{"report_id":"a656b592-8f7e-46b5-8ff9-51595a79e999","version":0,"status":"done","tags":[],"date":"2026-06-28T13:48:14Z","url":{"schema":"https","addr":"casino-rollxo-germany.com","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"104.21.71.142","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"casino-rollxo-germany.com/","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"title":"Rollxo Casino – Spiele \u0026 Unterhaltung Online","dom":{"size":83914,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65322), with no line terminators","md5":"9048fdd7e019a46f9a9bb1d6a161fe1b","sha1":"c8e834315c1bc550fa1b2d29e78dd1947794d350","sha256":"ec0399358434ae6498f57fc2820a589c4bf48cdb249401efa99b86b9c9652fe2","sha512":"ba77db12b460cb2c82e373e00497db35eb934268b40505d589c2b680ab1307cbae41ee2ced2286adf8d062f39079205be3b9b7f8391523edba2da5a34235e706","ssdeep":"1536:K+6RSq8f443gc5RGpsvYoDdydTdodtdWEZ5oPPUd3dJdAdld0V/hej3iUfaVhe5C:K3c5o8p50pabhZ6PP2N3Cjibkc","tlshash":"d7835ca200c48937c3dba796e6601bce61fbe35cdab7152029b8c4c79fe9ca5507c587","dom_hash":"domhash8b57894cb211a82f00c5bcfef645d8ed","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"casino-rollxo-germany.com","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"104.21.71.142","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T13:48:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"casino-rollxo-germany.com","ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-16","domain_rank":0,"first_seen":"2026-06-28T13:48:15.057621Z","last_seen":"2026-06-28T13:48:15.057621Z","alert_count":22,"request_count":22,"received_data":1158148,"sent_data":11491,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":3,"received_data":44571,"sent_data":1692,"comment":"","tags":null,"fingerprints":null},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-06-22T07:36:22.266568Z","alert_count":0,"request_count":2,"received_data":19349,"sent_data":978,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":3198,"sent_data":539,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"casino-rollxo-germany.com/","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"afcb43875a908784f2d126e965fb8ca5","sha1":"fe3e4156d2e0163255bdae5f6290f6e103b17b4e","sha256":"ae9c172d30ff07c97ba65137e634fd701aba9641a13f9016d9579317210a4957","sha512":"d80b63f399350aee4d90ad49d85fef28b4db4210aa4d89701d072c372ae8f06a9b7cf3d6a29774435699934f8f2ec8007275d5bc16242f9c2fe394edb2547a0b","ssdeep":"","tlshash":"52c08c4ff989ba3709b2b2725caf3a04123f0386899004c003f15a8008f3829726bcae","size":166,"data":"","first_seen":"2026-05-27T10:50:55.539265Z","last_seen":"2026-07-18T17:28:09.205652Z","times_seen":80,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3cdcd7ee5bd8c29b39d8942962d53c3a","sha1":"c81ec6f0fcf14b5eefd03a27e62413328c5cce61","sha256":"bbe9f695666ae54d56e6fdd8f65755252031baa8fa7c6fde063549be92591e56","sha512":"15a3e89e3beb8d74bcae06a4ff153e4e2968b505ea989ccd56ea0260d590a36abac41ee70c6d8621a1894d6d0b0c127c5fe6f2eac5bd213f1c094b21a5f66fe5","ssdeep":"","tlshash":"16e0c0570110ca0147e21177155fe7d95f633f21e8d548ea83329d95bd41f941c9de30","size":367,"data":"","first_seen":"2026-06-28T13:48:19.810939Z","last_seen":"2026-06-28T13:48:19.810939Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"778be0878257dfac33e3ff2cf3fb24a2","sha1":"7f433b76a5b75f191e6119e3b8b5698441ff1d7e","sha256":"49aa71ef7c1d6e40d7716d43b55a4402846c6f479b18d59e3b49ca243c291363","sha512":"8969ea8acc4e27bd09810453694feae295f05206395bb3d310739ac9d809b3e3fed808ce62acf994d0e9fee2daeee50a1ef2fb8a44cdce3fa2049a7593cab142","ssdeep":"","tlshash":"4ee0c62a198924297ae26863768bca8d6f637900aae640360a23c4e4058dda0601cf35","size":355,"data":"","first_seen":"2026-06-28T13:48:19.812546Z","last_seen":"2026-06-28T13:48:19.812546Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6861c712a9739528bc835608c1d1c46b","sha1":"bfdab7b5e421f751f10cad3615abf6204d347972","sha256":"1b5548e4ee03e90a42877f5a9bc2750893db44e83dd2d1dbf3279b2d469bb1d2","sha512":"c4c997a4dad13570f9a71f9aa0f640521fad12daf7ecf5c22f6d943c8930506d431be67f674ed8331be3726965657bd1308b503a57db74943fb917b91e29c2d1","ssdeep":"96:8hFldJWlYeFPUmqsyZUg0CCulgpf57bzqLxCIl/YYivRFj6MwFnG3o:ildJc7xqs8Ugrll2NblIl/Y1/en7","tlshash":"c2a17c112ac14f478386c7b779878625e5005c8f30157a89372388fa3de7ade57888aa","size":4951,"data":"","first_seen":"2026-06-28T13:48:19.814134Z","last_seen":"2026-06-28T13:48:19.814134Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"74077873676658715eb69c0dd2795177","sha1":"7b394ca133339ccd897b38e21ae0239ac5b420aa","sha256":"bfcec3a85a981953e61ff0f1e9f807613719dbf55cb699912a8bc082164e035b","sha512":"f673021573fba6a34dc13575695f09222a3498ff873a8f4babecacfd80e838fec924e9d783568d55570aa450f1c8f3a87a13bf7680b4c0e3646d9a3a68a7174c","ssdeep":"96:z9uONNA5Vs+z+pc3jyNcGvcYjOwFmPvxHMOvOVfPz0hGm6gf8KGrPawzg/FR8to:8ODALfz+pWyNcGEOOwCHxGBb0h9pGrPe","tlshash":"46c18ff42087acb8832e56fb3e940a495f1dda20d5ced580838d70493fba9d75e144fa","size":5931,"data":"","first_seen":"2026-06-28T13:48:19.815838Z","last_seen":"2026-06-28T13:48:19.815838Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3f21ec523d19876a7c2c37d0934413ca","sha1":"8a02a87b8bfea36cc6a8217cef13a27b68a4bdb2","sha256":"090acef662867edb1b1e4944d99b824ed086386eca8a5cf4a4cc9111ff16cb5b","sha512":"7098aa366abb5bd04b9deba794061d499288940ec1c650f6c4d5c92c1463c428a06eb63f61891d6f84b8d25d89f9dcae16ce075c6d2554b418242e9022a7ae60","ssdeep":"","tlshash":"68514be42c5ce94d428160f23f5aac8bfe2de6347dad882cb50c15d23485b4fd5188dd","size":2799,"data":"","first_seen":"2026-06-28T13:48:19.817553Z","last_seen":"2026-06-28T13:48:19.817553Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ab1b7cbfd36ab7c48650df9472d225a","sha1":"9d982832e7db116f1bd113055f0e7d89182afe7a","sha256":"4cee9a668de202a1dcc04edb3d0bb1fb523cc84f2fdfc8d44814357c2a156940","sha512":"01d6e25fb26f20fe0e278ace540ce4346965d30fc25094a2a4df439ccee3a2f923b76359b1941d0b1ba7764b351c86980223b6ed49e93f8676c9b52c493269b4","ssdeep":"","tlshash":"c8514bf42c5ca94d424260e23e4eac5bee3de5307dec842cb50c15d22089b4fe1158dd","size":2799,"data":"","first_seen":"2026-06-28T13:48:19.819473Z","last_seen":"2026-06-28T13:48:19.819473Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4742be2788ea03c8ea21ee734ee33e07","sha1":"9f3edb6c7a3de48e598ede33867d106b6a61c90f","sha256":"304509d082bab840772cfab68eb669ef9a121e2c96ec0bf4db4212d8f1a11e4d","sha512":"1629104d9171b4a6d40e93f10c97446c817b05df916c4fb3c5aa8e3b511a9cdd460888f3288e76827ee623ff7ccc10c78204de5598031079e5892b41a5cd84ab","ssdeep":"","tlshash":"9f11b64f99628d28dbf0a0d13dab0f8a8f6c46954bf6c18022400ee1118ab7c6068765","size":1099,"data":"","first_seen":"2026-06-28T13:48:19.82099Z","last_seen":"2026-06-28T13:48:19.82099Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ae8ed9f1b9bbbc5e4294c0abb5ffd9dc","sha1":"94161c7550ddda04181d2e071115a7cc732e50b7","sha256":"b540c0cb9ddf2ba34ae9b6d7ba912a9501e7cecfd88ae803413d5a7f21a0b768","sha512":"cb0c40e401f89b518a5c8eedcf61f9954c3daa35628d95e55e5f6752c0853fc6e43d171ff239fa7be9826596979c6bd2be3c2ebedf2bc45b650be663a8f14fc2","ssdeep":"","tlshash":"9f01cb7572962075e0eb9abeab9f6004737900823642cc7579ac52e0af87c8003f28ad","size":714,"data":"","first_seen":"2026-06-28T13:48:19.823077Z","last_seen":"2026-06-28T13:48:19.823077Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/components/bootstrap.js","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0cdd915bfa2c0a4551ece645344bb96","sha1":"713d170ec1de6748b9b5e76117f80330d61e0254","sha256":"1c4f7b6e23d302fb686c47d045b01bd2acafb2f05dd4a23fe575b114eb22b0a7","sha512":"e86761f1f27dcb6a7e006f7b792e4d831b7054858dc6c1e4d37a55c2ce4883931f8e74ee0ba215804c4d83f42c2d799da0bd1e1c60ccc12e50249bf90c618d7b","ssdeep":"","tlshash":"3251d7f53585f1f07f692490d17aa620b9392e73b81e4890a2fb4c462b2e40ea431d2c","size":2681,"data":"","first_seen":"2026-02-14T10:00:20.038751Z","last_seen":"2026-07-12T21:28:45.064035Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/5e93xUx2FGCm8b2a.js","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b1ed8474b97854cd2a9fd22e386818f4","sha1":"55b34aa7b3c8efcac3a209640d75ab5edef4ec98","sha256":"2d3fbee0df3a6e4ede18a82d7bda3a4c6903465b26dd60bb7b6156c8b9f885bc","sha512":"dc809d8ee540654684ce3282dd29b9163b0ba70205b9ab6be65efaa938c3a338e96cf36c4a7b270a246cdde6dc8b923385c77b20253fb7186d75c41896043976","ssdeep":"","tlshash":"7c0120d16486a57277b78c61c427948bb13e3158a5dd8fc0f387d5a0246a5d18113a13","size":745,"data":"","first_seen":"2026-06-28T13:48:19.77681Z","last_seen":"2026-06-28T13:48:19.77681Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"51561f45eba3216445a014976afdee6b","sha1":"e6745ff69c7c1f3883d1d53ae8dde67c7aa68222","sha256":"95df1eaa82cdb4e069e47c3f81eacb44bc481c7e4f003a0168bd9b14b5d6fb1c","sha512":"8cf143eeedd12b8983039eb0be86620e4a26adfb45c9ea2a8cbc1becde00d17b4d7f0eee64179139d1e53f812a5829f6f3d7dd587239f5d1d88ce0c7f0be1a89","ssdeep":"","tlshash":"4b41cd6d2af237705ab7767a479f814074b560836509cd417cadef818fa0cf011b9ace","size":1989,"data":"","first_seen":"2026-06-28T13:48:19.824547Z","last_seen":"2026-06-28T13:48:19.824547Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/embla-carousel/embla-carousel.umd.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccc433e7e2ed8017b86837389e278027","sha1":"ac157e8dec8dddbd9b768674968422d629d59bd9","sha256":"f05b5dbfe37d79b636b9db74ad04ed5e99b4bce369d781b0fb38b0b2ac619e66","sha512":"a62638d1120d541d148cb4714759538c9fa838a93009f3dfa1b840bdd731b3fdb2b201c677ead9c177c5f33af1dfd60ad34bdca57d41bdef2ee957fdfd3a7482","ssdeep":"384:pW3WT2X/jBbU6N/LHq0GFZGPow0Ov7NijEUE2Uy1s2B4fUXH9y0ApP:E3SmrRU6N/LHq0WZGPdzSEGKssAAP","tlshash":"c782b7ec70c2b062639724f9503f9109f37b1881384e9550e678e9e63cb606e9677f9e","size":17946,"data":"","first_seen":"2025-04-09T07:37:23.81801Z","last_seen":"2026-07-18T18:30:33.408026Z","times_seen":1629,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/45bfDrUpDMFUae3a.js","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"25b760c991cc14cd5b463518a80ae6f9","sha1":"8d00dd347b77f234bec925d7e63283f52b4ee494","sha256":"2cea370a590c2647c47270bf7fa4fdf88152504c4887b72cd5a35c8036d5f2d2","sha512":"0f9f841b296844b9c3b90c57f6cb1b61eecf11663ec2f813d44b2164cf53f0f6289205b6265d80f9312b4daf84239c674077b80607bccbe602448fbef665ca38","ssdeep":"","tlshash":"5af0234be181daf93a714cd6c21f414ab22a04f54790109083ef0d33623d087e937fc9","size":446,"data":"","first_seen":"2026-06-28T13:48:19.788465Z","last_seen":"2026-06-28T13:48:19.788465Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/2958BRwvjLQy078e.js","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c91c5fac12334bf84c796da8e1a8f7f2","sha1":"c2f907b3dffa06c8aa68560bcafd1a64cf1da0b3","sha256":"7529d88464964f40d4476b5fc217920748bb4bb63cf705bf1bbfa817c0e1dc1d","sha512":"9e9572d028c44ebaa1686b9f3361d0902bcdff7e0260896ee45c07e5cc07b505c8b16fa45782f91b03aa426faeda3c158e0350a882cb27cc835ba87e2189dd36","ssdeep":"","tlshash":"9df0209f9c010a2bd4a8fdc412f2860dcf1c10bf3fb70de6c44641240b596e902e494e","size":608,"data":"","first_seen":"2026-06-28T13:48:19.784148Z","last_seen":"2026-06-28T13:48:19.784148Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/e9a7DIBOXZwV558e.js","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"658a0ee177443545d37401809d77b33f","sha1":"11da262449749aee4dc45ecb71aa6481e258a73d","sha256":"0706bdca6045c57bdbc9c211ae55472a390eddecf5d0037acc9dff3d1176c3e5","sha512":"52f179dded9d2abc870f30f81423b61e838f7263bedae1e6cfea44ff46263fa7aa58172d71ad0979a2f4c19bdb29981c326ffe09dfd1cd8dc15d1a9f82ad4e52","ssdeep":"1536:DHIv9lkly0hZpFlXwIe1EdTLTKSgJ6n6uaSD7AvlMctIgL:DoF+wIndTgJ6iSvA9F","tlshash":"c7d309e83992f6616ab702a710ef1807733d1a1b280c4950a615fdde75f801ab27bfdd","size":134389,"data":"","first_seen":"2026-06-28T13:48:19.761216Z","last_seen":"2026-06-28T13:48:19.761216Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/c5b5C_R5408t736e.js","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f50c66921fab56812b9cd2872d3a6cc7","sha1":"367ed3d95312d9399651453d63b97d03ee331759","sha256":"8f74499409f1fcd71ae8a8aedea0ede93bb1831d64cdb3060250672f0ab08bc5","sha512":"8c2b0f4e4ce7e2fb404aa5115d5f39006120fdd84b61df37c3a6bf0ec2feee70ae5eba7b04bef96f5b5e47f8fc6f8dfc662c2a473594f48a363fc2044dead68c","ssdeep":"","tlshash":"44c0808f79e0d271c3491cf480319d47d725263c53797dc0629ec97177624c6052aa37","size":189,"data":"","first_seen":"2026-06-28T13:48:19.802442Z","last_seen":"2026-06-28T13:48:19.802442Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d135d6367c9c7bd179344a77fc8175ce","sha1":"a90d8ff8224a449a7e14e046c765ae9e7ceff22b","sha256":"af5e0b1889ba204981fbbf3af9a4304832fbfb0fa0a79d4048c19ba4ecdaa710","sha512":"5126c41e92e73fccccb80893ee2ab971c3d65ad325015af5e2ba8d342c3a0e2e6f5e14c78cda1f0009709968239a6f3ecb86c1a070bd831b8a80c1b24c783656","ssdeep":"","tlshash":"71c0809511e3a120f2f751c5c3df35470010717515e445d351059c70451c8455554f78","size":156,"data":"","first_seen":"2026-04-23T17:35:27.07977Z","last_seen":"2026-07-18T18:30:33.487009Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"208343c96647ac7b74ed6ee39a1fd1dc","sha1":"490829dfe5342e4c85045ab45ddd23708a0f91f0","sha256":"5ddb04fbb3274328dede870be7ef2df27ba90e52969832f1ea1b17ee8283259f","sha512":"c946bff23534c113a1347e7d741166dc863e9a7ae10fc90e8e48117aae8dc2ba0b53788caa203d2ef105d565c4002c828cce1bb50246f4eecc9cfa7d21bdca3c","ssdeep":"","tlshash":"6971b77912111fb33ddda0a8dd256ec3cda9183485da887e384e5cf30628d4381bebb9","size":3604,"data":"","first_seen":"2026-06-28T13:48:19.826779Z","last_seen":"2026-06-28T13:48:19.826779Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"379446f09a0b2fd1e7a66862e630d60b","sha1":"76731e89c20459130e7e8acf22aea8572a9cc659","sha256":"ba11063321a0421d06c3e489c9249715d12b8119396e4f83a06701fe6bade8dd","sha512":"234a3435638a99cf6ef121c5281782e4d9336c701ad281920075ca3289ed84e351e231e22aefb18b88e038dc07f9df0191d221b97ebf8b4c7290e2ff90ad0293","ssdeep":"96:QeCS34rga77zGD8vDLq/WxScnxOqX/fAMkvm:n/czGD8vD1x3xrHZ2m","tlshash":"449131171163217880fba6daab8f55a0b3251003b306cd187e6c8b955fca4e197f3bed","size":4338,"data":"","first_seen":"2026-06-28T13:48:19.828228Z","last_seen":"2026-06-28T13:48:19.828228Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5af933e340a867f8754d3f8fdd8cdbcd","sha1":"3c9c2069a2f2d2feac5fa26fffaf21786ed6351a","sha256":"3757714b9309c9b7d0f1c3b0d677a6ce912531a48c1a61e6568f8b818962033e","sha512":"a8e9ad7c832a9be44e22cdbe2e53633f0d17330ec6f383948337bc7c7873caa3f6d8e2538958ff5704e5fd25c01a2de70f77c905c85eec3616770bfb53827732","ssdeep":"","tlshash":"f541ba5e2ae237706abb767a479f814074b560876518cd017cadeb818fa0db021b5ace","size":1989,"data":"","first_seen":"2026-06-28T13:48:19.82979Z","last_seen":"2026-06-28T13:48:19.82979Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/c5b5yBjzXJbu736e.js","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"64b4a36c51298cd88da2d91583742e0f","sha1":"eafcb46fcb3096ba233114b4137425c472f65fc4","sha256":"5bcb8bb70d74bcab705dcf15b528a5e82789ee3f157570d5ab28a1eb2c8c2448","sha512":"dbb97bd2ed7082012b05e3c4f4ec0acc6c426eeb34e60f46ae578b29354b0673b0ecb73e7f49eb2b93046df80484531bbf8748e5085b1e7f3bddc8086157a99b","ssdeep":"96:+cI310QUqP8+2pIU9aOsPCCAfP7Ox8v34xyZ+wQfL02YOZzVC/:+H2QURyAqBzL02P0","tlshash":"cdd184e9b095f065a6b3243540bf145fb33f2959384dc4a4a325e8c9b8f85acc127f5e","size":6524,"data":"","first_seen":"2026-04-05T14:20:38.394134Z","last_seen":"2026-07-18T18:30:33.400296Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/e9a7DIBOXZwV558e.js","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.745Z","timestamp":1782654467745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /plate32f54a05/e9a7DIBOXZwV558e.js HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Qg95QhxgYNBds9TwSB62%2FIUztKIwNsycy5cElWw6MLo15%2FTjvQGgki4XVvmkv%2FdyXsDaxPuVpaMBtb0XOZoYr8Vtxg2E5sLTq95lsRFnPnpMjIuGmYo3ipMnvRxsuv9yk%2Fsm4t1vGMZwH%2FZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"64c82863a2a75bb4ddd70b2a8cdea0df\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 13:47:47 GMT\r\ncf-ray: a12d25376d0f7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134389,"size_decoded":45167,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"658a0ee177443545d37401809d77b33f","sha1":"11da262449749aee4dc45ecb71aa6481e258a73d","sha256":"0706bdca6045c57bdbc9c211ae55472a390eddecf5d0037acc9dff3d1176c3e5","sha512":"52f179dded9d2abc870f30f81423b61e838f7263bedae1e6cfea44ff46263fa7aa58172d71ad0979a2f4c19bdb29981c326ffe09dfd1cd8dc15d1a9f82ad4e52","ssdeep":"1536:DHIv9lkly0hZpFlXwIe1EdTLTKSgJ6n6uaSD7AvlMctIgL:DoF+wIndTgJ6iSvA9F","tlshash":"c7d309e83992f6616ab702a710ef1807733d1a1b280c4950a615fdde75f801ab27bfdd","first_seen":"2026-06-28T13:48:19.761216Z","last_seen":"2026-06-28T13:48:19.761216Z","times_seen":1,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/Buffalo%20Trail%20.CV-wB--w_Z7lf3b.webp","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.861Z","timestamp":1782654467861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /plate32f54a05/Buffalo%20Trail%20.CV-wB--w_Z7lf3b.webp HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vHd%2BHIjOvKUjpsxm%2FtqrghMGN0fHWjjgRKnvev4o45n4%2FE9mHnYUuo%2Bk57tADH2lJzkRjb1jqrL%2Bg%2FxVTgoPmaKQIWNfKbX5DhyKrKWj6GGiCLs0n5CSkK4xX%2BmQVOUeKCTHL6QP0Uo9%2FFBT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"ff2017b5024448bd959eaac439b1f4b6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Sun, 28 Jun 2026 13:47:47 GMT\r\ncontent-length: 36374\r\ncf-ray: a12d25382d187131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36374,"size_decoded":37197,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 380x380, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6fef69040c1553bdd81c2e25e8f76817","sha1":"e88f4efa203f1844a71b4f107022b2ac21f45e44","sha256":"835f8f702a8d64f33d1221ce4eef30d8205181382eed8d3c875076786cd978a8","sha512":"2ce9b8a441e49512cc2508638424d1991c1fb5b9716693c6743b3b56aea5a9511be6d20208b98a978fff83ba4eaccdcc6f6e74372ead7021c0f5192bc8ceef98","ssdeep":"768:2Wxsolyz9wYzAEd4d35CD2HL14ZxpfxjewZzEkO2SOzApwAVngmCFN:2InkzAEmd35xUxp56IzEl/DplbGN","tlshash":"f9f2f21b948d647b42556281e2f4d7213709df90e207cdb47a1ecababdb19ec40630fd","first_seen":"2026-06-28T13:48:19.763798Z","last_seen":"2026-06-28T13:48:19.763798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/logo.Du_3icZi_uuMR0.webp","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.584Z","timestamp":1782654467584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /plate32f54a05/logo.Du_3icZi_uuMR0.webp HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4SIpLZ9%2FZfIal8tTOJnwXaV5Wcx7vL%2BRXd7IDpmryBWB8%2FWjke12RN5XT19gzLmRu3ThqHLpXR54WMdlPd%2BF%2Bo0h8NYWFYIDLXa6N58I4mkVAl%2FWqUSRlH470nkerzEIp9iBM7UiT5cbnJ79\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"489f07f07253b0092d19166fab3ba420\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Sun, 28 Jun 2026 13:47:47 GMT\r\ncontent-length: 23748\r\ncf-ray: a12d25366cfc7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23748,"size_decoded":24567,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"44d7a08b7d736f35edd330a6add9369a","sha1":"567ca754ccc21e4b2773a3c0c50b961689de4461","sha256":"825cba2f9bc7804d7e2e936b91bd6f9ef1b4392ac1033abbc6f6ef87706acdc0","sha512":"1c6d5880c56f5b1fc39a01e678963c62a702ee035eb339583b95ad625edf6ccd47fc8e2799591e349f8418f30b641dad9e3b6147451488c62368ad4b22adea43","ssdeep":"384:Yw5Y0b+pfqqiNRLmctoy14CdRUeYD+rKSBEOLAkv4j6hUfkxAr2FIETJxy:YCFyuNRhrrwSBQsUsk2jN4","tlshash":"f7b2d08935bf8da06e6473a59bfd9b4024a7e0ac291107da5f9be3861b37414360c74d","first_seen":"2026-06-28T13:48:19.766316Z","last_seen":"2026-06-28T13:48:19.766316Z","times_seen":1,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":93,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oxanium/v21/RrQQboN_4yJ0JmiMe2LE0Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.791Z","timestamp":1782654467791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/oxanium/v21/RrQQboN_4yJ0JmiMe2LE0Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casino-rollxo-germany.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14044\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 21 Jun 2026 20:33:21 GMT\r\nexpires: Mon, 21 Jun 2027 20:33:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 580466\r\nlast-modified: Tue, 09 Sep 2025 18:59:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14044,"size_decoded":14857,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14044, version 1.0","md5":"aa6302b69a6dc6b6d59db30b8b53b4df","sha1":"3a6769dd478cf555100492eeb71443ae3fcc38b1","sha256":"3aa555c528430aab19bb2693dc206bab557767d3082dba66400784c9cc90cfbb","sha512":"a4f3ea1d008c61e485b88897e823cb3003add30db71cabc4fa0bdbcd7752547d34f6588b87b6e5680dabe6b550270c3f7b31dff2f90625fcef6fed00f3b0e3c8","ssdeep":"384:59+7XJp6wwLpd6EplhtnekZdYIzs6bc/Tmaryc7o8:5c7z38sEprtne+YIQ6bO/+0o8","tlshash":"4052d001dd85caf1e71d9a319d587424dceb5cf2b0a41096d92bb520c7842aab3fa4bc","first_seen":"2025-06-22T00:41:53.960552Z","last_seen":"2026-07-18T17:03:07.045113Z","times_seen":651,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/3%20Pots%20of%20Olympus%20.CjSsO46w_1vGEiS.webp","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.828Z","timestamp":1782654467828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /plate32f54a05/3%20Pots%20of%20Olympus%20.CjSsO46w_1vGEiS.webp HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9FnYD4YmSCNbzF8beqz%2BjBkaEeUu%2Fcu4grh9gwhJUbweD%2F6xe4h0qDjuKgKiOIy7FQr13iL09vmyGb3GocZN6ejdqqLtyhAiDlW5O4DIIIXb1wDrRWScKr5u9RFveKDju8msHfT7Z0BvpALx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"80679c20f269df4eefa6caf19d7e1c89\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Sun, 28 Jun 2026 13:47:47 GMT\r\ncontent-length: 25318\r\ncf-ray: a12d2537fd147131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25318,"size_decoded":26131,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 285x285, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fd1dc149955af5c794bb4d491fac1f33","sha1":"67a5b2625298a3ec9b1c522ae865755c412d0faa","sha256":"d7dcfc0e2a70c3cf0a9db08f65e7e955d314ee0a71aca4fc3c54d1fbb2898d48","sha512":"4414ffc44dda3be965917aac5a6ed7470294e7ad25af0ebe2b090c0b0d51339b932ce38be037c268c200f7bb127f0e767bf1231b33b0f0e2b280c5f5a6a8330e","ssdeep":"768:+jFYVX1kK2CnHQdZ9XmgEnby7xFIsSHeqFOAJ:2i4XCnHQl70W7xF6HjF3","tlshash":"e8b2e11bd11aece66864d1116e6c813fc41b8ad6406ad324a72d3fef4d0e12eedc5b87","first_seen":"2026-06-28T13:48:19.770232Z","last_seen":"2026-06-28T13:48:19.770232Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/Druids%20Drop%20.1bsyCF37_Z159mRU.webp","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.863Z","timestamp":1782654467863,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /plate32f54a05/Druids%20Drop%20.1bsyCF37_Z159mRU.webp HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PvYb5hDdy2ojgKCZ2UQ2zXgdZ9QRvp9rUmDtAF7OXSeEIAmCFyFAQhyv%2BDdWOEraz%2F0BD%2FSoAJvJ7BMLirELwi%2Fh38iECIajvER2fL%2FI8K%2B2ZM9ABA%2BXQFt3DDdhElhDbc%2BQH%2Bv4%2BJ7Gn2Yt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"719eaf1a27b454c382392442fb5d4029\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Sun, 28 Jun 2026 13:47:47 GMT\r\ncontent-length: 23064\r\ncf-ray: a12d25382d197131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23064,"size_decoded":23891,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 285x285, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c2166987ddcbff29ade1330399c7f905","sha1":"ed6de15ac3ad4a0e0a9a275d5e6718568b01ef27","sha256":"7db8de7bde6813b1d64ae9c4d6ec68066d84f7c2f3a1496389fdaf77425d3700","sha512":"a1487a9cb325484f4dcf85577ef3670c5fdee68eee21c593dcb7670afe5c6a28a0f817d409962f646ca052ee6d4b9018193f22263a3cddb167c54ada00860aa1","ssdeep":"384:Qv+N8XN3FYgqBR9bhl/vvLioG6yt8lUmOXpzFSFHu2QrcNV8MV5AInc3:QmN8NFZUR9P/Lijn8GlZx7sNCuTq","tlshash":"41a2e1e8fdd18e22a1223939f6f8cd6d410922300cb581d55fa92fc9aba13185f71fb5","first_seen":"2026-06-28T13:48:19.774339Z","last_seen":"2026-06-28T13:48:19.774339Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/5e93xUx2FGCm8b2a.js","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.915Z","timestamp":1782654467915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /plate32f54a05/5e93xUx2FGCm8b2a.js HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/plate32f54a05/45bfDrUpDMFUae3a.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2FYh5eglslKlFYgCxj84URfytEAOkRrpXwVdfPme7%2BVL%2BrbRz2IHtZkC7EUIg7LsUHfmURgQeZ19zW1dzBmwit9KEvoU9j78bUOqZ1ptFfOXGmnpEDgVkyGsORu%2FFOi%2BE1rsliYt2s25CTfE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"9432fb87409116e8a2b346a1847edaf8\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 13:47:47 GMT\r\ncf-ray: a12d25387d1c7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":745,"size_decoded":1312,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (745), with no line terminators","md5":"b1ed8474b97854cd2a9fd22e386818f4","sha1":"55b34aa7b3c8efcac3a209640d75ab5edef4ec98","sha256":"2d3fbee0df3a6e4ede18a82d7bda3a4c6903465b26dd60bb7b6156c8b9f885bc","sha512":"dc809d8ee540654684ce3282dd29b9163b0ba70205b9ab6be65efaa938c3a338e96cf36c4a7b270a246cdde6dc8b923385c77b20253fb7186d75c41896043976","ssdeep":"","tlshash":"7c0120d16486a57277b78c61c427948bb13e3158a5dd8fc0f387d5a0246a5d18113a13","first_seen":"2026-06-28T13:48:19.77681Z","last_seen":"2026-06-28T13:48:19.77681Z","times_seen":1,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/Gemstone%20Jam%20.BNK0KV0h_ZXXgSS.webp","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.919Z","timestamp":1782654467919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /plate32f54a05/Gemstone%20Jam%20.BNK0KV0h_ZXXgSS.webp HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RXFhLYxMkiEQOFtLS%2BejnvqVJKAkwL2yn1dvuZu7AZLX17sF%2F8qv%2Fr2DixAvZQwt61wWUGXO%2FrhHhtCpnmJp4yviBuq%2B0ux%2FzLTjnYO2AfnRYMcMXVHeHRA0qWv8WxR%2FBelRKa5qwalXh62%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"1bdf4a1b9c59f632c45bf27dd1f71456\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Sun, 28 Jun 2026 13:47:48 GMT\r\ncontent-length: 18224\r\ncf-ray: a12d25388d1e7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18224,"size_decoded":19047,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 285x285, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dbcde979ce8336a22f040122bed7132f","sha1":"3c15ca5c966193340a5b4a717355f72a7c2e748c","sha256":"2d840a6bf6a31a4bc30093722e9cb2b2cdd8edf8a94dbc57c686a4711e5e263a","sha512":"be0f89846ea8c0d71e333272f03aced307ed00bee910d09b1a8aa01ab1c52ed5dfd55be3be0f9faa55f382412b548413b0550d3c6db838c8b49b7085b3b2882d","ssdeep":"384:JTAgnmZwugMKWbiMzcnwK3UqLI9p3sSffurVse1dDHXortA2MUePy:JTAgmZvsWbiscnbkMIf3Hte1dDHX+pp","tlshash":"ea82d1cadd3c93ac65493db174884b0dfa40dcbfef4c146e0690872ada4be59561db32","first_seen":"2026-06-28T13:48:19.778639Z","last_seen":"2026-06-28T13:48:19.778639Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/e9a8CKhMMzMYdc13.css","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.570Z","timestamp":1782654467570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /plate32f54a05/e9a8CKhMMzMYdc13.css HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VFkvi9xFCbxiPnsWEQCUnUoP2IYZPcyMWgAW5QSf2VWsMSmRq%2B6ATHvoXkLerLEp1nG6uMweR8P%2F6E1YcwUhgcMQLeEghPWaNb05dDWsQe%2BIx80eggkTiHt%2BJ1vxTJI0CGOCyQtGhd3RZdVo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"f91358d501d4ce600ee7b7aa5360a04d\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 13:47:47 GMT\r\ncf-ray: a12d25365cfa7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49296,"size_decoded":10015,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (49291)","md5":"d6e3ab0c1108a8dba8520ce22911dc86","sha1":"599273b661490bbfa6d7a25ba23437cf9ffef3f3","sha256":"f6f0d820eae6dd2b9d924883dddad60950acc154f34ac66bf30d464f68210fd5","sha512":"89a482fb62a7b5f43e39aff8b92fa168176c61c384f543897c96d2a427cf2bc71c2f300402308bfb260e83ca8361dfebbc5820db3f29add140c9406fde6e4d57","ssdeep":"384:Wyyjuc1UcXNuc1UcXEYdTLXTL/vvXle6Fle6os1w5nbnULQi5kEv8pQTNXuSq0i3:dr3rrYdTLXTL/vvc6W6A6D1m0dAVo7c1","tlshash":"4c23e94a9740312d11338e096fe5a1c81b1cf67cbe0146ecd7a7db37c68f26a7a56b18","first_seen":"2026-06-28T13:48:19.780421Z","last_seen":"2026-06-28T13:48:19.780421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/components/bootstrap.js","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.572Z","timestamp":1782654467572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /components/bootstrap.js HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2Bqg0o%2Fcz%2F%2B4UN93g4FXukNlaZfKbbyTQCYLzmOuTiI71frDfdjEuYX01XK5dygVG5%2BWc0%2FloCdvznpeKvFaqOG%2FoFMhmSpLp96GvJAOk9iicIzr%2BEiYLpwNbcSllcijs2dxSJmqyW%2BVWc3F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 28 Jun 2026 13:47:47 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\netag: W/\"a80-19e3a226c38\"\r\nlast-modified: Mon, 18 May 2026 08:09:55 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nx-dns-prefetch-control: on\r\ncf-ray: a12d25365cfb7131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2681,"size_decoded":2453,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2680)","md5":"c0cdd915bfa2c0a4551ece645344bb96","sha1":"713d170ec1de6748b9b5e76117f80330d61e0254","sha256":"1c4f7b6e23d302fb686c47d045b01bd2acafb2f05dd4a23fe575b114eb22b0a7","sha512":"e86761f1f27dcb6a7e006f7b792e4d831b7054858dc6c1e4d37a55c2ce4883931f8e74ee0ba215804c4d83f42c2d799da0bd1e1c60ccc12e50249bf90c618d7b","ssdeep":"","tlshash":"3251d7f53585f1f07f692490d17aa620b9392e73b81e4890a2fb4c462b2e40ea431d2c","first_seen":"2026-02-14T10:00:20.038751Z","last_seen":"2026-07-12T21:28:45.064035Z","times_seen":35,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oxanium/v21/RrQQboN_4yJ0JmiMe2LE0Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.757Z","timestamp":1782654467757,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/oxanium/v21/RrQQboN_4yJ0JmiMe2LE0Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casino-rollxo-germany.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14044\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 21 Jun 2026 20:33:21 GMT\r\nexpires: Mon, 21 Jun 2027 20:33:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 580466\r\nlast-modified: Tue, 09 Sep 2025 18:59:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14044,"size_decoded":14857,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14044, version 1.0","md5":"aa6302b69a6dc6b6d59db30b8b53b4df","sha1":"3a6769dd478cf555100492eeb71443ae3fcc38b1","sha256":"3aa555c528430aab19bb2693dc206bab557767d3082dba66400784c9cc90cfbb","sha512":"a4f3ea1d008c61e485b88897e823cb3003add30db71cabc4fa0bdbcd7752547d34f6588b87b6e5680dabe6b550270c3f7b31dff2f90625fcef6fed00f3b0e3c8","ssdeep":"384:59+7XJp6wwLpd6EplhtnekZdYIzs6bc/Tmaryc7o8:5c7z38sEprtne+YIQ6bO/+0o8","tlshash":"4052d001dd85caf1e71d9a319d587424dceb5cf2b0a41096d92bb520c7842aab3fa4bc","first_seen":"2025-06-22T00:41:53.960552Z","last_seen":"2026-07-18T17:03:07.045113Z","times_seen":651,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":30,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/embla-carousel/embla-carousel.umd.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.575Z","timestamp":1782654467575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 08:46:51 GMT","end":"Mon, 14 Sep 2026 09:46:24 GMT"},"fingerprint":{"sha1":"BE:A8:55:77:27:FA:F2:90:06:36:65:E9:19:F6:FD:ED:5A:06:9D:D5","sha256":"F8:65:79:AE:79:B2:0F:45:A2:F1:17:30:50:86:B7:3D:E8:9A:27:7A:4A:87:7E:CD:39:A4:0E:EC:92:07:2F:94"}}},"request":{"raw":"GET /embla-carousel/embla-carousel.umd.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Sun, 28 Jun 2026 13:47:47 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 58\r\nlocation: /embla-carousel@8.6.0/embla-carousel.umd.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a12d25367e9f56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-18T22:41:46.98451Z","times_seen":17349907,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oxanium/v21/RrQQboN_4yJ0JmiMe2LE0Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.760Z","timestamp":1782654467760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/oxanium/v21/RrQQboN_4yJ0JmiMe2LE0Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casino-rollxo-germany.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14044\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 21 Jun 2026 20:33:21 GMT\r\nexpires: Mon, 21 Jun 2027 20:33:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 580466\r\nlast-modified: Tue, 09 Sep 2025 18:59:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14044,"size_decoded":14857,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14044, version 1.0","md5":"aa6302b69a6dc6b6d59db30b8b53b4df","sha1":"3a6769dd478cf555100492eeb71443ae3fcc38b1","sha256":"3aa555c528430aab19bb2693dc206bab557767d3082dba66400784c9cc90cfbb","sha512":"a4f3ea1d008c61e485b88897e823cb3003add30db71cabc4fa0bdbcd7752547d34f6588b87b6e5680dabe6b550270c3f7b31dff2f90625fcef6fed00f3b0e3c8","ssdeep":"384:59+7XJp6wwLpd6EplhtnekZdYIzs6bc/Tmaryc7o8:5c7z38sEprtne+YIQ6bO/+0o8","tlshash":"4052d001dd85caf1e71d9a319d587424dceb5cf2b0a41096d92bb520c7842aab3fa4bc","first_seen":"2025-06-22T00:41:53.960552Z","last_seen":"2026-07-18T17:03:07.045113Z","times_seen":651,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":19,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/2958BRwvjLQy078e.js","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.916Z","timestamp":1782654467916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /plate32f54a05/2958BRwvjLQy078e.js HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/plate32f54a05/45bfDrUpDMFUae3a.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VxdzuUWnBFJ1bupfNn8xOXwyr6zs7FME6XZ3HZhmVF0rsGbQP0szSRLUc4sQ%2FUzS%2F6JLz8GSlY0mo3UmQ71osDg3Zm23Pf63egpsiwGAWTo8Ws9TuXnETm2u2JxSKra3X9WCLWey2RfENN9U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"132386e2b87272a1bdbc501257ee4119\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 13:47:48 GMT\r\ncf-ray: a12d25387d1d7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":608,"size_decoded":1188,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (608), with no line terminators","md5":"c91c5fac12334bf84c796da8e1a8f7f2","sha1":"c2f907b3dffa06c8aa68560bcafd1a64cf1da0b3","sha256":"7529d88464964f40d4476b5fc217920748bb4bb63cf705bf1bbfa817c0e1dc1d","sha512":"9e9572d028c44ebaa1686b9f3361d0902bcdff7e0260896ee45c07e5cc07b505c8b16fa45782f91b03aa426faeda3c158e0350a882cb27cc835ba87e2189dd36","ssdeep":"","tlshash":"9df0209f9c010a2bd4a8fdc412f2860dcf1c10bf3fb70de6c44641240b596e902e494e","first_seen":"2026-06-28T13:48:19.784148Z","last_seen":"2026-06-28T13:48:19.784148Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/embla-carousel@8.6.0/embla-carousel.umd.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.624Z","timestamp":1782654467624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 08:46:51 GMT","end":"Mon, 14 Sep 2026 09:46:24 GMT"},"fingerprint":{"sha1":"BE:A8:55:77:27:FA:F2:90:06:36:65:E9:19:F6:FD:ED:5A:06:9D:D5","sha256":"F8:65:79:AE:79:B2:0F:45:A2:F1:17:30:50:86:B7:3D:E8:9A:27:7A:4A:87:7E:CD:39:A4:0E:EC:92:07:2F:94"}}},"request":{"raw":"GET /embla-carousel@8.6.0/embla-carousel.umd.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 13:47:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a12d2536aec956a3-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 1203208\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 28 Jun 2027 13:47:47 GMT\r\nlast-modified: Sat, 13 Jun 2026 06:22:34 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8Ftdv+N9ebY2udt0rQTtXpm0vONp14Gw+ziwsqxhnmY=:\r\nfly-request-id: 01KT7PEE0A306ZCQBP80AW190F-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":17946,"size_decoded":8036,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17945)","md5":"ccc433e7e2ed8017b86837389e278027","sha1":"ac157e8dec8dddbd9b768674968422d629d59bd9","sha256":"f05b5dbfe37d79b636b9db74ad04ed5e99b4bce369d781b0fb38b0b2ac619e66","sha512":"a62638d1120d541d148cb4714759538c9fa838a93009f3dfa1b840bdd731b3fdb2b201c677ead9c177c5f33af1dfd60ad34bdca57d41bdef2ee957fdfd3a7482","ssdeep":"384:pW3WT2X/jBbU6N/LHq0GFZGPow0Ov7NijEUE2Uy1s2B4fUXH9y0ApP:E3SmrRU6N/LHq0WZGPdzSEGKssAAP","tlshash":"c782b7ec70c2b062639724f9503f9109f37b1881384e9550e678e9e63cb606e9677f9e","first_seen":"2025-04-09T07:37:23.81801Z","last_seen":"2026-07-18T18:30:33.408026Z","times_seen":1629,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/45bfDrUpDMFUae3a.js","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.742Z","timestamp":1782654467742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /plate32f54a05/45bfDrUpDMFUae3a.js HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mPVUXkWkcNkdFES5m5mjAATXPiNQsaN%2FW4EXlrpXcEpljbHtZF2hA8EXNA1ZBJ%2Fc5RuYbqRJpOaUkRSq94cLZX5UNml64%2Fy8uV7bm5oYO3ZPflr828p11OoRYPpOfdPExaGCwC7N4Y7MVBco\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"d9098998ea24aa8cc9febd2f83942dd7\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 13:47:47 GMT\r\ncf-ray: a12d25376d0e7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":446,"size_decoded":1130,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"25b760c991cc14cd5b463518a80ae6f9","sha1":"8d00dd347b77f234bec925d7e63283f52b4ee494","sha256":"2cea370a590c2647c47270bf7fa4fdf88152504c4887b72cd5a35c8036d5f2d2","sha512":"0f9f841b296844b9c3b90c57f6cb1b61eecf11663ec2f813d44b2164cf53f0f6289205b6265d80f9312b4daf84239c674077b80607bccbe602448fbef665ca38","ssdeep":"","tlshash":"5af0234be181daf93a714cd6c21f414ab22a04f54790109083ef0d33623d087e937fc9","first_seen":"2026-06-28T13:48:19.788465Z","last_seen":"2026-06-28T13:48:19.788465Z","times_seen":1,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/c5b5yBjzXJbu736e.js","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.920Z","timestamp":1782654467920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /plate32f54a05/c5b5yBjzXJbu736e.js HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/plate32f54a05/45bfDrUpDMFUae3a.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VOEn8slnXPxoo9KfPQ2U9BpMefm3eNQnsP2YjObOKggXr3E%2FPLOcZ8XHeWcAky5o6BZDBXQrlVQOqKZQUO3ZfgkExrBaXwicm%2FCsgIcnfJAei9f6jHDB%2FNMel13y3zANyZkVHKWc9BmQ6qJD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"bb29858d851bec00a3ccd2bedb2aed12\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 13:47:48 GMT\r\ncf-ray: a12d25388d1f7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6524,"size_decoded":3451,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6524), with no line terminators","md5":"64b4a36c51298cd88da2d91583742e0f","sha1":"eafcb46fcb3096ba233114b4137425c472f65fc4","sha256":"5bcb8bb70d74bcab705dcf15b528a5e82789ee3f157570d5ab28a1eb2c8c2448","sha512":"dbb97bd2ed7082012b05e3c4f4ec0acc6c426eeb34e60f46ae578b29354b0673b0ecb73e7f49eb2b93046df80484531bbf8748e5085b1e7f3bddc8086157a99b","ssdeep":"96:+cI310QUqP8+2pIU9aOsPCCAfP7Ox8v34xyZ+wQfL02YOZzVC/:+H2QURyAqBzL02P0","tlshash":"cdd184e9b095f065a6b3243540bf145fb33f2959384dc4a4a325e8c9b8f85acc127f5e","first_seen":"2026-04-05T14:20:38.394134Z","last_seen":"2026-07-18T18:30:33.400296Z","times_seen":219,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/Mystic%20Alaska%20.DlhgMYI0_Z25bofP.webp","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.921Z","timestamp":1782654467921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /plate32f54a05/Mystic%20Alaska%20.DlhgMYI0_Z25bofP.webp HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1L0N2RYdQq9aSdjaIQjfvLng4PwPWoG8Trp8Qbinzu53oqjloLPz%2BsQ4KA0eeP7F%2BURxCriRkgX8C%2Bl6m4Ezlu4Dxl%2B7AkYLU36UcMdmldqsidqdkYFRyTpbPidnBk1pTmRd%2F9Zpyu6%2F3yhy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f4faefdc027ebb6fe19b026f6d7c6642\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Sun, 28 Jun 2026 13:47:48 GMT\r\ncontent-length: 24720\r\ncf-ray: a12d25388d207131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24720,"size_decoded":25539,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 285x285, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"33c723d78ee4f116774d5c80094cb045","sha1":"8ccb004d9d5affd65c584de4c0bd8434c0b0b50e","sha256":"ffdebfe2602fb1c080d174e0b92ed9bcd71f78640e99527b26a04b2d05998b08","sha512":"298c0de613b73f86bb8d400e52ae772a9acbc3e671851a3cd6fb2f21797dc3cc8a1247a45fb90cb0e46a814b9508d742c2d94f1f28cd3d87c0c3be6a6b126ace","ssdeep":"768:DhAEVWphrqAVY+3g4b/K4r7PH54f6MODY:DhjVWpQ7+Db/F4faM","tlshash":"8db2e0f2cf2483a2ad0944c9a51d231e6bce3783bcac11e1deb54ad9fbcd4b292d1515","first_seen":"2026-06-28T13:48:19.791567Z","last_seen":"2026-06-28T13:48:19.791567Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/favicon.svg","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:48.082Z","timestamp":1782654468082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IubGmaSDbMkWKJLLoS9zX2pCd8nefCQJE1NZUAquIZOgkcWsESCVWNG12Nno%2BpSrpcSZMWs985VCWu4B94s%2BQRkKRF8dEy7YDs30oGo9er8Q83576syUa8U3ucEm8ODx%2FQNz2Q1M%2FhbY1dpf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"a03c57bb446bc696f7f04aba9b91b45e\"\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 13:47:48 GMT\r\ncf-ray: a12d25398d2b7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":457154,"size_decoded":157406,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f48f90bbc965531724c945e4c57c7988","sha1":"9b482fc31d30adcac43053f04b3416f329e3cb73","sha256":"4f09af7c9e981bdefb0c899cde3f176928c4011d859bf2a118770a0125fac628","sha512":"3b3e5cb87599c436de844610f44c1406ca93da5713c90d97c10293d7ab958b504892c67b578352a07d5fd68eefe3a2e2387c2d7fb33e9bd3ea095635a008bc61","ssdeep":"6144:94F38WMCjZSJbjEyMkAFlECe9jNarZA7jGsQ7f293JERFn10znW1:brCgJbIyPCQc+7O7MJ21uS","tlshash":"bea455a29620e7a45d87c3a4ce3a91d23a0fa4fddb4e63e82173c7707156bcad445d2c","first_seen":"2026-06-28T13:48:19.793302Z","last_seen":"2026-06-28T13:48:19.793302Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":191,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Oxanium:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.564Z","timestamp":1782654467564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Oxanium:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 28 Jun 2026 13:47:47 GMT\r\ndate: Sun, 28 Jun 2026 13:47:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2514,"size_decoded":1101,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"093c4989dfcd8aee4dfaf9e9cb3a4895","sha1":"ceac18178b0e8eaf4c02942058cf37d752048fa6","sha256":"2ef633b3e6576559e8c0152db71316289327e8941b847a47047ffb50aa289fd2","sha512":"27674e79b1e341def8efd09d2722a0618d8f875d075241c3e8742a8b6bcd73139d0d3551b208103c3aa179707eefc9a3348a33a6d8053bb29762a248ebd9c0b1","ssdeep":"","tlshash":"7251ef82082be504db831cc012cf7d32ee1e629064049974aefe1488ac9bc595361f1c","first_seen":"2025-10-16T11:15:58.061933Z","last_seen":"2026-07-15T08:03:09.452652Z","times_seen":32,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":34,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/3f35uRVVAWWYfe5c.css","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.567Z","timestamp":1782654467567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /plate32f54a05/3f35uRVVAWWYfe5c.css HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BwVzLpQkryJqX9Fw0ZjnZfRCuH%2BrWivB3kxkxouMbTMqHD2nHlnNtqD0wIaNCa7Iui6Lz%2FomlgqVyWiVfr1Mp5ZEkBJx6Gd4PKIZk9DP2Gnxqiui2tOFFqXCmd2Qp9FcZWegs1ajRkfO2L1x\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"b7fa6df7065d1a2ac366b86d966c191e\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 13:47:47 GMT\r\ncf-ray: a12d25364cf87131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7048,"size_decoded":2562,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (6875)","md5":"e26391631459c1a0b7ebe321f6860877","sha1":"8959e3e9d60f675e560c9dfaf89830bab8deadc5","sha256":"a1255cd34bde2241a3bc020088f0af2a9a5dcc7c4c033ec1617e5d16fd79534a","sha512":"2b59cff98f58724da2e5648b84e6c256ddb24080b6c0b60d0fd5a94c5586455a0815a74da5725a1e1e9bba7c8d588fc451a852e3ea9a947e819805269db10297","ssdeep":"96:TPLjgC7jg528fzDAKSMCIxMCI6aIwUMQITIMCIWICaM2IFIoYVY23:TP4CQ1fz7SMVMWMiMTMRQB3","tlshash":"8fe11fd9620061398e97963316cd192ce838afe58d23596df523054d9ce6bf833b373a","first_seen":"2026-05-15T23:07:01.192766Z","last_seen":"2026-07-15T00:41:36.175869Z","times_seen":27,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/e9a8BGsrlLktdc13.css","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.568Z","timestamp":1782654467568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /plate32f54a05/e9a8BGsrlLktdc13.css HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fI9IfnawAAYjiwtePtcHguOP68imyFPPWHdJYqMmp6PQymbIvAciBjLB3Y4EmsdoNLpg7F7oVQc7TVSRDeYJdYylsvSnVHOgFNKyS4WAzJ5IYcigYSve8Sr%2F3%2F6Fz8yxf6%2FQ5zFyQ%2FG6CYpo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"4485ea26ddc49a4c2f5f573b24faa492\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 13:47:47 GMT\r\ncf-ray: a12d25365cf97131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139630,"size_decoded":15454,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"c09231f05be9b53a08aa8d17a123af4f","sha1":"08f7a7294086377cd10d0bf36fc1dab27ecb033f","sha256":"3cae9dd4047f803e009b315f0fdbc184f880155ec58998f0102893f10aabc9d5","sha512":"04c31193c3ab2b1f2554459b1f1be24b4653a585356f9a2b78eb76e2ead376fc4a258e1c5592abd6c69a77bb5921b6d26a6d81ec9528cbc943bbbeb1261ef393","ssdeep":"768:gAr5jAsrlmhlVCBPD4k669FzZSk5qXNa9F/Eo2vt/NN+apnnH/KPQecorJeuwwum:Xr5jVAR/hn/ACeNITkMxtsb","tlshash":"73d3a60bdf30b05fb15f47852a9465811618cca9d81742fde393eb68890ffab3e6219d","first_seen":"2026-06-28T13:48:19.797465Z","last_seen":"2026-06-28T13:48:19.797465Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/hero.D7FGZnDa_22Y6UV.webp","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.586Z","timestamp":1782654467586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /plate32f54a05/hero.D7FGZnDa_22Y6UV.webp HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDE2rT6WHoJ0%2FutDP6DDWvVmM6jbAhEMvrCpEcq7baarXGsCsP%2FqyOM0k38NMdzcaIoct%2BATCFyKjn70ZiRP1lytAFSvqWJRM0iZxofSbxgoZ%2FSjekpWlx0Cu0eT2IxBOSKkwP1nOFQX4D4q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"012b1be3d4061f405fa5d0674ddc454b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Sun, 28 Jun 2026 13:47:47 GMT\r\ncontent-length: 57580\r\ncf-ray: a12d25366cfd7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57580,"size_decoded":58395,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1440x810, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f601221241315e83fb42e8477e216c37","sha1":"c4d3bffa324f16e15094cb6dbb5c69e59e7f653c","sha256":"aec57fea5650cf159a712520111ff164f7508e5d12aae412d874bbd294d5d358","sha512":"d7bd3bfb33145a63726f37c084180fd85678e13a932c8dd25b57e4b8c9b69032620e63dc66589c07dd40b1f2b0143696ce7ab6d40ae2855fd7558707980694a7","ssdeep":"1536:xFbp1QEWRsuFGjYqR++lwgk/rgUEdAE47B:jwRYjYqDPgrgP4N","tlshash":"924302c97e7769fcec12579be039439cabc054d05a5c829ab28d14b85b837f820c1dee","first_seen":"2026-06-28T13:48:19.79913Z","last_seen":"2026-06-28T13:48:19.79913Z","times_seen":1,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":90,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/Power%20of%20Tiger%20.CDQTWA4F_Z1jk821.webp","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.923Z","timestamp":1782654467923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /plate32f54a05/Power%20of%20Tiger%20.CDQTWA4F_Z1jk821.webp HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=spPsGGAKmOYgozPqEbaj1C0ma%2Fdayae%2FBBtz4TRyhbKpbq3arExEl2de3LmbG%2FcsoHg0Fp4Ubb%2F8AL0dcML7ks%2BuS9gwJPGgAW7spgUdErtKdLlvmipoGGVhDxgshmlhDNrAcqZDeEQ6ncR7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"8e57650ac938b89716a98a0f8747b10f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Sun, 28 Jun 2026 13:47:48 GMT\r\ncontent-length: 28932\r\ncf-ray: a12d25388d227131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28932,"size_decoded":29749,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 285x285, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a7ca0d608493717d87f2ec17868133d1","sha1":"2df0c2f09181bfc307d6caae47b259c2fc3682f2","sha256":"489dd9d7b277cab508cd453eb428d1337ff96e82a8e933586235fc0688280846","sha512":"647f9a4f3b576bd33f382da77212a6bfaa4c3bb3f3474503c9778ab9f785d1c9dff0397b0681860e690e69f7e814ec096798604a0bfd6a3dfc88c4c440337051","ssdeep":"768:7LpaiMe+1Xy2VmE8P/kmD/MPrd54ltOkIPWx:v8RSS3xkIPO","tlshash":"ecd2e10a35217909bd3e6369da379f24c213c0a412d3f4a5c776a3b395850c96e6ef47","first_seen":"2026-06-28T13:48:19.800858Z","last_seen":"2026-06-28T13:48:19.800858Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/plate32f54a05/c5b5C_R5408t736e.js","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:47.965Z","timestamp":1782654467965,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /plate32f54a05/c5b5C_R5408t736e.js HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/plate32f54a05/e9a7DIBOXZwV558e.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9fiaNFp8nQPvtGdEegh%2Fdg19rsBf9f6RhRvaBEbUxWloxBSFHn4cb4Qk%2Bca8KGOyyW6krYReaPDXlEifKA9x0HL0kD6yDv8rMGaah1phfe5NKZP69tWukMKrJ8dhNWgkgjhhWLm9Vfw255BB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"048fca3405c05c249206f0c274e54f71\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\ndate: Sun, 28 Jun 2026 13:47:48 GMT\r\ncf-ray: a12d2538cd237131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189,"size_decoded":978,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"f50c66921fab56812b9cd2872d3a6cc7","sha1":"367ed3d95312d9399651453d63b97d03ee331759","sha256":"8f74499409f1fcd71ae8a8aedea0ede93bb1831d64cdb3060250672f0ab08bc5","sha512":"8c2b0f4e4ce7e2fb404aa5115d5f39006120fdd84b61df37c3a6bf0ec2feee70ae5eba7b04bef96f5b5e47f8fc6f8dfc662c2a473594f48a363fc2044dead68c","ssdeep":"","tlshash":"44c0808f79e0d271c3491cf480319d47d725263c53797dc0629ec97177624c6052aa37","first_seen":"2026-06-28T13:48:19.802442Z","last_seen":"2026-06-28T13:48:19.802442Z","times_seen":1,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/components/g","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:48.133Z","timestamp":1782654468133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"POST /components/g HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://casino-rollxo-germany.com/\r\nContent-Length: 270\r\nOrigin: https://casino-rollxo-germany.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FykxL345fy4dJQKBoZlfumOfPmZiOge9cSTEBhzcH9TK1NEAFUOjygSv7ATBouLkc920C1leMlxZo9Bi5ke24SGubfPbmgsJN14Aytk0LsOCk1SmdDkihifRFMAJyUe3jUR0FD8uWGR84HvA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 28 Jun 2026 13:47:48 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nserver: cloudflare\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, accept-encoding\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nx-dns-prefetch-control: on\r\ncf-ray: a12d2539dd307131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":1441,"mime_type":"application/json","magic":"JSON text data","md5":"ed156b90b230d2cd94dc551d212ed160","sha1":"8f2a8e0c501feb504cbde575519aa532bf1d589a","sha256":"64ece97beb8bcb57276793cbb18171ad9d95bd2a20459dd02ea885a9b2edd791","sha512":"ef1818a6e74a35b983898da44c6fed041627e0a14bd0fb9ecb592dcdd14330f7b6cb73048f5b1e02deecd12e349f45a9f557bb95c0b4ee197f652589ed5f2102","ssdeep":"","tlshash":"6ae023c204af212a049dde108c2c025000696df66cb021f4b4fc3254de40fef1455401","first_seen":"2026-06-28T13:48:19.804228Z","last_seen":"2026-06-28T13:48:19.804228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T13:47:46.891Z","timestamp":1782654466891,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bZd%2BMQx2t95L9eLpxv0ANg9b%2F14qlB6NdxjxRSpXd6od4%2FhdX7Nm%2FcYwFYcnXjuE%2Bif5ckehflSh9rrv3LufzA53%2BWnrqlr1guiAY2m7za%2F6as6P2oAmDWykUlUN%2BxhSKHcX%2BBO%2F74TwlB99\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\ncontent-encoding: br\r\ndate: Sun, 28 Jun 2026 13:47:47 GMT\r\ncf-ray: a12d25325cc87131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":83137,"size_decoded":25486,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65315), with no line terminators","md5":"e81ea6b2f2e07f8677dff97e44ceddb9","sha1":"90f94529da265bfc830b48a9cdbece5e3f5857f7","sha256":"8c7347032b91b90db810c48bd9de1322455b018416a888336355f28dd1636685","sha512":"18ad1d4afa526c1a4ac47fd5493e9fcd705db464e11a1212ac45ddb69512299fa35a3561f4a9c5af4ba95f30e19dc8ad731d46c2c0ad1e7fb69420283af5d7be","ssdeep":"1536:g+618EuJ443gc5RGpMx4BTBOBDBoBRByeJ9BPPUBHBtBgBJB0/AHej3iUfaVhe9e:grc5os81eFMfnJTPPghjk3E4U0","tlshash":"21835ba200c44937c3dba796e6701bcea1bbe35cdab7141029b9c4c79fe9ca5447c58b","first_seen":"2026-06-28T13:48:19.806327Z","last_seen":"2026-06-28T13:48:19.806327Z","times_seen":1,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":13,"connect":22,"send":0,"wait":146,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casino-rollxo-germany.com/apple-touch-icon.png","fqdn":"casino-rollxo-germany.com","domain":"casino-rollxo-germany.com","tld":"com"},"ip":{"addr":"172.67.145.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casino-rollxo-germany.com/","date":"2026-06-28T13:47:48.081Z","timestamp":1782654468081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casino-rollxo-germany.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Jun 2026 10:38:50 GMT","end":"Wed, 16 Sep 2026 11:38:41 GMT"},"fingerprint":{"sha1":"86:EF:F7:39:96:20:39:49:F6:22:94:76:8E:3F:3B:80:FA:F4:5D:5B","sha256":"CF:19:51:8A:5D:FD:BA:88:CF:70:CC:2A:7D:DF:F9:F9:45:C8:9E:02:7B:AE:08:6E:94:F5:AB:DB:F8:54:A6:C1"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: casino-rollxo-germany.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casino-rollxo-germany.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ufMNirf2UJwJTtDNdyzxJnP%2B%2ByIELiFumotuJtpiwe9jfomJwfqWxOg5tH6hKQBoyXLbdHk7KR74qT98cNSa0AvTMDxxSAbfChCeqsNlcZ52KZZsELY1e2TLZs2aygz07hss%2BFAEfhSIIDdU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0a142d50f1480f1e7ff1196f365f386e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ndate: Sun, 28 Jun 2026 13:47:48 GMT\r\ncontent-length: 19307\r\ncf-ray: a12d25398d2a7131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19307,"size_decoded":20122,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"25eb5454a660524b6a2e3f9e3b05bd38","sha1":"82d2f4e35348aeea4a13bd6e3a9074287db3f5c8","sha256":"7ee213fccf992090b7d99f6b709bd77aa3b40096909bccf93a927a139331d497","sha512":"208ebab591b0b3ac282a6239c75fb049d5b3eb9539b02d31055cadba219280a8da1952a19a1890332faacdb0331fa4629358728218fe3f3da6776fd6be280d75","ssdeep":"384:qs2TnRlBb0a8xdfUc5PSu5oA04covWJNAF5/Zh50Bc1dieNrY:qs2TRXb0Nz6Kv4Sh580QIE","tlshash":"4a82c0096741f4ffc35a23fd2c39ae7c96c0e92458a712842f216591ba3546192aefcf","first_seen":"2026-06-28T13:48:19.80828Z","last_seen":"2026-06-28T13:48:19.80828Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"casino-rollxo-germany.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
