{"report_id":"8b4c5c4a-3e8a-4001-979a-2dd3937ed1a5","version":0,"status":"done","tags":[],"date":"2026-09-17T03:00:20Z","url":{"schema":"http","addr":"strenduscasinoonline.com/","fqdn":"strenduscasinoonline.com","domain":"strenduscasinoonline.com","tld":"com"},"ip":{"addr":"104.21.58.81","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"strenduscasinoonline.com/","fqdn":"strenduscasinoonline.com","domain":"strenduscasinoonline.com","tld":"com"},"title":"Strendus Casino Online México 2026: Bono $6,000 + 50 Giros Gratis","dom":{"size":51465,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46451)","md5":"c21f0cfec4e23a1ca320ac61d9d4e39f","sha1":"853bf0ef4782608d695dc4bcc026beb95a220fdb","sha256":"2b0653240b5a0b1b402c5057d3a96360300727c422654ee8af8fef690faa9615","sha512":"ffff022b8fb17b7cab3e2b9d1e6b7732346a09123c2ecb26f389c574bb3e727ea0ce9a1a9bc5585840f1454c5f71ebea00b425e65f6ebccf46fb176b98a40289","ssdeep":"1536:/toEJVLKf4NQeCc5qknwG6J0VAXRoGr1KV6pPJhdBO4J/RqneEJYJBO:9uJBO","tlshash":"6933e8763bc4257ab64783f1e1a27f39a1aed29fe507c594f2fd0160a79adcc8842640","dom_hash":"domhash9d1c6ed5073ffe840f17ee86003e4561","first_seen":"2026-09-17T02:59:59.026628Z","last_seen":"2026-09-17T03:00:26.391435Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"strenduscasinoonline.com/","fqdn":"strenduscasinoonline.com","domain":"strenduscasinoonline.com","tld":"com"},"ip":{"addr":"104.21.58.81","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-22T03:00:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduscasinoonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduscasinoonline.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-13T22:44:45.310895Z","alert_count":0,"request_count":4,"received_data":1723764,"sent_data":1946,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"strenduscasinoonline.com","ip":{"addr":"104.21.58.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-21","domain_rank":0,"first_seen":"2026-09-17T02:59:53.602459Z","last_seen":"2026-09-17T02:59:53.602459Z","alert_count":10,"request_count":5,"received_data":363331,"sent_data":2553,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"cloud.umami.is","ip":{"addr":"104.26.1.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-07-18","domain_rank":524054,"first_seen":"2022-11-15T19:45:49Z","last_seen":"2026-09-15T13:35:19.489354Z","alert_count":0,"request_count":1,"received_data":6249,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"images.unsplash.com","ip":{"addr":"151.101.2.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-05-29","domain_rank":86676,"first_seen":"2015-08-06T06:03:25Z","last_seen":"2026-09-16T22:36:50.397919Z","alert_count":0,"request_count":1,"received_data":152085,"sent_data":735,"comment":"","tags":null,"fingerprints":null},{"fqdn":"gateway.umami.is","ip":{"addr":"172.67.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-07-18","domain_rank":0,"first_seen":"2025-07-07T10:07:45.782589Z","last_seen":"2026-09-12T15:47:30.801819Z","alert_count":0,"request_count":1,"received_data":810,"sent_data":565,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2026-09-11T08:51:10.898252Z","alert_count":0,"request_count":4,"received_data":139879,"sent_data":2264,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-EBK1GLQEWF","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb231f0d0816d91f16a41440a1f7741d","sha1":"53080af15b2b15ced7fa29ac7f567f329b7622f2","sha256":"8395867fbe728b60cb2de75e36bfecb4f68f5e7df476b04b6f08184e11be332e","sha512":"b174fb0ca77f5b58fda352be565a28358f027198ae855bc0254d5e30c5b8395249774f0a86f416ffe4b18f8db770960b98224c4befc5fc12f3347480b02cf197","ssdeep":"6144:P6eCI1rBQ5PN1gbcn76+4bcc6MbBEAF33GBAmrc1od45znljf:PBh29AbqxAx1oK5Z","tlshash":"6bb408ce73c674229396f178903f01cba57b29a2b45cc89af289dce42d3465a5163f7c","size":523928,"data":"","first_seen":"2026-09-17T02:59:59.028153Z","last_seen":"2026-09-17T03:00:26.394048Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strenduscasinoonline.com/","fqdn":"strenduscasinoonline.com","domain":"strenduscasinoonline.com","tld":"com"},"ip":{"addr":"104.21.58.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2ebaa9fab16a4f98e801a03efede2fa","sha1":"2661f9cb225dd98f6c8ad4ba23ed53ca1a835378","sha256":"397398ad70c21e9e7b2ab7131728629b4567b40b9fec78ca29b70850c2989aef","sha512":"3da0e423f03bce0a3c56641b8a7636c41c3c273333f83e90a85a4ea54b93a8093b3a26d95a5b355eb9c1a5baa5868c16927f59cf2e2dfcc6357d72306ee086e3","ssdeep":"","tlshash":"74f075dbbd1455a632dd0cf572f1f01cba030008488d9823ece8c81076082d74c425c4","size":524,"data":"","first_seen":"2026-09-17T02:59:59.04664Z","last_seen":"2026-09-17T03:00:26.402363Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strenduscasinoonline.com/","fqdn":"strenduscasinoonline.com","domain":"strenduscasinoonline.com","tld":"com"},"ip":{"addr":"104.21.58.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d46eba0806a36a9a550c57eeb998ee3d","sha1":"f602cc66c16fdcc8b2137031f089b3eaa321a84f","sha256":"330bf8ead17659cf961ad2670f350bbd79f8208aa7fb718e92d58d2130c75fa6","sha512":"88e6c17f0d100db57d4e4fcfda3ddd797f38c7f20e951206c4673d9a656356df64a5b14e7d8891353ebcabd9d59c1b0d9e0a9725e99e090a3f2bc87d57941a11","ssdeep":"","tlshash":"46c02ba82503ac7101ff0b410b5f21083042332046d009340801a0442920d671042c50","size":130,"data":"","first_seen":"2026-09-17T02:59:59.047669Z","last_seen":"2026-09-17T03:00:26.403104Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cloud.umami.is/script.js","fqdn":"cloud.umami.is","domain":"umami.is","tld":"is"},"ip":{"addr":"104.26.1.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec7db4752c54e95f9bc0909d8c510190","sha1":"323f658f6f5be14b38e45c86ff15fa785a9d9007","sha256":"36b0da9f235f69039144a9152fd9215467a9f6f002c2671ad155b2fb0bca7e8c","sha512":"ecc72c9b4e2325e1d955b9598dee4f41d5fc0915f9c0a202f4e0092087da10cc6f5afd3edc2a9d49951bd47588848143a81878ccaf817d473c60d027ed367d83","ssdeep":"96:5t6ZO49ga/B4EnsHxdBD7Ian4V/Ax8Qfq7tCKGbPag8+fw3fiSI:5t6ZHgeB4Q4dBD7nnOAx5iMKg98cw3fm","tlshash":"c6a12af5f241b4b637ba6cd6d0742211f2322bb1b806c494e9bd1c865d2918b65bef3c","size":4757,"data":"","first_seen":"2026-09-16T09:24:16.720937Z","last_seen":"2026-09-17T18:38:17.090172Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KSBH6QSW","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"10ce4c9ed6f800507689cfec799a2a43","sha1":"0a670791d48abb4506f087ec7effbb0cbd5f45e3","sha256":"d3d571b4332718e5539bdb5213aad13d31e5da22e33898131e43e35536e5c028","sha512":"7fe5446357555c267ef7443db40a6ae2920ee3fb0fcff32c05564519f4ce8ecdb640273f29441a7cabe9f832077df82629c2e6e5e83c1964d77363be3270f5a3","ssdeep":"6144:cKI1rBoP41gqW2+0bcc6MbBEAF33GVPrVAf:c561qWPrW","tlshash":"926409cdb7d6b42283a3b574903f014bb23a79a2b84cc894f286e9d42d7465a5137f7c","size":336710,"data":"","first_seen":"2026-09-17T02:59:59.02977Z","last_seen":"2026-09-17T03:00:26.398531Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strenduscasinoonline.com/assets/index-Ca9wEDsr.js","fqdn":"strenduscasinoonline.com","domain":"strenduscasinoonline.com","tld":"com"},"ip":{"addr":"104.21.58.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"66fe6ad90d31170ec3616d34464e4140","sha1":"8fb4990c8761dd8cdb7b09caef21a85350b76e88","sha256":"ebdfb8f782553f5bab67cfd4dadeb9d6f3d844c0836800edbf99e3cd9c99f6bb","sha512":"5118215fc70b73082863dca710cb24b1d20fcb5e6ca5ceee054378639fa3214becffeb2d2778ae872af76b1e5edbdc66ea4d22b860cba07eee10f535cb03f91c","ssdeep":"3072:KdIyrShpd9cObb1lJODBQSqVG9pYRFSxPkwukR:hGXObcBQYDYRolkwukR","tlshash":"1d446ee871d5b6aaaf7307b011af4507723e1d2b980d8870f164e86536b844da1b7fec","size":276452,"data":"","first_seen":"2026-09-17T02:59:59.033238Z","last_seen":"2026-09-17T03:00:26.397362Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strenduscasinoonline.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"strenduscasinoonline.com","domain":"strenduscasinoonline.com","tld":"com"},"ip":{"addr":"104.21.58.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-17T19:38:40.187379Z","times_seen":435553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"i.ibb.co/hRDHSydS/Epic-Strike-Roulette-9-Masks-Of-Fire.jpg","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://strenduscasinoonline.com/","date":"2026-09-17T02:59:44.806Z","timestamp":1789613984806,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /hRDHSydS/Epic-Strike-Roulette-9-Masks-Of-Fire.jpg HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://strenduscasinoonline.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Thu, 17 Sep 2026 02:59:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 47008\r\nlast-modified: Tue, 20 Jan 2026 12:34:38 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47008,"size_decoded":47374,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 330x220, components 3","md5":"ba93d37b3d891dd9be9f817eceaab207","sha1":"b66ab2947526a36c89a66963c86a9cd716484ce0","sha256":"1f99cb4650a372ecb13cefd36598678b3acadb084fcecfdbfffdf4b096bf6b6b","sha512":"0ccb49e18cdb78ad29836515e241818c52cbbded7eb2b81597f5538eaed09b1fcfb17a114ee91cdd682cbcffa96b4b22f8b1bba685a28787eedc0299852df384","ssdeep":"768:12jf9s8LE/moalSwInC9zZXN6KWQj3Oui3ptNl95jA3/Wg+19DtwFd5gHhuXSSWn:af9sEEuoa+CxZXaQj3A379ZmuLMFcHh/","tlshash":"b72301fe12a9dd8ef3ef35e2e68cc112574650a06e030a56aa0935e5fcc5dd89d2f131","first_seen":"2026-09-17T02:59:59.0356Z","last_seen":"2026-09-17T03:00:26.392281Z","times_seen":2,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":34,"receive":53,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/zh6SLhYM/money-time.jpg","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://strenduscasinoonline.com/","date":"2026-09-17T02:59:44.809Z","timestamp":1789613984809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /zh6SLhYM/money-time.jpg HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://strenduscasinoonline.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Thu, 17 Sep 2026 02:59:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34919\r\nlast-modified: Tue, 20 Jan 2026 12:34:38 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34919,"size_decoded":35285,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 330x220, components 3","md5":"51c9f439374d95229acf047fbb7111d9","sha1":"76f7fcfb2b6ebd5fb85f07cd46f0ad754a9f040e","sha256":"bfa1d4bc628c94ce67752576e783a95bbee1287549f265b6f329c1f21fef8ce7","sha512":"893c09192cca68fa23098bbbe7753497bdd15e4bec77b5cd1f7b897cfc1d0bda42eb14b4f92f4db547b0349bb3121af4f622f9838b1d5d512af9e85495c62df7","ssdeep":"768:uX2kbmLXJ4Ml6n2G44bBmj040KJkXygbiMXuKVEMxG8lUpRUxmmHoXOg8TAIflKP:uXrOXb40wnKdghcpRQTnT7lKP","tlshash":"a7f2f11c6e83def4d8b1642615e5d944ea90cc5e0c87b58fd3b2764a32b0da17f6e231","first_seen":"2026-09-17T02:59:59.036745Z","last_seen":"2026-09-17T03:00:26.39297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":1,"connect":34,"send":0,"wait":43,"receive":28,"ssl":315},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-EBK1GLQEWF","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strenduscasinoonline.com/","date":"2026-09-17T02:59:45.112Z","timestamp":1789613985112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtag/js?id=G-EBK1GLQEWF HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://strenduscasinoonline.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 17 Sep 2026 02:59:45 GMT\r\nexpires: Thu, 17 Sep 2026 02:59:45 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 175428\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":523928,"size_decoded":176012,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"bb231f0d0816d91f16a41440a1f7741d","sha1":"53080af15b2b15ced7fa29ac7f567f329b7622f2","sha256":"8395867fbe728b60cb2de75e36bfecb4f68f5e7df476b04b6f08184e11be332e","sha512":"b174fb0ca77f5b58fda352be565a28358f027198ae855bc0254d5e30c5b8395249774f0a86f416ffe4b18f8db770960b98224c4befc5fc12f3347480b02cf197","ssdeep":"6144:P6eCI1rBQ5PN1gbcn76+4bcc6MbBEAF33GBAmrc1od45znljf:PBh29AbqxAx1oK5Z","tlshash":"6bb408ce73c674229396f178903f01cba57b29a2b45cc89af289dce42d3465a5163f7c","first_seen":"2026-09-17T02:59:59.028153Z","last_seen":"2026-09-17T03:00:26.394048Z","times_seen":2,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strenduscasinoonline.com/","fqdn":"strenduscasinoonline.com","domain":"strenduscasinoonline.com","tld":"com"},"ip":{"addr":"104.21.58.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-17T02:59:44.145Z","timestamp":1789613984145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduscasinoonline.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 20:16:14 GMT","end":"Sun, 13 Dec 2026 21:16:11 GMT"},"fingerprint":{"sha1":"25:FE:CF:A5:56:85:0E:CF:4C:E3:53:79:A6:A9:12:FA:3E:E4:73:1D","sha256":"14:62:38:B1:B2:DD:E0:53:BE:BC:8F:81:77:2B:3C:83:EB:08:F7:7B:7E:D3:C1:55:30:1B:CB:D8:FB:94:DD:94"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: strenduscasinoonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zqh9dpOLDjm0JBwVXnFcjrkkWymXqRLXpZrptOTp7zDM8YHLrVh3eIA4%2B5aLNAOgfq%2Bzj7%2F5QApBs7ozrOZ1%2Fn8s2ty7gYOvj%2FPldcNLe8zQHby6ZNhhxlF9R8tG5CL6TuZG52WZzHvJyAI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ndate: Thu, 17 Sep 2026 02:59:44 GMT\r\ncf-ray: a3c4db491f5bb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":51315,"size_decoded":12971,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (46577)","md5":"0881dc851b8812d1175988b51da28d97","sha1":"9416dc9557461985f3b929f3dd9bb1dee43b3aaf","sha256":"589847ae5e9f352440b28dcd3ef091ca32ee31bb89f85c7f867508326c4f1c1a","sha512":"d7b3e79a4c1a901a6f554d77b85171712b9cc94b5105c03e8a66550f3e2f1dad02668eed034013daa9b405c25a9206d588f7df313232b06910539f6d97dd11b9","ssdeep":"1536:8woEJVLKf4NQeCc5qknwG6J0VAXRoGr1KV6pPJhdBO4q/RqneEJUO:jFO","tlshash":"1e33f8763bc4267ab64783f1e1a27f3961afd29fe507c594f2fd0160a79adcc8842640","first_seen":"2026-09-17T03:00:26.39473Z","last_seen":"2026-09-17T03:00:26.39473Z","times_seen":1,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduscasinoonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduscasinoonline.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cloud.umami.is/script.js","fqdn":"cloud.umami.is","domain":"umami.is","tld":"is"},"ip":{"addr":"104.26.1.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strenduscasinoonline.com/","date":"2026-09-17T02:59:44.671Z","timestamp":1789613984671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"umami.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 09:20:46 GMT","end":"Sun, 15 Nov 2026 10:20:36 GMT"},"fingerprint":{"sha1":"60:8C:F2:8B:26:E7:9C:C8:AB:E2:39:99:50:2A:B7:99:73:C2:1F:85","sha256":"F3:14:8C:24:AB:DB:1C:8C:B5:54:2E:54:39:E0:A7:42:E5:9F:26:D7:3E:57:F7:D7:D8:09:FF:CA:06:51:86:E0"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: cloud.umami.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://strenduscasinoonline.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 02:59:44 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\nage: 76177\r\ncache-control: public, max-age=86400, must-revalidate\r\ncontent-disposition: inline; filename=\"script.js\"\r\ncontent-encoding: br\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-src 'self' http: https:; frame-ancestors *;\r\netag: W/\"ec7db4752c54e95f9bc0909d8c510190\"\r\nlast-modified: Tue, 15 Sep 2026 20:52:22 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-dns-prefetch-control: on\r\nx-frame-options: SAMEORIGIN\r\nx-matched-path: /script.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1:arn1:arn1::mkglq-1789537807471-bd368e30ac38\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X7dRhW%2FNvUCYpCgNLw%2BTi0OdN%2FI9Abz9LqMqRD%2FbEmkYe%2Bf1ZczlmTNJTXP%2Byrv05z7zpJ%2BfHzdSnBpWOzvA7hI4V67tNAxecxRS3zRcrRJv9u%2Fr9acSg7jVPJ7rA96j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-ray: a3c4db4c5b6bdfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4757,"size_decoded":3917,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4756)","md5":"ec7db4752c54e95f9bc0909d8c510190","sha1":"323f658f6f5be14b38e45c86ff15fa785a9d9007","sha256":"36b0da9f235f69039144a9152fd9215467a9f6f002c2671ad155b2fb0bca7e8c","sha512":"ecc72c9b4e2325e1d955b9598dee4f41d5fc0915f9c0a202f4e0092087da10cc6f5afd3edc2a9d49951bd47588848143a81878ccaf817d473c60d027ed367d83","ssdeep":"96:5t6ZO49ga/B4EnsHxdBD7Ian4V/Ax8Qfq7tCKGbPag8+fw3fiSI:5t6ZHgeB4Q4dBD7nnOAx5iMKg98cw3fm","tlshash":"c6a12af5f241b4b637ba6cd6d0742211f2322bb1b806c494e9bd1c865d2918b65bef3c","first_seen":"2026-09-16T09:24:16.720937Z","last_seen":"2026-09-17T18:38:17.090172Z","times_seen":7,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":10,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strenduscasinoonline.com/favicon.ico","fqdn":"strenduscasinoonline.com","domain":"strenduscasinoonline.com","tld":"com"},"ip":{"addr":"104.21.58.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://strenduscasinoonline.com/","date":"2026-09-17T02:59:45.239Z","timestamp":1789613985239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduscasinoonline.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 20:16:14 GMT","end":"Sun, 13 Dec 2026 21:16:11 GMT"},"fingerprint":{"sha1":"25:FE:CF:A5:56:85:0E:CF:4C:E3:53:79:A6:A9:12:FA:3E:E4:73:1D","sha256":"14:62:38:B1:B2:DD:E0:53:BE:BC:8F:81:77:2B:3C:83:EB:08:F7:7B:7E:D3:C1:55:30:1B:CB:D8:FB:94:DD:94"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: strenduscasinoonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://strenduscasinoonline.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_EBK1GLQEWF=GS2.1.s1789613984$o1$g0$t1789613984$j60$l0$h0; _ga=GA1.1.1430441806.1789613985\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4x6osMXmwYOclFqx2hFW1Hp%2Bo1l8%2Bd9Q6Em7tL1awjD8TkZo3d09RgbuRgLtRH%2BO7Fldxur0cPxhUxsQq97oQXIcrpbpkEblgTL9zRn%2FFN%2BDC80rZcEiFGLwD0jdYHKh%2FvnCdBvrXpy6KUE%3D\"}]}\r\ncontent-type: image/x-icon\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"91f7832ec77cb11cc8ee765c7a3d2f3f\"\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Thu, 17 Sep 2026 02:59:45 GMT\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a3c4db4fcfb6b4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":318,"size_decoded":939,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 16 colors, 4 bits/pixel","md5":"6d6cb620fcd2da183f7dd19504b2bd7b","sha1":"048932ec812da095a6bd64c1a018e6e351f1947f","sha256":"c3073f735b13119f1aa1abcb962ab08c49eb5bb1434a7fc7db77dd88eac9f198","sha512":"50b14118a79f983ad5ed0cfb665e4011716c971c8b8151b43e893874d2fbcbd2b9076084c829db78f40a1b2d610e18745894a4d5e6ed83d4cd331c9dbdba8380","ssdeep":"","tlshash":"9fe0ea4932d243e6f4a415382c8b3a2c3e81c0a842d1363a4f301ccd7b1731d1825ca1","first_seen":"2026-09-17T02:59:59.045646Z","last_seen":"2026-09-17T03:00:26.396653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduscasinoonline.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduscasinoonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduscasinoonline.com/assets/index-Ca9wEDsr.js","fqdn":"strenduscasinoonline.com","domain":"strenduscasinoonline.com","tld":"com"},"ip":{"addr":"104.21.58.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strenduscasinoonline.com/","date":"2026-09-17T02:59:44.672Z","timestamp":1789613984672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduscasinoonline.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 20:16:14 GMT","end":"Sun, 13 Dec 2026 21:16:11 GMT"},"fingerprint":{"sha1":"25:FE:CF:A5:56:85:0E:CF:4C:E3:53:79:A6:A9:12:FA:3E:E4:73:1D","sha256":"14:62:38:B1:B2:DD:E0:53:BE:BC:8F:81:77:2B:3C:83:EB:08:F7:7B:7E:D3:C1:55:30:1B:CB:D8:FB:94:DD:94"}}},"request":{"raw":"GET /assets/index-Ca9wEDsr.js HTTP/1.1\r\nHost: strenduscasinoonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://strenduscasinoonline.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hc3%2FNH0pH7fKXUfBj0opJ9tuQoQiXAMvYWvfVADeskDXK1XR9Ut90Mx%2BUpqwaUN2BWAcw6EBmIOf0gCg9bkQ1rVXq0frjGw3eKJsdEPeEWr0y5XMAlm%2BTpP2ojxjpwqCXDakFsN7SirHvAo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"8f27e9f7c8dcd82a02024540dc5d023d\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Thu, 17 Sep 2026 02:59:44 GMT\r\ncf-ray: a3c4db4c3f8bb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276452,"size_decoded":85930,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37530)","md5":"66fe6ad90d31170ec3616d34464e4140","sha1":"8fb4990c8761dd8cdb7b09caef21a85350b76e88","sha256":"ebdfb8f782553f5bab67cfd4dadeb9d6f3d844c0836800edbf99e3cd9c99f6bb","sha512":"5118215fc70b73082863dca710cb24b1d20fcb5e6ca5ceee054378639fa3214becffeb2d2778ae872af76b1e5edbdc66ea4d22b860cba07eee10f535cb03f91c","ssdeep":"3072:KdIyrShpd9cObb1lJODBQSqVG9pYRFSxPkwukR:hGXObcBQYDYRolkwukR","tlshash":"1d446ee871d5b6aaaf7307b011af4507723e1d2b980d8870f164e86536b844da1b7fec","first_seen":"2026-09-17T02:59:59.033238Z","last_seen":"2026-09-17T03:00:26.397362Z","times_seen":2,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduscasinoonline.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduscasinoonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"strenduscasinoonline.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"strenduscasinoonline.com","domain":"strenduscasinoonline.com","tld":"com"},"ip":{"addr":"104.21.58.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strenduscasinoonline.com/","date":"2026-09-17T02:59:44.675Z","timestamp":1789613984675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduscasinoonline.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 20:16:14 GMT","end":"Sun, 13 Dec 2026 21:16:11 GMT"},"fingerprint":{"sha1":"25:FE:CF:A5:56:85:0E:CF:4C:E3:53:79:A6:A9:12:FA:3E:E4:73:1D","sha256":"14:62:38:B1:B2:DD:E0:53:BE:BC:8F:81:77:2B:3C:83:EB:08:F7:7B:7E:D3:C1:55:30:1B:CB:D8:FB:94:DD:94"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: strenduscasinoonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://strenduscasinoonline.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Sat, 19 Sep 2026 02:59:44 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QGS%2Fmly16NyP2gOqexGTR01dvoYs7Q1uVCcRyYllf4u%2FFJW95iatrOss8oE2V%2BxPrgQrOe91VGhvbdkUUB%2FBdwIhXSsAZnSksMxohKRjYqvTeP%2FkoT58vQ7DZs6EUMzSclJ6Cr9dfvO0rKU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ndate: Thu, 17 Sep 2026 02:59:44 GMT\r\nserver: cloudflare\r\ncf-ray: a3c4db4c3f8db4fd-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1254,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-17T19:38:40.187379Z","times_seen":435553,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduscasinoonline.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduscasinoonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KSBH6QSW","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strenduscasinoonline.com/","date":"2026-09-17T02:59:44.691Z","timestamp":1789613984691,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtm.js?id=GTM-KSBH6QSW HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://strenduscasinoonline.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 17 Sep 2026 02:59:44 GMT\r\nexpires: Thu, 17 Sep 2026 02:59:44 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 17 Sep 2026 00:00:41 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 119166\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":336710,"size_decoded":119816,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5007)","md5":"10ce4c9ed6f800507689cfec799a2a43","sha1":"0a670791d48abb4506f087ec7effbb0cbd5f45e3","sha256":"d3d571b4332718e5539bdb5213aad13d31e5da22e33898131e43e35536e5c028","sha512":"7fe5446357555c267ef7443db40a6ae2920ee3fb0fcff32c05564519f4ce8ecdb640273f29441a7cabe9f832077df82629c2e6e5e83c1964d77363be3270f5a3","ssdeep":"6144:cKI1rBoP41gqW2+0bcc6MbBEAF33GVPrVAf:c561qWPrW","tlshash":"926409cdb7d6b42283a3b574903f014bb23a79a2b84cc894f286e9d42d7465a5137f7c","first_seen":"2026-09-17T02:59:59.02977Z","last_seen":"2026-09-17T03:00:26.398531Z","times_seen":2,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":0,"dns":0,"connect":16,"send":0,"wait":121,"receive":56,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1745473383212-59428c1156bc?crop=entropy\u0026cs=tinysrgb\u0026fit=max\u0026fm=jpg\u0026ixid=M3w3Nzg4Nzd8MHwxfHNlYXJjaHwxfHxsdXh1cnklMjBjYXNpbm8lMjBoZXJvfGVufDF8fHx8MTc2Nzg2ODI1NHww\u0026ixlib=rb-4.1.0\u0026q=80\u0026w=1080","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.2.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://strenduscasinoonline.com/","date":"2026-09-17T02:59:44.804Z","timestamp":1789613984804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R46 DV TLS CA 2026 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Jul 2026 16:16:25 GMT","end":"Sun, 14 Feb 2027 15:16:25 GMT"},"fingerprint":{"sha1":"F2:05:7E:AF:21:81:93:03:7B:A5:F9:F3:FD:CC:C9:24:49:3A:76:2C","sha256":"7F:6E:F5:E1:25:3F:25:87:8A:95:6F:06:BD:D7:52:15:BC:14:B2:83:78:51:94:51:FE:73:CD:C0:D3:C4:C9:68"}}},"request":{"raw":"GET /photo-1745473383212-59428c1156bc?crop=entropy\u0026cs=tinysrgb\u0026fit=max\u0026fm=jpg\u0026ixid=M3w3Nzg4Nzd8MHwxfHNlYXJjaHwxfHxsdXh1cnklMjBjYXNpbm8lMjBoZXJvfGVufDF8fHx8MTc2Nzg2ODI1NHww\u0026ixlib=rb-4.1.0\u0026q=80\u0026w=1080 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://strenduscasinoonline.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-imgix-id: 61649498c4ca12a3059e343304e7a43a2d5eb73a\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 07 Sep 2026 12:34:32 GMT\r\nserver: imgix\r\ndate: Thu, 17 Sep 2026 02:59:44 GMT\r\nage: 829513\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-eddf8230087-FRA, cache-bma-essb1270079-BMA\r\nx-cache: HIT, HIT\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 151480\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":151480,"size_decoded":152085,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1080x1620, components 3","md5":"5986c0591b11b55ca0d7e9d6b1cfdb5d","sha1":"beff522087a579ed5c72991754b9d67f261c130a","sha256":"518ecd7251690fb5381673cc14c57cd55d0249833a75c21a16d6a43134849b1c","sha512":"5122ebd29401d2fbbf3603a7d6c5b9b80f8e337cdcfed960a926ab7af7c51240344945a00d0e39b44c82271154b995175d3823ce4b034fb6a5416936bbac8e4b","ssdeep":"3072:tQeAUe1j4gXH8m6F6n47xSAj8N1AkmHfQpWgOxyyIFbb:tQebXH647x1kJm/MOE5","tlshash":"d7e3129f2bdac580ef8903fcc6d1b6138710b0221add9ddb1699b0a211069ec5ded1ed","first_seen":"2026-09-17T02:59:59.044364Z","last_seen":"2026-09-17T03:00:26.399148Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":12,"receive":19,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/8DnnyYg1/Vegas-Single-Deck-Blackjack.jpg","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://strenduscasinoonline.com/","date":"2026-09-17T02:59:44.810Z","timestamp":1789613984810,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /8DnnyYg1/Vegas-Single-Deck-Blackjack.jpg HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://strenduscasinoonline.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Thu, 17 Sep 2026 02:59:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23156\r\nlast-modified: Tue, 20 Jan 2026 12:34:39 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23156,"size_decoded":23522,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 330x220, components 3","md5":"ff67a23787e3ed7349ab88771b96e17a","sha1":"ad427f4bdd9b7a3c0c3430a026087f5aa8014e97","sha256":"944ea32b999aef27d299fd4b0de6915fec6e45a37d4141d43fb3f493a207cc33","sha512":"2e9cdf7bd849ce8cb44f0f340257de39a1d946326d8fbc50671e99fa21478651f3bd90eeac2bfec88d57f47643f50d79f210b23ea853bbd791da23162bb4f928","ssdeep":"384:KrmdKWqNMHzXLDXJ+/dA0IiNvjZ3cr3ruFJVbWOZAmndVcJjSt3q:20IuzXLDQVA0ZLZ3JHqOZAuDout3q","tlshash":"2fa2df3a4a0e2e1753d55765dce5df2aaa643824034f03045260baa5b26cac4ed26c3f","first_seen":"2026-09-17T02:59:59.037841Z","last_seen":"2026-09-17T03:00:26.399862Z","times_seen":2,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":1,"connect":33,"send":0,"wait":45,"receive":26,"ssl":316},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gateway.umami.is/api/send","fqdn":"gateway.umami.is","domain":"umami.is","tld":"is"},"ip":{"addr":"172.67.70.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://strenduscasinoonline.com/","date":"2026-09-17T02:59:45.109Z","timestamp":1789613985109,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"umami.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 01:12:34 GMT","end":"Wed, 18 Nov 2026 02:12:31 GMT"},"fingerprint":{"sha1":"70:36:FC:61:31:80:D2:C9:A5:AE:FE:0E:FF:5A:0B:A8:7F:E5:D9:DF","sha256":"EE:4D:A9:5C:BE:1A:CE:66:E9:57:D9:C2:FB:0F:34:1B:94:01:81:1F:F4:61:DA:DE:32:84:A2:93:CB:B0:10:56"}}},"request":{"raw":"OPTIONS /api/send HTTP/1.1\r\nHost: gateway.umami.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-umami-hostname,x-umami-website-id\r\nReferer: https://strenduscasinoonline.com/\r\nOrigin: https://strenduscasinoonline.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 17 Sep 2026 02:59:48 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-max-age: 86400\r\ncf-placement: local-OSL\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=whAZsrIuH%2BEp8PzwURmkNV16BRsEId6aOHlDUmIYD4csz0bzwBl2c%2FGwiKcbVJFa1vE0lr0nhvXMviUipe6iRe8uqO1WSSypM%2ByhbBYkz4xEkajQDdfJbFcAbhq%2Fs2wEnYg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nserver: cloudflare\r\ncf-ray: a3c4db62ba06568f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":810,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-17T19:41:52.863992Z","times_seen":18521088,"resource_available":true,"data":null}},"time_used":3186,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":21,"receive":0,"ssl":3162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"strenduscasinoonline.com/assets/index-QzWO5Yff.css","fqdn":"strenduscasinoonline.com","domain":"strenduscasinoonline.com","tld":"com"},"ip":{"addr":"104.21.58.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://strenduscasinoonline.com/","date":"2026-09-17T02:59:44.674Z","timestamp":1789613984674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"strenduscasinoonline.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 14 Sep 2026 20:16:14 GMT","end":"Sun, 13 Dec 2026 21:16:11 GMT"},"fingerprint":{"sha1":"25:FE:CF:A5:56:85:0E:CF:4C:E3:53:79:A6:A9:12:FA:3E:E4:73:1D","sha256":"14:62:38:B1:B2:DD:E0:53:BE:BC:8F:81:77:2B:3C:83:EB:08:F7:7B:7E:D3:C1:55:30:1B:CB:D8:FB:94:DD:94"}}},"request":{"raw":"GET /assets/index-QzWO5Yff.css HTTP/1.1\r\nHost: strenduscasinoonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://strenduscasinoonline.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Im6Xuva%2BV51Uz8LBEizS4XtsE1PY918aFPS7w3bT6H7l9St2ZiJwbgf85f1yGQyObnV4e3iHPgq0PXR9ASkCA8BUJdMFiQ3BgIc9M0LCYrJAq7Kl9rgYz98jkygGGmB3NzoiH%2BuaTMG5YpQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"ed0820e4523777ab15037c8bf7953306\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Thu, 17 Sep 2026 02:59:44 GMT\r\ncf-ray: a3c4db4c3f8cb4fd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30054,"size_decoded":6490,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30053)","md5":"ec381f595545d1a1ef768e1149904e3a","sha1":"0b38bb4729dffa6b33d63e6ec04ad3815ef70ec3","sha256":"9722d99ab50de5e68200df5744005e2b0026952926343892af0f3bc482bd2476","sha512":"7358ebdc63c7a8c31fc274f75cc3676a966c6087ea226baaa8377cb13fa98ed7f90fff7e0d23817113ab342501dea89e6413a2e7283396520b345b5541ffd09a","ssdeep":"384:iOXZFZ6yWdnDoyUWZiyc/zTvSpBxYaGSQjSyM4poQx7jtW4:jpFsyWdnDoyUWZiyc/zTv0BkjTMIzW4","tlshash":"b7d253a4f361e47ffc23aae5d76cb02cb218f199ce7546e8ee02111562d23f64a16f14","first_seen":"2026-09-17T02:59:59.041321Z","last_seen":"2026-09-17T03:00:26.401027Z","times_seen":2,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduscasinoonline.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-17","alert":"Sinkholed","trigger":"strenduscasinoonline.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-EBK1GLQEWF","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strenduscasinoonline.com/","date":"2026-09-17T02:59:44.677Z","timestamp":1789613984677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtag/js?id=G-EBK1GLQEWF HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://strenduscasinoonline.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 17 Sep 2026 02:59:44 GMT\r\nexpires: Thu, 17 Sep 2026 02:59:44 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 175428\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":523928,"size_decoded":176032,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"bb231f0d0816d91f16a41440a1f7741d","sha1":"53080af15b2b15ced7fa29ac7f567f329b7622f2","sha256":"8395867fbe728b60cb2de75e36bfecb4f68f5e7df476b04b6f08184e11be332e","sha512":"b174fb0ca77f5b58fda352be565a28358f027198ae855bc0254d5e30c5b8395249774f0a86f416ffe4b18f8db770960b98224c4befc5fc12f3347480b02cf197","ssdeep":"6144:P6eCI1rBQ5PN1gbcn76+4bcc6MbBEAF33GBAmrc1od45znljf:PBh29AbqxAx1oK5Z","tlshash":"6bb408ce73c674229396f178903f01cba57b29a2b45cc89af289dce42d3465a5163f7c","first_seen":"2026-09-17T02:59:59.028153Z","last_seen":"2026-09-17T03:00:26.394048Z","times_seen":2,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":43,"receive":65,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KSBH6QSW","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://strenduscasinoonline.com/","date":"2026-09-17T02:59:44.690Z","timestamp":1789613984690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtm.js?id=GTM-KSBH6QSW HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://strenduscasinoonline.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Thu, 17 Sep 2026 02:59:44 GMT\r\nexpires: Thu, 17 Sep 2026 02:59:44 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 17 Sep 2026 00:00:41 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 119166\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":336710,"size_decoded":119816,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5007)","md5":"10ce4c9ed6f800507689cfec799a2a43","sha1":"0a670791d48abb4506f087ec7effbb0cbd5f45e3","sha256":"d3d571b4332718e5539bdb5213aad13d31e5da22e33898131e43e35536e5c028","sha512":"7fe5446357555c267ef7443db40a6ae2920ee3fb0fcff32c05564519f4ce8ecdb640273f29441a7cabe9f832077df82629c2e6e5e83c1964d77363be3270f5a3","ssdeep":"6144:cKI1rBoP41gqW2+0bcc6MbBEAF33GVPrVAf:c561qWPrW","tlshash":"926409cdb7d6b42283a3b574903f014bb23a79a2b84cc894f286e9d42d7465a5137f7c","first_seen":"2026-09-17T02:59:59.02977Z","last_seen":"2026-09-17T03:00:26.398531Z","times_seen":2,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":0,"connect":16,"send":0,"wait":108,"receive":52,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/zVzgXscV/Vegas-Solitarie.jpg","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://strenduscasinoonline.com/","date":"2026-09-17T02:59:44.813Z","timestamp":1789613984813,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:52:48 GMT","end":"Tue, 10 Nov 2026 21:52:47 GMT"},"fingerprint":{"sha1":"2F:89:8C:0E:0D:5A:32:08:66:DB:ED:13:DC:0A:60:1E:F1:27:D6:7C","sha256":"69:B6:46:09:83:BD:EC:DC:D7:58:12:75:FA:A5:C2:22:BA:67:5E:C8:27:39:AC:F1:20:06:D1:14:1B:20:E7:D5"}}},"request":{"raw":"GET /zVzgXscV/Vegas-Solitarie.jpg HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://strenduscasinoonline.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: openresty\r\ndate: Thu, 17 Sep 2026 02:59:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33332\r\nlast-modified: Tue, 20 Jan 2026 12:34:39 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33332,"size_decoded":33698,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 330x220, components 3","md5":"77410fe6d819c6ec925ff8bdbb0458d8","sha1":"97a7db091552631c7ba3cc2cdcdec193f771060f","sha256":"a89c50f03df328977560d4b5b37489daa2176d7afddcf47c7e593c787fcf0795","sha512":"17a24d9818913193cda35e806c89b10efb49dbe0ad1cc9c28a63a34097a62c1a59010eccda89f8bae937072cec9e4995edf8681f24b69278192311477fe8b2af","ssdeep":"768:QGprjjZ2SwUL4Ju3KZUfPNNtVyuNext7752naHOcOj2Qx:QsNZwwiwpXNNtVS52dam","tlshash":"f5e2018984357999c8eb1a39c86ac75f2bd3ea8317cb9d4224659c4971e34011bf3dcf","first_seen":"2026-09-17T02:59:59.038973Z","last_seen":"2026-09-17T03:00:26.401638Z","times_seen":2,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":34,"receive":10,"ssl":314},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}