{"report_id":"94d14991-51ce-40c6-b332-14a0ab32b846","version":6,"status":"done","tags":[],"date":"2025-12-22T00:58:39Z","url":{"schema":"http","addr":"kajot-casino.bet/","fqdn":"kajot-casino.bet","domain":"kajot-casino.bet","tld":"bet"},"ip":{"addr":"172.67.150.78","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"kajot-casino.bet/","fqdn":"kajot-casino.bet","domain":"kajot-casino.bet","tld":"bet"},"title":"Kajot Casino — Login, C$1000 Bonus + 100 FS","dom":{"size":40546,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (36274)","md5":"72ca52dfd1dda4d21ce65613eaed51ad","sha1":"be95cee9547ec0fff1113a4e01018c3acf1db277","sha256":"0d2485cc0b85de06d4a979f87211189ef9e5175a20648837e4c8f934c89aa512","sha512":"61c0117529af895fc04d9dc53d255b2c9857314ff049ae144da465e421a82102c1fd773deea81ebd4f1551f7b4087ca1629b0332ba93b917cad171b38e507ead","ssdeep":"768:qNqIIBxqx4zm/zYRecFUcaPi3BJGVJVZN7TzHSFHYI2xBg:lIIDzqUScrmnV/fLi4ni","tlshash":"c503b922d180373f958753edb3306794b3e6a0568b75071398dacb4d2fd6ca8e8261de","dom_hash":"domhash42c6fd5eb0f025db92699bf9176e6828","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"kajot-casino.bet/","fqdn":"kajot-casino.bet","domain":"kajot-casino.bet","tld":"bet"},"ip":{"addr":"172.67.150.78","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-26T00:58:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"tq2tmylv9quqkoe"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"kajot-casino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"kajot-casino.bet","ip":{"addr":"104.21.88.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-12-22T00:58:39.357968Z","last_seen":"2025-12-22T00:58:39.357968Z","alert_count":9,"request_count":9,"received_data":205059,"sent_data":5282,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kajot-casino.bet/templates/kajot-casino/js/index.js","fqdn":"kajot-casino.bet","domain":"kajot-casino.bet","tld":"bet"},"ip":{"addr":"104.21.88.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ee4696af56d5c41de5838ebd82c9b0e","sha1":"c07bbe7f457c048b14fb8b843fe9200c4c09bbc2","sha256":"be9635c04ba8dc74a258c27b3093d6c67009d88a338d4f3bf65131b4f0a1bdbd","sha512":"8dbc098663b279ca358eff59e0f0a933ff129d89f982bb1fc69e56a0b4a4dc2fc9d5c4207b23334adf5a021dc6c9aa73d15bc69bbf490db1a25e2584435a117d","ssdeep":"192:BFMSlWrRmGvS9anNyBk6buaymJFc17yNxytNRZPzKtVbe/Ud:KrFjns3butOFc1eNktNjEjd","tlshash":"981253213fe037a533a74deb7e23a0e4c408185ef600549bd259adda7c1d912e9e3e71","size":9063,"data":"","first_seen":"2025-12-22T00:58:43.615625Z","last_seen":"2025-12-22T00:58:43.615625Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"kajot-casino.bet/templates/kajot-casino/img/general-banners/banner_1600.webp","fqdn":"kajot-casino.bet","domain":"kajot-casino.bet","tld":"bet"},"ip":{"addr":"104.21.88.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://kajot-casino.bet/","date":"2025-12-22T00:58:17.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kajot-casino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 06:00:27 GMT","end":"Fri, 20 Mar 2026 06:59:01 GMT"},"fingerprint":{"sha1":"5D:D6:0B:C4:65:F8:DF:D7:3E:A4:07:11:E5:1F:23:32:D3:1B:60:1D","sha256":"55:53:2A:0B:ED:C7:58:1C:6B:2E:1F:82:2D:36:64:CF:70:30:85:D6:6B:19:FA:AD:9C:F1:01:3A:96:3A:2E:19"}}},"request":{"raw":"GET /templates/kajot-casino/img/general-banners/banner_1600.webp HTTP/1.1\r\nHost: kajot-casino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kajot-casino.bet/\r\nCookie: PHPSESSID=8bfd599e50cf5e9075e39ad3df16e6de; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzYyLjYwLjE1Ny4zMA=none; a2Fqb3Q_originn=bookm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 00:58:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 66454\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Nov 2025 15:15:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"691c8d81-10396\"\r\nexpires: Tue, 22 Dec 2026 00:58:17 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jBQap6oxRCSr9%2BRnxf7%2BP23r0zpzo8Y2VtPdMwFyuccSDkyvZD%2FAHknRlMw4zWLv0MxsOcYTagMplISfh8hEt58Y7sENLwSSPoN%2B5o6s\"}]}\r\ncf-ray: 9b1bab81d9e756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66454,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"04bded75ea2b5d00f0115adab9e5ed81","sha1":"75093675150187b6ed2029f1f876f51aa509d106","sha256":"5d80bc33c58b348e78833c8da9d475ba07878093044270632d91498abdceec68","sha512":"c8aa4889979ea619213ca155b3566442681d738bce325935dec253a4745692bd66068371ece3dd39142bbe4727e4a188cc6536f343247b7d0dfd458190b12dff","ssdeep":"1536:27JJPzgOkWe95p4VkfZ/RY2xc0RZvFODomiIuBiP6ns:uQV9YAPxPvFgXiIuM","tlshash":"5d530201117668942da62ef8e6fdd4ea003ee9cd0f6f101e764b24e4578165f8cf9907","first_seen":"2025-12-22T00:58:43.607032Z","last_seen":"2025-12-22T00:58:43.607032Z","times_seen":1,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"kajot-casino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kajot-casino.bet/templates/kajot-casino/footer-svg.txt","fqdn":"kajot-casino.bet","domain":"kajot-casino.bet","tld":"bet"},"ip":{"addr":"104.21.88.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://kajot-casino.bet/","date":"2025-12-22T00:58:17.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kajot-casino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 06:00:27 GMT","end":"Fri, 20 Mar 2026 06:59:01 GMT"},"fingerprint":{"sha1":"5D:D6:0B:C4:65:F8:DF:D7:3E:A4:07:11:E5:1F:23:32:D3:1B:60:1D","sha256":"55:53:2A:0B:ED:C7:58:1C:6B:2E:1F:82:2D:36:64:CF:70:30:85:D6:6B:19:FA:AD:9C:F1:01:3A:96:3A:2E:19"}}},"request":{"raw":"GET /templates/kajot-casino/footer-svg.txt HTTP/1.1\r\nHost: kajot-casino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://kajot-casino.bet/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8bfd599e50cf5e9075e39ad3df16e6de; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzYyLjYwLjE1Ny4zMA=none; a2Fqb3Q_originn=bookm\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 00:58:17 GMT\r\ncontent-type: text/plain\r\ncontent-length: 3210\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 18 Nov 2025 15:15:12 GMT\r\netag: \"1ea2-643dfee276bbe-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=225eDarM2HpBubZzB1lYPtAhOsXyfwr7prZv54JpLbkUhfkS%2Fsgh0HRYKFoIHGdvSMAAkZWJb3wcjRj5UxIL53EIQlIewyez9oCuJnwh\"}]}\r\ncf-ray: 9b1bab831a6d56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7842,"size_decoded":0,"mime_type":"text/plain","magic":"SVG Scalable Vector Graphics image","md5":"0703446073fb5d3a42d907da59741580","sha1":"cac46c2a2cf9ac6f6253cbaa37aee13c55799e83","sha256":"11421ffbd66e3e6f72aaddce7e361fe248e9061e657a5c8b6501cbc315d7134c","sha512":"0d8952c1b2ff57200fafb198a71677317632722ea1c3421e2c1e9990e18749dba7399e8db3951c232e4419d0aadb2f3f7c19ec8fa65aebb3bf639d315f5934c3","ssdeep":"192:hWn85lFkcrQXzMXyIBm3zW8eCUnkZEL3UPrWnkng0fmJnLViY:8ilFkc+VITis3Qg0gnL9","tlshash":"6ef10169c394d3b4dd5ec3bcca31b8b4788f14be90f1e31896b58470b2629d8d19d8da","first_seen":"2025-08-04T07:32:41.122321Z","last_seen":"2026-03-26T15:13:32.556625Z","times_seen":47,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"kajot-casino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kajot-casino.bet/templates/kajot-casino/img/favicons/favicon16.png","fqdn":"kajot-casino.bet","domain":"kajot-casino.bet","tld":"bet"},"ip":{"addr":"104.21.88.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kajot-casino.bet/","date":"2025-12-22T00:58:17.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kajot-casino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 06:00:27 GMT","end":"Fri, 20 Mar 2026 06:59:01 GMT"},"fingerprint":{"sha1":"5D:D6:0B:C4:65:F8:DF:D7:3E:A4:07:11:E5:1F:23:32:D3:1B:60:1D","sha256":"55:53:2A:0B:ED:C7:58:1C:6B:2E:1F:82:2D:36:64:CF:70:30:85:D6:6B:19:FA:AD:9C:F1:01:3A:96:3A:2E:19"}}},"request":{"raw":"GET /templates/kajot-casino/img/favicons/favicon16.png HTTP/1.1\r\nHost: kajot-casino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kajot-casino.bet/\r\nCookie: PHPSESSID=8bfd599e50cf5e9075e39ad3df16e6de; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzYyLjYwLjE1Ny4zMA=none; a2Fqb3Q_originn=bookm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 00:58:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 576\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Nov 2025 15:15:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"691c8d81-240\"\r\nexpires: Tue, 22 Dec 2026 00:58:17 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZLB9697LcMGEdamd4I143XcWVDOcQkxXciXS7%2BPhng4zFasijpA4vmpqAJ72jSNdFm%2B5uIe3DkqTLjYzX7ANSkwnFKgmELToUxNRouTB\"}]}\r\ncf-ray: 9b1bab839aa756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":576,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"50366337b7f915475013ef39c504d3a5","sha1":"531e38995af69de6f5a674ae7a06b052e0964146","sha256":"ebe7672f1bd4bfd46340941d20c50b738f9cbaaed5be866a50c7746b577cea76","sha512":"f50a7a7c8aa248f11aaf7d313604a250b7ff5d3a1dd3e214ea4ebe450c3ff480e4393f4a2a17704c8d0294cf5b353df8ebfabb58ecffc07d65c594b41c54102a","ssdeep":"","tlshash":"fdf041a330c96619d109a63bc669a988c8333870280131846c0d9939c32efdd46a37cb","first_seen":"2025-12-22T00:58:43.609005Z","last_seen":"2025-12-22T00:58:43.609005Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"kajot-casino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kajot-casino.bet/templates/kajot-casino/img/favicons/favicon180.png","fqdn":"kajot-casino.bet","domain":"kajot-casino.bet","tld":"bet"},"ip":{"addr":"104.21.88.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kajot-casino.bet/","date":"2025-12-22T00:58:17.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kajot-casino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 06:00:27 GMT","end":"Fri, 20 Mar 2026 06:59:01 GMT"},"fingerprint":{"sha1":"5D:D6:0B:C4:65:F8:DF:D7:3E:A4:07:11:E5:1F:23:32:D3:1B:60:1D","sha256":"55:53:2A:0B:ED:C7:58:1C:6B:2E:1F:82:2D:36:64:CF:70:30:85:D6:6B:19:FA:AD:9C:F1:01:3A:96:3A:2E:19"}}},"request":{"raw":"GET /templates/kajot-casino/img/favicons/favicon180.png HTTP/1.1\r\nHost: kajot-casino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kajot-casino.bet/\r\nCookie: PHPSESSID=8bfd599e50cf5e9075e39ad3df16e6de; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzYyLjYwLjE1Ny4zMA=none; a2Fqb3Q_originn=bookm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 00:58:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 16627\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Nov 2025 15:15:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"691c8d81-40f3\"\r\nexpires: Tue, 22 Dec 2026 00:58:17 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QGwSMHUkhtjGo%2BQjInJe3C%2Fv4y7BnBKNoctwfAbda0PVJfv0dV1kShVpokTfABHS2BtdxCqcc8yxRbsp%2FqfmwpH%2BVgUtO72uyvqI17Yt\"}]}\r\ncf-ray: 9b1bab839aa656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16627,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"ea8d3c41d7b834d2a7a170ad25eee3ea","sha1":"39aff0762190472e229a931d40ec1b665a9ffbdc","sha256":"674e9844642e3e71ccd5465cce6d454f1bb008e68502e42654dc50d352b6f365","sha512":"7c9f642eb20063c7ebb974ea26b9364e7f69c3272dd29f8b129043c57d68995a67cf11eebc0faf04b013c40aadc68eed0e47ab6a56660d2a05c0bb432f227ae8","ssdeep":"384:6VU09GjStlYA1VPfY25+Gr0gE23lr4LQzNcVV0AvTHVHPA44NC:6iWuigdGr0jYcQqh7VvAq","tlshash":"8b72d085de907efdf250186a9736a140ee7d1b202a73ed4b178f77702a96a2fe017012","first_seen":"2025-12-22T00:58:43.609889Z","last_seen":"2025-12-22T00:58:43.609889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"kajot-casino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kajot-casino.bet/","fqdn":"kajot-casino.bet","domain":"kajot-casino.bet","tld":"bet"},"ip":{"addr":"104.21.88.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-22T00:58:16.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kajot-casino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 06:00:27 GMT","end":"Fri, 20 Mar 2026 06:59:01 GMT"},"fingerprint":{"sha1":"5D:D6:0B:C4:65:F8:DF:D7:3E:A4:07:11:E5:1F:23:32:D3:1B:60:1D","sha256":"55:53:2A:0B:ED:C7:58:1C:6B:2E:1F:82:2D:36:64:CF:70:30:85:D6:6B:19:FA:AD:9C:F1:01:3A:96:3A:2E:19"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kajot-casino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 00:58:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.33\r\nset-cookie: PHPSESSID=8bfd599e50cf5e9075e39ad3df16e6de; path=/\naXBwXzE5NS42NC4xMTguMTUy=none; expires=Mon, 15-Nov-2032 00:58:17 GMT; Max-Age=217728000\naXBwXzYyLjYwLjE1Ny4zMA=none; expires=Mon, 15-Nov-2032 00:58:17 GMT; Max-Age=217728000\na2Fqb3Q_originn=bookm; expires=Mon, 22-Dec-2025 01:58:17 GMT; Max-Age=3600\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPfGh25ojhmgv%2FSUqJh8VvipMaEoEvtPG4RRrNe9Hibx9dIns8KORzqpJZK81G9tYjGOEgKTNimnHjbd53w6pZZkj5s98MCSO3BjZgGT\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b1bab7de89056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":32526,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (32361), with no line terminators","md5":"c230db39ca230111bc17caee60b6c665","sha1":"a1369635ed98ac5578a67da0fbeb6e6c817b14b3","sha256":"41998adae9f85abcd6ac62e86610714bbd9921460ac42d16dfa94ef574b81588","sha512":"3086ed81797aefc41052f79bbe015e9cbebfce11d80cf5b04ed02ef381f2b8383d33ba15907ecde0e47959d8cdda75b74a140b9b6d6139a2be3e9905e3208e67","ssdeep":"768:oeqIIBx8x1zc4zYReOzUdWED33wGAJsZN7TzUR:EIIUzzGYdRJ0s/f4R","tlshash":"f1e27723d1803b2f969752d9b2305785a3e1f0568b3a0b1358dacf4e1ed7c64ed2729e","first_seen":"2025-12-22T00:58:43.610914Z","last_seen":"2025-12-22T00:58:43.610914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":12,"dns":0,"connect":1,"send":0,"wait":554,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"kajot-casino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kajot-casino.bet/templates/kajot-casino/css/main3.css","fqdn":"kajot-casino.bet","domain":"kajot-casino.bet","tld":"bet"},"ip":{"addr":"104.21.88.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kajot-casino.bet/","date":"2025-12-22T00:58:17.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kajot-casino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 06:00:27 GMT","end":"Fri, 20 Mar 2026 06:59:01 GMT"},"fingerprint":{"sha1":"5D:D6:0B:C4:65:F8:DF:D7:3E:A4:07:11:E5:1F:23:32:D3:1B:60:1D","sha256":"55:53:2A:0B:ED:C7:58:1C:6B:2E:1F:82:2D:36:64:CF:70:30:85:D6:6B:19:FA:AD:9C:F1:01:3A:96:3A:2E:19"}}},"request":{"raw":"GET /templates/kajot-casino/css/main3.css HTTP/1.1\r\nHost: kajot-casino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kajot-casino.bet/\r\nCookie: PHPSESSID=8bfd599e50cf5e9075e39ad3df16e6de; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzYyLjYwLjE1Ny4zMA=none; a2Fqb3Q_originn=bookm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 00:58:17 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Nov 2025 15:16:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"691c8dba-d736\"\r\nexpires: Tue, 22 Dec 2026 00:58:17 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nM01JMw1PQZn3cTCM0rxxJzNjMUQfv%2BBuzPj97SWLMwK0RMa01w3zNmxCuBsECr%2FdzMewcPozJvLEXcIcQ3%2F%2BeoRj8XJ%2FAPcDzbTR1C8\"}]}\r\ncf-ray: 9b1bab81d9e556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55094,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55094), with no line terminators","md5":"2f77972524c5617bdb2515a2be9104ee","sha1":"3d0d080382f88e0649a4f51b240704a747c41d73","sha256":"7a842187125f3bc109404ab0d8a5207ed6d792054bb2c8183ffeb59003850743","sha512":"49fb7058049b3791b72cfb0591f9418f9577032a71075ed614926a52f79205cbfce0a221a8cff59247b8a5b11ec3ab083f99088880a13d32e7b4065990dc11cb","ssdeep":"768:Dm3DySqNfNNI5HB1a7FTdZp6/aR1wOq3JuRsy:a3DySqNfkHB1KBbRm3Jpy","tlshash":"b433962a76103228a41bd56972e74b491379e010e61721fdb5a3b095cfcb2f51ab3bcf","first_seen":"2025-12-22T00:58:43.614378Z","last_seen":"2025-12-22T00:58:43.614378Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"kajot-casino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kajot-casino.bet/templates/kajot-casino/js/index.js","fqdn":"kajot-casino.bet","domain":"kajot-casino.bet","tld":"bet"},"ip":{"addr":"104.21.88.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kajot-casino.bet/","date":"2025-12-22T00:58:17.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kajot-casino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 06:00:27 GMT","end":"Fri, 20 Mar 2026 06:59:01 GMT"},"fingerprint":{"sha1":"5D:D6:0B:C4:65:F8:DF:D7:3E:A4:07:11:E5:1F:23:32:D3:1B:60:1D","sha256":"55:53:2A:0B:ED:C7:58:1C:6B:2E:1F:82:2D:36:64:CF:70:30:85:D6:6B:19:FA:AD:9C:F1:01:3A:96:3A:2E:19"}}},"request":{"raw":"GET /templates/kajot-casino/js/index.js HTTP/1.1\r\nHost: kajot-casino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kajot-casino.bet/\r\nCookie: PHPSESSID=8bfd599e50cf5e9075e39ad3df16e6de; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzYyLjYwLjE1Ny4zMA=none; a2Fqb3Q_originn=bookm\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 00:58:17 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Nov 2025 15:16:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"691c8dba-2367\"\r\nexpires: Tue, 22 Dec 2026 00:58:17 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ANjxUj48xNaVB3k5pAfDgtMYLJ7AwDKR8kcBiUaGTJpS8wEs71y7n2CWwEJ3BuLMfE99XFi7YEcr8d2860iSosnBsz0DiFJqbqZvMbD5\"}]}\r\ncf-ray: 9b1bab81d9e956be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9063,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9063), with no line terminators","md5":"6ee4696af56d5c41de5838ebd82c9b0e","sha1":"c07bbe7f457c048b14fb8b843fe9200c4c09bbc2","sha256":"be9635c04ba8dc74a258c27b3093d6c67009d88a338d4f3bf65131b4f0a1bdbd","sha512":"8dbc098663b279ca358eff59e0f0a933ff129d89f982bb1fc69e56a0b4a4dc2fc9d5c4207b23334adf5a021dc6c9aa73d15bc69bbf490db1a25e2584435a117d","ssdeep":"192:BFMSlWrRmGvS9anNyBk6buaymJFc17yNxytNRZPzKtVbe/Ud:KrFjns3butOFc1eNktNjEjd","tlshash":"981253213fe037a533a74deb7e23a0e4c408185ef600549bd259adda7c1d912e9e3e71","first_seen":"2025-12-22T00:58:43.615625Z","last_seen":"2025-12-22T00:58:43.615625Z","times_seen":1,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"kajot-casino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kajot-casino.bet/templates/kajot-casino/img/general-category/logo.png","fqdn":"kajot-casino.bet","domain":"kajot-casino.bet","tld":"bet"},"ip":{"addr":"104.21.88.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kajot-casino.bet/","date":"2025-12-22T00:58:17.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kajot-casino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 06:00:27 GMT","end":"Fri, 20 Mar 2026 06:59:01 GMT"},"fingerprint":{"sha1":"5D:D6:0B:C4:65:F8:DF:D7:3E:A4:07:11:E5:1F:23:32:D3:1B:60:1D","sha256":"55:53:2A:0B:ED:C7:58:1C:6B:2E:1F:82:2D:36:64:CF:70:30:85:D6:6B:19:FA:AD:9C:F1:01:3A:96:3A:2E:19"}}},"request":{"raw":"GET /templates/kajot-casino/img/general-category/logo.png HTTP/1.1\r\nHost: kajot-casino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kajot-casino.bet/\r\nCookie: PHPSESSID=8bfd599e50cf5e9075e39ad3df16e6de; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzYyLjYwLjE1Ny4zMA=none; a2Fqb3Q_originn=bookm\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 00:58:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 9709\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Nov 2025 15:15:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"691c8d81-25ed\"\r\nexpires: Tue, 22 Dec 2026 00:58:17 GMT\r\ncache-control: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rm5bSVqHpaTHe%2Bj9dJxsuDRFcN%2B9%2FNxAVeYhnP4eMYK9v%2B1zl5kLFKYAuj6UkZ80F1HU%2BpOuGWz2kv5oiT64N6xQY48fz%2Fdf6rIvxQyx\"}]}\r\ncf-ray: 9b1bab81d9e656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9709,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 59, 8-bit/color RGBA, non-interlaced","md5":"2d613db42d8895d48460980cb1123718","sha1":"d79a0ad550135c45134fc815294cb08f6133fd00","sha256":"995ab4ea0266eef120923019fac7c2822e7310288438f1e03dc740474e5e9f2f","sha512":"b27b935788273685d38d39daae3d3c473e0f6e331129f9bccc8f810e882118b7b400200e9043784c4952940aead1e71237c765262e6d0af864f56d5ad04ab470","ssdeep":"192:5cy75/BIILlZxX7R7k6DP25+7OTTM4f81rIxE:PBeOfZk6DeQSVE1rQE","tlshash":"8c129eec4676d9abd8933995e711ce2ebd91681e34699088dcc05cc8ee2ef0860d7d0f","first_seen":"2024-05-15T08:12:52Z","last_seen":"2025-12-22T00:58:43.616773Z","times_seen":9,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"kajot-casino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kajot-casino.bet/templates/kajot-casino/css/color.css","fqdn":"kajot-casino.bet","domain":"kajot-casino.bet","tld":"bet"},"ip":{"addr":"104.21.88.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kajot-casino.bet/","date":"2025-12-22T00:58:17.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kajot-casino.bet","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 06:00:27 GMT","end":"Fri, 20 Mar 2026 06:59:01 GMT"},"fingerprint":{"sha1":"5D:D6:0B:C4:65:F8:DF:D7:3E:A4:07:11:E5:1F:23:32:D3:1B:60:1D","sha256":"55:53:2A:0B:ED:C7:58:1C:6B:2E:1F:82:2D:36:64:CF:70:30:85:D6:6B:19:FA:AD:9C:F1:01:3A:96:3A:2E:19"}}},"request":{"raw":"GET /templates/kajot-casino/css/color.css HTTP/1.1\r\nHost: kajot-casino.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kajot-casino.bet/\r\nCookie: PHPSESSID=8bfd599e50cf5e9075e39ad3df16e6de; aXBwXzE5NS42NC4xMTguMTUy=none; aXBwXzYyLjYwLjE1Ny4zMA=none; a2Fqb3Q_originn=bookm\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Dec 2025 00:58:17 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Nov 2025 15:16:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"691c8dba-264\"\r\nexpires: Tue, 22 Dec 2026 00:58:17 GMT\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SWrr8ziROBup6y%2BXWhhCnm1Wr28ajonN2RNx0kHyOSUlq8bYN4IkAVf1n6HgPrFXhXhqOtmq6Ts5hNMpihUN82JVYnZYzelI4PbcNZ8O\"}]}\r\ncf-ray: 9b1bab81d9e356be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":612,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1fbae7bdb0fd7beb714fdef368610d84","sha1":"ae206cc13b87a8bdfe2aa02e30fb97a22096bf24","sha256":"6fb05eef126a2d5e44b31e9649d4f6675f318435bf270ec56fe74d575419fbad","sha512":"b46f5d9207e40218eb9f2271778e9a9c9a609317849ca370749a7bb68a7b244ffe836aba695b0c055b7ce41f11f57751673ca6021e5f75db69c874f524497b15","ssdeep":"","tlshash":"e9f0f942e3ab170651b781eb77e7840f62f0225b6301fea8b7d616e14f4e1e894d3e51","first_seen":"2025-12-22T00:58:43.618056Z","last_seen":"2025-12-22T00:58:43.618056Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-22","alert":"Sinkholed","trigger":"kajot-casino.bet","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}