155d1d5b4b3789d5","sha512":"0f8ba9f03c97e33b8a6a9c2cda9bb1a130f8e2b72e70254c382de16ba63d39be6516245f7e740cb52a947fb85c32939217c29b9d982f330bed19c438322db91f","ssdeep":"","tlshash":"0a31bf1195c2af35f9bba4a95fe0367f7816584887fa0ddac2d5f35582ce0d2831c54c","first_seen":"2025-03-27T03:50:55.637284Z","last_seen":"2026-06-02T03:03:58.995344Z","times_seen":268,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/css/425cb6e228741817.css","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/css/425cb6e228741817.css HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"eee-19cfc3bcaa7\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KZ17iMHbQgaZWvAz6%2FZZd1u8afKx2DutIjcMuwPhvol25mIoc19kIIHcu2iwXGnGOnD7SE4WUCvwXU8Ry6rK4TxG0eAFT%2Fhm76m2%2BqRMNcC6qUspde6s5GpGGybu4FbzQMS9o%2FqNqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e520ff549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3822,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3822), with no line terminators","md5":"18552a6e17838c46016a53e9762873c7","sha1":"3dd15aa95b79296b2894bfbd8fe4a53911f694d4","sha256":"66ecf375917e5eebcf9959e90773c31eff8f779803c5493fc5dd3760600542fc","sha512":"e1e0f9e0f622a0abca95b0eea21d599f23df0abf4d7e40bc5a85c69696ff5c6c97db03271d826ad105410cec045c6f279b66ce0ab29b9b5f4e29065d0265c9f8","ssdeep":"","tlshash":"a371f03a4fd0d438f4eb606f6ba2946d4b18c442ea275bdcff12d82bd1cb3d60562589","first_seen":"2025-04-29T14:40:21.773905Z","last_seen":"2026-06-02T03:03:59.010214Z","times_seen":175,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/chunks/framework-10ae643bd7ba2303.js HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"226d5-19cfc3bcaa7\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r4pbhZGoxWjhOKFLIvK%2B1hmLRS2ia9yYPHbG8RX7PtV0u3JU6xsn1z%2FTwU7BM10Hp7KRQ9uRwHqFrT9RD36eTlBOwBUd8WGEMxSadxkJa4iE8X4C36LcDaxGKx8L4kSjuHcyxbDpuw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e52181e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141013,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65202)","md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-06-02T03:03:59.000906Z","times_seen":287,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/chunks/492-27fcff75637ccad1.js HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"18017-19cfc3bcaa7\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WAUtxpnViMuTiSZt1NgfZ%2Bd54hnTJvi30eFtFrIC%2BtplioEmpdWuAgBo8J8Yfdmur7StW6wjkk0%2BW9gGXcYxfAo3p8S6kjKzU8yjFgTJsu%2FsdYo2cWmLbP3jYUCQuqE8kxEYfs%2FBMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e52183e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":98327,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-06-02T03:03:58.991334Z","times_seen":271,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-67c545f8362cb3f5.js HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"33c-19cfc3bcaa3\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwIhGW1cRXXPuzE08c5fe7W3dEcDAcKmttZgTikKBHIvrhZkaA8inyCww7r34rasMYdNjB%2FqiEhtVrVbQ%2FtSjhaDX9yqfIZnI%2BntBACaDmB%2BK8NeWEGCyeXRhLo5nc1yctjvMhSYWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e52184f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":828,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (828), with no line terminators","md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-06-02T03:03:59.017415Z","times_seen":251,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/uploads/quickwin_banner_62449abb73.svg","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /uploads/quickwin_banner_62449abb73.svg HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\nlast-modified: Mon, 23 Mar 2026 12:18:44 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LNZBy7By45CQZ8c3yK3jWVI4F8wnnrrDBcTn%2Bc8TpjpPKF9egWqHNj4OVE4jsAfJ3chdjkzJpTtsFAcxRLWx8qqBKf88tOk0BYYdvrnXZYtLGbVN6g6FsEOWDw1XJtqtaVzCbWYCTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f377e536d4649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":279691,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d2d15ac71475cd6e4a57fc5b740c6ab8","sha1":"bdfb6431b284fc74fd8d0cd05a4996a08d52195f","sha256":"c4c6b752e9e055fdc250760783f71607ebef63dc434ae3fa1557036c5198d57a","sha512":"2a515261f5d80106416c20f67002e90d5d98c1909e3cbd94b198c771f797569a5941d2bbdcdf9767e94f6c93433524fab00dcb43b62707c7409cdc5c19213101","ssdeep":"6144:0GCt6rKTxnjXTFlgUlUFH1ImEoo0OJO6n1Jyhm:ut6O1nj5l3lQHjBqJ1oU","tlshash":"62541237b50a7cba6d7cda0981ec3c445e146887fb4980eb3bc41b9358b9354eec88d6","first_seen":"2026-04-28T16:38:13.985693Z","last_seen":"2026-04-28T17:06:35.002774Z","times_seen":2,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fsoftswiss_Lucky_Dama_Muerta_b2c63f6fa9.png\u0026w=1920\u0026q=75","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fsoftswiss_Lucky_Dama_Muerta_b2c63f6fa9.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30852\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: hRj2QR1zy82mJwKSBTgBjI-BRAv-cEKborTVEp9NDuo=\r\ncontent-disposition: inline; filename=\"softswiss_Lucky_Dama_Muerta_b2c63f6fa9.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dWhN4JcDbK21SWiM25prTQT3dzcdLRabKjJ8bzrmRLDul6f05A1xsfHYdej8LddwywI0y2CfGcldquy9VHvKibLVVIVsYTTkfNGBcXCakYznTJJNZs56C03iIXbPAjsz3i0SjR2Prg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e53df2649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":30852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c120dc49625e377c78fb0ddbc94c7968","sha1":"86111549bf5cbe47ca253f09307b3fe0cf7152b1","sha256":"8518f6411d73cbcda62702920538018c8fc1440bff70429ba2b4d5129f4d0eea","sha512":"a6c767679113f05b533f8d92d271e9b3817c123c3fcb07cbf8810773cdb5d8da21dbbaab4c7fedd2192ceba699ee24ed61f955a2eba97bfb513abf7f08607576","ssdeep":"384:1nbwJXafXoA2+zUXgY4E3aU7fx4VctE1CHXNSpv6YBFR3E3Vbsww1gjb1yksHELp:1nbyqwzg+gHy77ucth9gvj1Eli2jY5I","tlshash":"8bd202a6d24e354b23ae6c86345f2716d3557df4e4624c6f004ace2dfe7d2691a9303c","first_seen":"2024-08-19T20:10:03.125147Z","last_seen":"2026-05-27T00:20:53.026542Z","times_seen":90,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/uploads/favicon_quickwin_d1abc62d63.svg","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /uploads/favicon_quickwin_d1abc62d63.svg HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\nlast-modified: Mon, 23 Mar 2026 12:17:30 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t3QWJLPVmoIlzhv5%2BND6Rjh2H8XuoJYtDIAMntHjZllOoxfo0BjpGMUsXdmpemkYORlFn3DkU3unHtP0Fu9cVHnbCLn0%2BGceMr7mq2fCdupwgz1PthtSIc0EI4DbQ8YO3bUBjD58GQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f377e560eb649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":898,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b6fa60a755048879318a04bddc030ecc","sha1":"2ec55730cfc88df7df5ba92b6eab9a2e99b33049","sha256":"4a4972690f3ba92fe47a5a22e230424d4873b0c13728753f94c9890f86adf71b","sha512":"a9a366139c525d17cecc586e5d08bcbf7e1f3227cd19ea9b3e3ce37e507bac6011958b92b285b4366bd159e50a473c88cd659cece0be94fda98dd9f25b3507d4","ssdeep":"","tlshash":"f0114078b189ec0ed1e5469068fc91dace63b09b805980aefc403aa9c46d4409a766fc","first_seen":"2026-04-28T16:38:13.99004Z","last_seen":"2026-04-28T17:06:35.013016Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":52,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/media/9f0283fb0a17d415-s.p.woff2","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/media/9f0283fb0a17d415-s.p.woff2 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casinos-quickwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21336\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"5358-19cfc3bcaa3\"\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YZ0cmFYxkyKg%2Buuu7i5N0YwW5vFhdT7TZyeXpqPIUPKK2o%2FqaQ2AddKQDfH%2Fm2E0undL8rVAWmIDK5Vk1q%2BW7JPqPZikXlElt1huKGz8NduuMpBv0SU8%2BcgZ1r75DLNpIVJlg%2FQx9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e51ffd149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":21336,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21336, version 1.0","md5":"0e35c6fd40c2ab9ef2d5b97baeca2f2d","sha1":"781b1852315aad9bcf111a3017ca734ab6dcd6b9","sha256":"07a6f958db51de42694ef87e2c01b9cf5ee415047b2fd17ab1c313c772a6804e","sha512":"7f76da76841e131252106ff1d70e22908753364d612e9b807d9332f89b13c759b1b9d05ac5983055b48bf99b441a2a07301db2c93fbb79323e492c238df1d7a9","ssdeep":"384:h9WnIiwq4BeuEc4AZTT4ZWgC9UCzpulxbC9WzQFvCY98IW1NoTXVY23sC6:LWIix4BayT0ZMUQpulJCuQF6IW1NgP3O","tlshash":"4ba2e1080f4b3a18eda72c8972acb57498741c208f8ee2770cd42859365e652fe3fe57","first_seen":"2025-10-20T15:26:06.98799Z","last_seen":"2026-06-04T14:06:59.774258Z","times_seen":269,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/css/dd79dc2c5a9a9197.css","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/css/dd79dc2c5a9a9197.css HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"a112-19cfc3bcaa3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MWmXj3oWkA%2B%2FtYfMJ9oF7k%2FUNCOWx3HGKOhjQcJEgb8dPT%2FJCY%2FOm2TY8XRpKtTq0Wjs%2FemXYnM21PjBkflsm%2FdAe3EpSwhOYMRGDrF7iMVV0kuxpM%2Fg6ENhuUgIpulIoOSeVmnZGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e520fec49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":41234,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (26798)","md5":"93e37c199f0ae59faefffcafacc5f00c","sha1":"a18665363dc58467e599d2bd59c1d63443bf8902","sha256":"d91a05b2ad13ad076307787468b87cd94e7dec4beefa460fb9b6c1e13473ccb5","sha512":"22f1cce98b2a8190e8fe8a83f883915899f1eeed64ebc5006757b2e0bcdba68ac5ef53f2f69439648c2dd3a9d58d0cce4585b5e5b79516718e9e2e3d73959d28","ssdeep":"384:gi4OZg6oxkmT0Ew2zXf0MrREq/XisHZ7aVWMMqLswaDGvi1vPTnx6G8S3yvVQW78:f4OZwQ2x8jeDqeTnwVA","tlshash":"4003c921e619702dd8fbcc6732ca7f1766184402f5950d69fa1b866ccecb9271b93bc8","first_seen":"2026-01-03T15:12:30.994041Z","last_seen":"2026-06-02T03:03:59.004085Z","times_seen":256,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"89fc-19cfc3bcaa3\"\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2BS%2FXVM10A6IoVofdCJsT7crmZQklf8Q65bsYxMl%2FpmEU4k4Y1TSupKN25GlznYrPW3cnkC9cNQcEeamBW8heB2CGF55gEo4zrLHvQSTQvyL1eLGyedWK%2B4LUbHH96JQy1sXebMrUw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e539e1f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-06T15:56:41.92608Z","times_seen":1777,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fbooming_Gold_Gold_Gold_5de62fa3a3.png\u0026w=1920\u0026q=75","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fbooming_Gold_Gold_Gold_5de62fa3a3.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22892\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: X4+P2NT7clIGAMVZ26q1ERSrxW2lYGUxe2YzOTEiigQ=\r\ncontent-disposition: inline; filename=\"booming_Gold_Gold_Gold_5de62fa3a3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y3wr2jQXM2sOYsrL%2BV1eXuLyZbitGTXZGyw6N%2FEwckdRRczfpP4mPnpIauzLWhP1uVhOtNf9Kk6t%2B%2FdetArHiponAC7lMSNIW6RvhYrMnOor5mQ23LQXTS7I59RWMNla%2FpdbsiJ%2Bug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e53cee949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":22892,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a8b94f48e2fd11cb50cac27fc86d9346","sha1":"5c70ea2c22699346e5b3861641339a1d2d6c57eb","sha256":"5f8f8fd8d4fb72520600c559dbaab51114abc56da56065317b66333931228a04","sha512":"fe8743c6c2a1215f636679fd201d71b82cadc779781b7161575ea8c96b1f8ca1eb9dd85f7922755968ae943fe71c9d17d36564947b5a9fa5b32b003ec9ec7832","ssdeep":"384:xUFhEi6MF0xzDZZiClIrogNEMzHiF0O4kVNor4I4bAbsXxsUOplwM:6SiVF0nlkxLg0O3osJXsWM","tlshash":"7aa2d0e4c277cdc069969c8322eb944671186b891c83e473d47a94aa37e991d3e0d72d","first_seen":"2024-08-19T20:10:03.128818Z","last_seen":"2026-05-27T00:20:53.03917Z","times_seen":92,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/chunks/927.a7dc7992c436ba78.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/chunks/927.a7dc7992c436ba78.js HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"a0b-19cfc3bcaa7\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WMxbm8kMKMoGTA7ZnUYCinGHGrq%2F45qiEafkTiAiL4I7zaeNQ7a%2FgmnRibBXp%2FU8D7gR%2BkI1vTN0Ja17IYew3gnSnSev9OMxNW6Ec7e8UJXcKCmzS89mmHOcQ8%2FBFA61wM3s1w2XFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e52080549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2571,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2571), with no line terminators","md5":"169204fe2bcc42c380af5e1ac2be7fe3","sha1":"8a03ce5223655c895c434033b81080a819fd917b","sha256":"e77204d4fe82687b08d2c78d02e066935c1b0c697a95682b12decbf3776b528a","sha512":"d47937c3eca1582d992d537eaccc779735e73d5450fdacdb27f801abff617ee8dd60a5fbdbde063b15a402746facd53cf439b115e864099f1c7537b218b3aed3","ssdeep":"","tlshash":"905131059986fdf9f9ba0cc9925fd53e762eb40f990c8da8fa7488414c098843603be6","first_seen":"2026-01-03T15:12:30.935058Z","last_seen":"2026-06-02T03:03:58.989391Z","times_seen":183,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/BdIYLVsK-vFMZ9sLEOM7E/_ssgManifest.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/BdIYLVsK-vFMZ9sLEOM7E/_ssgManifest.js HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"4d-19cfc3bcaa3\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LMkcsd3kSWtNwbO5AGPb7RsWKv33i7TfGUBDwnn5N7h0Q%2FaK6o01l7prfxsNaYRpTLXIYqUqLfKq3K58XlB2QbLVgMprHuIpfp3hlwmByYQe1f%2B2vKsFVBZ7U8BGYtLxLJZ2CX3XYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e52186349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-06-06T23:10:39.808192Z","times_seen":232184,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/BdIYLVsK-vFMZ9sLEOM7E/_buildManifest.js","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/BdIYLVsK-vFMZ9sLEOM7E/_buildManifest.js HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"3f6-19cfc3bcaa3\"\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HmK%2BCDuaMmUBSnzuIL4CJjRcatzEhEFsoj%2F0zf%2BNjQglkDFNYrMQEzEvE9m9g%2FrsVUr3bxviouPOPP6Hpx%2BwD8S9qvSkTpw4rVkI0QywmP5nuxKa32zxuF%2BYDrBdxf5nl2hsYGapPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e52185749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1014,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1014), with no line terminators","md5":"22003aaf1de1b4ff770a49f4ed090ead","sha1":"3722363258d328d7c46517c77b7be383c5ca7a24","sha256":"97a4ddb85a172f771d488f14a572e39ba2906bb030d7c1999652bc305b16034e","sha512":"314e12999c684520307040fedc8168bdd677b5ab1ac533a34da96b0d33311d9d55eb9103a985cb587799d62e1d85dcad4c43d1c7144ca24598b18bca64bbe4ae","ssdeep":"","tlshash":"4b11bd82010ae61a2de8fd47373f1363af528036663c0ab68bcc1d6c55900675f3a462","first_seen":"2026-04-28T16:38:13.997684Z","last_seen":"2026-04-28T17:06:35.000493Z","times_seen":2,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fsoftswiss_Dig_Dig_Digger_e775d7f45b.png\u0026w=1920\u0026q=75","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fsoftswiss_Dig_Dig_Digger_e775d7f45b.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26962\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: AzSFO1WUx2-1VIIgfxOwWyI90fx8TGb3o4bJatAWqNM=\r\ncontent-disposition: inline; filename=\"softswiss_Dig_Dig_Digger_e775d7f45b.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1oFU%2FyFI8WgHE2zkOPKx0U1UQ1hh8D8C%2BNQWqSYx89wPsroCAooO3ifR2YvmW5qbVXRXvaGax%2Be5QrSjpzPQNgC37y5l0R0j0UrW7EnC6WrN6rDHwDM4fGBvdwdFfa2JrFONDTGDFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e53ced649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26962,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b7f1024608ca6e96df2fd83dc6ceb2ba","sha1":"43bf1e14d076bec914f5bdf95d10dd1d1fb80538","sha256":"0334853b5594c76ff55482207f13b05b223dd1fc7c4c66f7a386c96ad016a8d3","sha512":"392de0371c69d790394b15cbe6bf1abdd3e1652107256547cf341ac78dad216068cfb11ae5e03d697ee99d4fec454ffe79ff13782838aff067b3c0cc7f1aa062","ssdeep":"768:wvBOc9f8BWKrVGs4XerHFP691vwUfCwHrioqXdypEx9iqVfE:w/9frKrws4XerlIvpCwHkNt9igfE","tlshash":"37c2f1217e92890ca77dd0bbed9374a87cf0466c466270378c03829977ddaaecb1d64d","first_seen":"2024-08-19T20:10:03.123447Z","last_seen":"2026-05-27T00:20:53.035608Z","times_seen":91,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fkagaming_Lucky_Star_deb2e6bffe.png\u0026w=1920\u0026q=75","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fkagaming_Lucky_Star_deb2e6bffe.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21696\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: S6nscazm6FtIpgPWdArg-GyF8hqTFwRrGZ5s-V0ICCg=\r\ncontent-disposition: inline; filename=\"kagaming_Lucky_Star_deb2e6bffe.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z9xgg8Jjphh8%2F7vwjwGV7Z5VSEM4X%2Fkr%2FcfM7HiAGWZwXVyJ1Z7w3SgjejRJQ173L6he%2B7fHosYtr9jXreNupRmUWx%2B16lawkuagYosSc1bAuDpJEemSr2zwBGvG8U%2FqwjdFoyjDNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e53df3149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21696,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5a2926f8601ca3f339e217178f1d8ff1","sha1":"23e4daf9e3c32e46d6cac6f0464bb6bad825177a","sha256":"4ba9ec71ace6e85b48a603d6740ae0fc6c85f21a9317046b199e6cfd5d080828","sha512":"05efd3d7fb0a219ff7f864b4c27c41d932f4b33d15a3d38eff80f722edecd0dd92b4df3bcaa4b9a65dd9c44b4b627e7188f7343d2c639d67abe4b068a921a279","ssdeep":"384:I4QqxWxwwQ/jtWeDIJj8fR1vNvD6PnKgMILmEu9YdsL75eBpV1e09GUNSAydyZD0:IVqxWxj+WeJffFCnDM609lsPZ9/p8","tlshash":"3ca2d0d3e78232f1981699dda22899a3cf439177536c573cac764b6f1a22284977024b","first_seen":"2024-08-19T20:10:03.131059Z","last_seen":"2026-05-27T00:20:53.020285Z","times_seen":89,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://casinos-quickwin.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"1759-19cfc3bcaa3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fdhsMeNwTeh%2FDg8xyAVwjp73vY%2B2rxOYCNtYj4dXsT5zNjdOro0yZlPm4uHgiACphTzfIjp6bssMt7tAaL4DFhEJojyM2Q8WEOXsknQKMNzj7uT1CohOFKRP61v3zfM%2BePgN50WKLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e56f97549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-06-02T03:03:58.987189Z","times_seen":264,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"1759-19cfc3bcaa3\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qrV9LDzuESQo10rxo%2FEhIeTYT7fIsgsYY6mBaUr5TgB4VD9VOaHO1HZPYrXQU%2BNBZXxBLcusHDxXxZeNk5syW%2FcHYTx5ScBPDlLzDtR8eih8X%2BHrSCTyARl5Y5DHodVXHzPoejnr1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e520ff049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-06-02T03:03:58.987189Z","times_seen":264,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/css/3bda6d4ca9304bde.css","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:45.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/css/3bda6d4ca9304bde.css HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"dc9-19cfc3bcaa7\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qme6FRbJOuLgVaz616kZRFShRkz5a7INGzF06rIiPGQnGa4UdA6o%2BXf2HIUHsYAVhIikn00POKLiV0NpF6p615zy14RSg25KrSBsY0RHhV5kPxzufo9BXjb0ze9KKMUl8m633RVS9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e520ffd49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3529,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3529), with no line terminators","md5":"01ce09a5b03cf044607a0960b19ee68e","sha1":"77ee0c8a2beef0412c1bf25560a9903a8734e9fc","sha256":"460f6f84ac47584af249e7525a01b93aa6fa2589abd99b25861058a10c5ced23","sha512":"428ac46d7d2015690eeec14942ff4a4220d01f83188ba00d1338949b73d9b25f4c2dc8aedb1ff247a20b160dc4847a4e89768245fa3835d1b1a47e5283a60848","ssdeep":"","tlshash":"1471f21a2e9e7b186cffc81765b26748236cd409cd1712a99013d76e49cb3925bf1b4c","first_seen":"2025-03-27T03:50:55.673324Z","last_seen":"2026-06-02T03:03:20.673599Z","times_seen":213,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nserver: cloudflare\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Tue, 17 Mar 2026 14:38:22 GMT\r\netag: W/\"89fc-19cfc3bcaa3\"\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ZGvc2ESRe4XstGBV6zdqBRpRuIFUKWiz%2BWjU0JU3ZdO9L%2BhTWKj00R8oUYiCu%2BQt8qEG91E4R1hiibybF%2FAplphjxWzxmJHyjf60BcArcicxA6jLTJ6PBnlw%2BKVy0ZZXOOZzMLSXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e539e1949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-06T15:56:41.92608Z","times_seen":1777,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/uploads/logo_4000d67a58.svg","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /uploads/logo_4000d67a58.svg HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\nlast-modified: Mon, 23 Mar 2026 12:16:44 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CjnTJKP5RkZ2Hdtw2F6nrt5BL%2BdxEX%2FJ3Vx2PPJwn8LaO2C7LydcMsSWjN6j0cVYXSXG2UOHzNwO9OeXadPXBkJr6Cvk%2BP%2BbknHh%2FY%2BOuXuzTU9ruPqwPXPgUMVgV8VuLqlRvaZP4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f377e53be9f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6715,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"07b5819caca35eab151720eaddd5906b","sha1":"b10a94e4149b368caf5b84bc8f7fc136585858df","sha256":"1c57000f12b0171be37360bdfecd82a3f93cf24c6fc80a7b51ba4579194bf21e","sha512":"1f123841187cb442308cba1209d2b2c341abbef316bac5df2e6168ff256a14057f8723d2df0c71367f460846734383c9983abb529ca6bb4f85f839e6cde63527","ssdeep":"96:c0Tc/AuD0Oc+OnVVTBwuFV9fGsQhX0ZXY5xdJNv3gs5pzrfGPvt4dA4fqgGSb4MX:1TGcfVFH0FfNPg8pzrfM4dA5nSz5BfL","tlshash":"70d14fe7338ca2e0a546afa6df37003736a720f95fd5c68047447a89b4918b86d9cfc5","first_seen":"2025-12-14T20:59:47.906791Z","last_seen":"2026-06-04T23:17:40.843365Z","times_seen":25,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinos-quickwin.com/_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fsoftswiss_Elvis_Frog_Trueways_c67568b187.png\u0026w=1920\u0026q=75","fqdn":"casinos-quickwin.com","domain":"casinos-quickwin.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinos-quickwin.com/","date":"2026-04-28T16:37:46.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinos-quickwin.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 13:36:16 GMT","end":"Mon, 15 Jun 2026 13:36:15 GMT"},"fingerprint":{"sha1":"BD:19:76:12:DA:45:B4:42:EE:65:E4:DA:B3:56:C8:98:17:6E:68:71","sha256":"0E:A1:DF:E2:8C:3C:3F:54:F4:DF:3E:20:19:FB:FC:3B:2A:5B:97:9E:FF:4B:70:7D:86:2D:01:07:CC:04:57:6D"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcasinos-quickwin.com%2Fuploads%2Fsoftswiss_Elvis_Frog_Trueways_c67568b187.png\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: casinos-quickwin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://casinos-quickwin.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 28 Apr 2026 16:37:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21966\r\nserver: cloudflare\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: h75VkDwuLRO4afqmu-ggsPb3P2A1dvFhT-wD8ax9xzw=\r\ncontent-disposition: inline; filename=\"softswiss_Elvis_Frog_Trueways_c67568b187.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9BNd4lv6zprlJQXT3o%2Fpknk9A0ybXxM6m9feDJFMwH00g%2FKg%2Bg%2B9mfINb5aqFaUWnyMBfsL8XE2CZtp8iX6a3GcI3QS4aHmg166WrMmP0OfcqhXXPLgEkmiF4s19xPTQ6c2ezwffFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f377e53ceda49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21966,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"89fe905b87b7b4316a388a0303eef23e","sha1":"63748ae1a9b6af0c90f463288063d7e9859f82b0","sha256":"87be55903c2e2d13b869faa6bbf820b0f6f73f603576f1614ffc03f1ac7dc73c","sha512":"ece5089d0b693dd8f4047be81010bfde68a3a1566fc93139c39e0d01281c0c84c9fa4121e00c451d22bfb5e4b1c1adc80bad001f7e02195ce99c345992c9f021","ssdeep":"384:7cDVuiOKc+mjDb/RRWjVeMYFCPUo/yEpAKY8LSMd/QzvbeHmY3gaw:AIecf1sjwvFGnyEpATGCrbTft","tlshash":"76a2e1c573d33e77833e41718a788973101264c6c553bd5ac6347acfaa422e2579471f","first_seen":"2024-08-19T20:10:03.133116Z","last_seen":"2026-05-27T00:20:53.029806Z","times_seen":91,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"casinos-quickwin.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}