{"report_id":"bfca6a6c-5c49-46c0-b662-48b0617daf0e","version":6,"status":"done","tags":[],"date":"2025-11-14T00:52:33Z","url":{"schema":"http","addr":"n1casino-review.com/","fqdn":"n1casino-review.com","domain":"n1casino-review.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"n1casino-review.com/","fqdn":"n1casino-review.com","domain":"n1casino-review.com","tld":"com"},"title":"N1 Casino Bewertung 2025 - N1 Casino Deutschland | N1 Bet Casino Erfahrungen","dom":{"size":48408,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (48286), with no line terminators","md5":"fd8b74bac992e6c74aceff180f668890","sha1":"acba2c1e5a45b9859d29b0fa73735b82cf9de9a5","sha256":"fed49f19cc2176702d98c6ba0a58ca7cd50941c05e3946ccfdf8fe59c7a1e808","sha512":"c0415aa040e46d84c8402e226ce7b41ac37d99b64a77befdac3993bee6abf6eb32794e115638b1ceda39304b4440e66696335014f528f9fed95787473a69cacc","ssdeep":"768:/ZU0rGV4xksc64Jysq7vi1ccccBEOPEf4pTynw/nCv3GDI:aebx/c64Jysq7v2ccccBEOPEf4pTynwy","tlshash":"cf232996750c1a3c681b97c0f7d9b32c9139f182ee511418b16d14a9e7e2fe8b87fb84","dom_hash":"domhashd8c542eac8d9b5f8c93ac8d1331b6e37","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"n1casino-review.com/","fqdn":"n1casino-review.com","domain":"n1casino-review.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-19T00:52:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"n1casino-review.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"customer-assets.emergentagent.com","ip":{"addr":"3.167.2.121","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2024-04-19","domain_rank":0,"first_seen":"2025-08-17T22:43:30.441297Z","last_seen":"2025-11-09T13:38:17.867486Z","alert_count":0,"request_count":14,"received_data":37796991,"sent_data":8358,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"assets.emergent.sh","ip":{"addr":"54.240.174.47","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-06-14","domain_rank":0,"first_seen":"2025-10-15T16:59:18.626023Z","last_seen":"2025-11-08T12:12:37.650901Z","alert_count":0,"request_count":1,"received_data":11622,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"contentdeliverynetwork.cc","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-10-25","domain_rank":448448,"first_seen":"2024-12-30T04:10:13.043001Z","last_seen":"2025-11-07T21:36:37.649553Z","alert_count":18,"request_count":6,"received_data":16822,"sent_data":2958,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2025-11-09T22:21:00.231743Z","alert_count":0,"request_count":2,"received_data":282412,"sent_data":871,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"us.i.posthog.com","ip":{"addr":"18.234.19.140","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2020-01-23","domain_rank":42193,"first_seen":"2024-02-22T12:48:36Z","last_seen":"2025-11-10T18:29:08.091519Z","alert_count":0,"request_count":3,"received_data":2256,"sent_data":1683,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"us-assets.i.posthog.com","ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-01-23","domain_rank":57965,"first_seen":"2024-02-22T12:48:35Z","last_seen":"2025-11-10T02:39:14.718672Z","alert_count":0,"request_count":5,"received_data":410163,"sent_data":2418,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"n1casino-review.com","ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-11-11","domain_rank":0,"first_seen":"2025-11-14T00:52:35.914751Z","last_seen":"2025-11-14T00:52:35.914751Z","alert_count":3,"request_count":3,"received_data":439827,"sent_data":1382,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"eu2007.de","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1508692,"first_seen":"2025-11-14T00:52:35.905955Z","last_seen":"2025-11-14T00:52:35.905955Z","alert_count":0,"request_count":4,"received_data":14613,"sent_data":1772,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"www.eu2007.de","ip":{"addr":"85.13.153.132","port":443,"asn":34788,"as":"Neue Medien Muennich GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-11-14T00:52:35.929755Z","last_seen":"2025-11-14T00:52:35.929755Z","alert_count":0,"request_count":3,"received_data":14250,"sent_data":1410,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"n1casino-review.com/","fqdn":"n1casino-review.com","domain":"n1casino-review.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"100632419ef0368a6c077eb1ee8a0de0","sha1":"cdc37cb6e05537dddd01b4e00cbaafe7639cda5c","sha256":"a91cba161d2bcc24e374f0586acbcecc8a8dbeecb6069877385ad283521326e3","sha512":"25b4307758f9883d1fc0660c48b2484c1f79bddedf08bad34992ec27de7098b7cd6ecbe303a0b354fb4e6eb02f46510fdc7ae30c5a2e0e831cf30482989618fd","ssdeep":"","tlshash":"929002098d40fe2225300283d3b3e34b74464003016c916650114c202350097e90f0c6","size":53,"data":"","first_seen":"2025-11-08T12:12:48.269509Z","last_seen":"2026-05-14T13:47:09.781461Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/rrweb@latest/dist/rrweb.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5479cda2d5984596110ce6deb3fd949","sha1":"1cea8ad5b994edad9a3dcd73b07b5b855a7a26b5","sha256":"86a006a77aaf44645501f4bb6c27813d095dbaddc18ec10087e08997ecca8854","sha512":"eee006517827305b60fd4b5744345410cbb5b0d1b312ff424d566f3d3311ddabe6fe7d3602639bad9f21934a4867f4c217d1d7b02af7abab59913f050b056f05","ssdeep":"3072:7vLW8UTv5Z3PYmo6zBwUrL5h5DGJWZX53vA:TLWF1mmo6zBwUrL5h9GJ853vA","tlshash":"bdd339c9319539736bd755a9907a4241b6306855700880b8f93dedfb38bac4321bbfbe","size":140517,"data":"","first_seen":"2023-03-14T08:31:23Z","last_seen":"2026-05-14T13:47:09.779061Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d2adkz2s9zrlge.cloudfront.net/rrweb-recorder-20250919-1.js","fqdn":"d2adkz2s9zrlge.cloudfront.net","domain":"d2adkz2s9zrlge.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2c3ced1d3877f3159e43418ad0017e1","sha1":"e0a5670c3994673b7bdf0391fd59c15bd73d6e3f","sha256":"638c2dda42166282033c0519bb92f24ec23b6de7a83f6073ecdf158f5742fb89","sha512":"180cfb1750e8dde3c4c91663043ebb6bd1f3b90df7e22db9d48007a7caf1f0b36898e14887286099cb1275ba449ad21ff690315406e7fd24abf00c6d9b709071","ssdeep":"192:qOvT12LMg+Z+2ajFyMTHfKCHH5/NGCIGUWvDc2yx7vQjj68vFJzSWs4cix1xNXEj:jLqZL1LPjuC0Ix1xRNAL5w9kwb+yLs","tlshash":"d5c2a76869b614324a33e0ad1b9b70453231804b3e45eda47e8c4b553fd8b6edaf23dd","size":27841,"data":"","first_seen":"2025-10-16T18:07:38.10377Z","last_seen":"2026-05-14T13:47:09.757271Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"n1casino-review.com/","fqdn":"n1casino-review.com","domain":"n1casino-review.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0716c51c9d5a4247e36e3ccb43add10d","sha1":"579abea0e39052384e5fb3fedf4054be2dd388a8","sha256":"ef2aa0c759b60f2d74d2be764a83d581256f57dedc562602f1c22e148449deb7","sha512":"bce6a02b70bf5a7ced9326032bdf8a0bc606dab7acfa2bfbc9697d82168b11d2911d2576d044bd97b36cd535655a953a8cd2acc38a1ad29e5de8bb8df9e58bd9","ssdeep":"","tlshash":"1d41860ef90374738bd2f6e174b6598acf5a16c44378cd45e56180c95241dca462efb9","size":1900,"data":"","first_seen":"2025-08-13T11:34:22.806089Z","last_seen":"2026-05-14T13:47:09.782334Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/lazy-recorder.js?v=1.292.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"274a018aa13dd189862b710acd68ab99","sha1":"4b535bf67c6fddc6b75a089df50dfc2c06e118da","sha256":"3187cdf5c63dfc91becee95f625f0ad62089e05e109f754308b89e36e0cbfafd","sha512":"85b3b8f13e63b544722ebdeaee3799edc5dfb8a4f12c039778cce1575e42f8c5a0ef6c6f8b65b7ff0640f51a6edf154aae47c835f6ce69f721645e380e00c559","ssdeep":"1536:JmYGVccSmqV3Zc2UZwh+Rsf0ycmIYUiknaXvghUatNY7YsB2GMztsRYTYBNfps7Q:QYGfnYqPRCEY3kz/bZtmYTYLfps7/I","tlshash":"16e33bcb7666b0335be21165806f0202f1367b19704a8074f26ad9e938bd9c761f7f7a","size":149707,"data":"","first_seen":"2025-11-14T00:52:42.924514Z","last_seen":"2025-11-14T00:52:42.924514Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/web-vitals.js?v=1.292.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9382ee93747b5adad40205dff0c3cd1e","sha1":"ddede7ca04a00ced64900edfaf24df8b2928dd46","sha256":"8cd49f60ed8e816c086a2f65eca065903a0cc9588d789ed2de87420de3366b0b","sha512":"baa721c8ebab79ab989d9de9ee2df54ec508d74d5601bfd715010d4d57b4412872c6d2bf8950dfa85e85f80fea8f3997ed6183192e79dd589a3a1c7d79f1451b","ssdeep":"192:GoIu096ti59f2lWpwIlF2iu9RF87LL0fFlsRUIEUA+x9AoLBKHTE41iKqLo:GoI8iml7UCo7wUgqdKx","tlshash":"7422a798f989313b13e3b0b2903f0207773b255569ee5099953ee7841e380cfa95bf65","size":10795,"data":"","first_seen":"2025-11-14T00:50:58.71822Z","last_seen":"2025-11-14T00:52:42.909729Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.emergent.sh/scripts/emergent-main.js","fqdn":"assets.emergent.sh","domain":"emergent.sh","tld":"sh"},"ip":{"addr":"54.240.174.47","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f46cfcb4902bbbf39581cce7019f9e7c","sha1":"fd7eace7f1fe0b7388c66d8ad2937fd820da6f46","sha256":"64e00c3f98b1c33a7bfc9a5e8cf3873442c57b23db3b0b912f4469d1f093596a","sha512":"2b3e067deab0eafbb3a60bd2853b9c9c8f73b83cf3d428c30a79abffe912300b2ed5854f44ca6902c6d15c219606dbd5388724a8fa5acbd971f5e45ae018f532","ssdeep":"192:9Rgt6SFHgzfd+aXOD21Ds2MUUPTTXwOMs1kiNW/3MbpmbJ:iHOjU7TgIy0U","tlshash":"3332943859b210374a37e1be1bcb71863335001b6951edb4bd8c4b443fd86699af17ea","size":11101,"data":"","first_seen":"2025-10-16T18:07:38.532981Z","last_seen":"2026-05-15T07:34:48.55063Z","times_seen":237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"n1casino-review.com/static/js/main.9ed5bae1.js","fqdn":"n1casino-review.com","domain":"n1casino-review.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"057f4c44b4ba9076783d5a851e4f512e","sha1":"8cbd2c3094e1f74971d2a632fafe3f695d022f6d","sha256":"79d3dbf04d473040b3adce82afafd7126d6794bbe03440f38eeb4e1488025c25","sha512":"126ae0042a703cad0ef0f38ff6d842871a6e1dff371172f7442eed0e4aab3a62e13c257b142f45470566af001d2c218b7ccbc0852ef94ad90353e51d32f8c0de","ssdeep":"6144:QuFssu4ugMI9uvw6pA3r1a+ewkM3mkYxkdvHe8+:QuJPMGyZMr0+ewkM3mkY6d/s","tlshash":"9e847dd47451f1616eb702e310af540af3382a1b680d8860f115fc6eb5b899e717bf9e","size":372976,"data":"","first_seen":"2025-11-14T00:52:42.91613Z","last_seen":"2025-11-14T00:52:42.91613Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/array.js","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"def4e27cb797571ad6b329567b875bb1","sha1":"3ab1dc12b1cb0146b4fce2e2928f9928fbf98dad","sha256":"4316dc3cde931866e022f98a7ce17922c155672b0b40875b4cdeaa6c668346c8","sha512":"d99c66e5bd82ff956086614753d0ad7c5bbc9309f3dad986ea741ef5ca54d6ca86e8b891a34e21a33a0aac336b8a767afea0a74e9f51524c009fa95ff8875d0f","ssdeep":"3072:IzLT3XMEd+vLX6KkhkdVTcr9d8EuN/yOMrHUTbkugk+j:IznLhkWd9u+UG","tlshash":"3ef31c97b779d0324ae994a4d0760113e72a3b0d6149842cf26eeccd349d58a727bf3b","size":161024,"data":"","first_seen":"2025-11-14T00:52:42.918715Z","last_seen":"2025-11-14T00:52:42.918715Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/surveys.js?v=1.292.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ef867be1b4d598e30f9111e0e374cb4","sha1":"c9d9b7ff1d7452de4a3708ec90917c3ba7c7c6ba","sha256":"6c911b680100d39c5ecae589014643e1fcd4c59f75ff7dd0e120a9f2f64d3d77","sha512":"427eb0b5b5dd610a61b78b81ccba7026d42c804ce989b0623c861ac0fc913d8193879275548ae3fc58aab1f3036973f4d9ff97d35edede363a6b732685962b0f","ssdeep":"768:a0Bpcd+/X0xKcI3Q1d6z3/vINmTIibHZW//h/cI9M9dWu86l4pr4pOWtn9SWXKh6:Nsd+CdIfAoTIiQ/n9M9dWu8jfWtEW3Wu","tlshash":"42834bd9f601f1ae41df807410be4882b33d661afe0c4854b1579cd43de5998a39ffaa","size":83327,"data":"","first_seen":"2025-11-14T00:50:58.722128Z","last_seen":"2025-11-14T00:52:42.918116Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"customer-assets.emergentagent.com/job_glucksspiel-n1/artifacts/jb2f9t3d_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.51.22.png","fqdn":"customer-assets.emergentagent.com","domain":"emergentagent.com","tld":"com"},"ip":{"addr":"3.167.2.121","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emergentagent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 31 Oct 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:FA:8E:80:47:64:BD:EE:6B:F2:E2:2D:48:B5:BB:CA:A8:48:8F:51","sha256":"DD:12:D1:AE:90:A0:EF:15:15:FA:69:88:2C:3B:13:73:3F:BE:BE:C2:59:84:20:E3:A5:25:EC:1A:DE:10:90:44"}}},"request":{"raw":"GET /job_glucksspiel-n1/artifacts/jb2f9t3d_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.51.22.png HTTP/1.1\r\nHost: customer-assets.emergentagent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 3778470\r\nlast-modified: Tue, 11 Nov 2025 21:53:21 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ki78qYdvT.7.h4yiIufHJoAfzUw0XTNl\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 14 Nov 2025 00:52:10 GMT\r\netag: \"690bb70243e6d40edb719a770fc677ba\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f1dfb112336c56393fdb3341c0df8da0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 8Ghz6KcliWXCgOgRNMa7reg3l8xVcsfeXEDL7heYKBADc3HLl4PbSg==\r\nage: 53093\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3778470,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2862 x 1564, 8-bit/color RGBA, non-interlaced","md5":"3f32c0a30a1f26e95cce14626ea1f1f4","sha1":"7e5ac814b6f963fc52d2663acfc0a459894a65e8","sha256":"08c300425b47acda480bd32d98113500d22fd23ff5f6b741768cf665a10fdb13","sha512":"e131258db60ec2827c0887c82e5fc23ffdd487bd20358d2f9b46f552c25a8763602bc9de5fbe76067123b6037da8985860c6d65590950344f615fb19d5f32984","ssdeep":"24576:b0MY9slHBTQEmMWAKREMCWjsH1jO6Rbobg4b20XWRUEw2zHqvaXBxmWEx8Eg:b0w6E+tJjsH1y6RbobNbkRU32zCCB3Eg","tlshash":"24252364968393f203756f08859b5dec8a2ddd3ffbab84ba1f0d26b1a7427cd0a03515","first_seen":"2025-11-14T00:52:42.908841Z","last_seen":"2025-11-14T00:52:42.908841Z","times_seen":1,"resource_available":false,"data":null}},"time_used":683,"timings":{"blocked":18,"dns":2,"connect":1,"send":0,"wait":35,"receive":533,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/web-vitals.js?v=1.292.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:11.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 07:58:08 GMT","end":"Sat, 07 Feb 2026 07:58:07 GMT"},"fingerprint":{"sha1":"40:48:E3:EB:8E:D7:69:B1:39:18:B9:60:BF:0B:BC:57:4F:53:4B:85","sha256":"3C:10:22:59:F4:D5:4A:77:F2:C4:D6:CA:C7:4C:A5:48:91:34:AD:14:C6:F2:9A:3F:DE:C8:AF:BA:CF:87:DA:71"}}},"request":{"raw":"GET /static/web-vitals.js?v=1.292.0 HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://n1casino-review.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 00:52:11 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncache-control: public, max-age=300\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Fri, 14 Nov 2025 00:22:54 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: MISS\r\ncf-ray: 99e286560c740b61-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10795,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10706)","md5":"9382ee93747b5adad40205dff0c3cd1e","sha1":"ddede7ca04a00ced64900edfaf24df8b2928dd46","sha256":"8cd49f60ed8e816c086a2f65eca065903a0cc9588d789ed2de87420de3366b0b","sha512":"baa721c8ebab79ab989d9de9ee2df54ec508d74d5601bfd715010d4d57b4412872c6d2bf8950dfa85e85f80fea8f3997ed6183192e79dd589a3a1c7d79f1451b","ssdeep":"192:GoIu096ti59f2lWpwIlF2iu9RF87LL0fFlsRUIEUA+x9AoLBKHTE41iKqLo:GoI8iml7UCo7wUgqdKx","tlshash":"7422a798f989313b13e3b0b2903f0207773b255569ee5099953ee7841e380cfa95bf65","first_seen":"2025-11-14T00:50:58.71822Z","last_seen":"2025-11-14T00:52:42.909729Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1238,"timings":{"blocked":348,"dns":0,"connect":0,"send":0,"wait":890,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.emergent.sh/scripts/emergent-main.js","fqdn":"assets.emergent.sh","domain":"emergent.sh","tld":"sh"},"ip":{"addr":"54.240.174.47","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.emergent.sh","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 17 Sep 2025 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:7F:85:1D:EE:8D:63:A0:65:71:AB:DB:CE:D9:4D:23:E6:8D:C9:93","sha256":"D9:37:38:24:9C:9E:D3:58:DC:D1:82:40:0B:A1:B1:14:E0:DF:6D:C2:A7:7C:13:92:56:B7:24:0A:16:32:B6:CB"}}},"request":{"raw":"GET /scripts/emergent-main.js HTTP/1.1\r\nHost: assets.emergent.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 14:12:00 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Thu, 13 Nov 2025 02:34:08 GMT\r\netag: W/\"f46cfcb4902bbbf39581cce7019f9e7c\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: MShAMg0y0mNU5t58qlNWXyvDLaIeF4hrfgcaNai4Gezx_hgIfRrK7A==\r\nage: 80282\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":11101,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f46cfcb4902bbbf39581cce7019f9e7c","sha1":"fd7eace7f1fe0b7388c66d8ad2937fd820da6f46","sha256":"64e00c3f98b1c33a7bfc9a5e8cf3873442c57b23db3b0b912f4469d1f093596a","sha512":"2b3e067deab0eafbb3a60bd2853b9c9c8f73b83cf3d428c30a79abffe912300b2ed5854f44ca6902c6d15c219606dbd5388724a8fa5acbd971f5e45ae018f532","ssdeep":"192:9Rgt6SFHgzfd+aXOD21Ds2MUUPTTXwOMs1kiNW/3MbpmbJ:iHOjU7TgIy0U","tlshash":"3332943859b210374a37e1be1bcb71863335001b6951edb4bd8c4b443fd86699af17ea","first_seen":"2025-10-16T18:07:38.532981Z","last_seen":"2026-05-15T07:34:48.55063Z","times_seen":237,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":222,"dns":98,"connect":1,"send":0,"wait":1,"receive":0,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"customer-assets.emergentagent.com/job_glucksspiel-n1/artifacts/bd73q0q4_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.50.12.png","fqdn":"customer-assets.emergentagent.com","domain":"emergentagent.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.903Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /job_glucksspiel-n1/artifacts/bd73q0q4_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.50.12.png HTTP/1.1\r\nHost: customer-assets.emergentagent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contentdeliverynetwork.cc/n1bet/logos/responsibility/white/responsiblegaming.svg","fqdn":"contentdeliverynetwork.cc","domain":"contentdeliverynetwork.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.927Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /n1bet/logos/responsibility/white/responsiblegaming.svg HTTP/1.1\r\nHost: contentdeliverynetwork.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":21,"connect":5,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"n1casino-review.com/","fqdn":"n1casino-review.com","domain":"n1casino-review.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-14T00:52:09.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.n1casino-review.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 01:30:38 GMT","end":"Tue, 10 Feb 2026 01:30:37 GMT"},"fingerprint":{"sha1":"27:7C:63:25:CB:75:4B:36:24:D6:4A:4C:B6:53:CF:B8:3F:97:C0:97","sha256":"A7:0F:D8:90:AB:EF:39:8B:78:25:FE:90:4A:34:A0:C8:A1:02:0B:30:9C:B2:EA:72:E3:DF:FC:C5:C5:F0:8C:E2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: n1casino-review.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 164101\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 14 Nov 2025 00:52:09 GMT\r\netag: \"0400d1e733a2a69d6a67425ebfa353cc\"\r\nlast-modified: Wed, 12 Nov 2025 03:17:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2nz8d-1763081529400-90cfde413125\r\ncontent-length: 1492\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2962,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2962), with no line terminators","md5":"0400d1e733a2a69d6a67425ebfa353cc","sha1":"4887e63b9a71140390c5951b455e9234da2f1c3f","sha256":"7392d72a086f25be1659b86a3112874461ed6db49443cd9c7863fb01a0962a77","sha512":"6f025b41af28baa989ad3046f5fee9e75583ce22cefbb4950e9a39ec2c2e750102a7ca387c0c1be9952d3d1b8983fd39c170c568af24aa9e392620fa0cd12362","ssdeep":"","tlshash":"cd51c55ffc02e8368b50b7e174b3b45dcf59258c46b4dc05f5a140c92640fca896af69","first_seen":"2025-11-14T00:52:42.911467Z","last_seen":"2025-11-14T00:52:42.911467Z","times_seen":1,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":45,"dns":18,"connect":1,"send":0,"wait":10,"receive":14,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"n1casino-review.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"n1casino-review.com/static/css/main.5f0c7850.css","fqdn":"n1casino-review.com","domain":"n1casino-review.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.n1casino-review.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 01:30:38 GMT","end":"Tue, 10 Feb 2026 01:30:37 GMT"},"fingerprint":{"sha1":"27:7C:63:25:CB:75:4B:36:24:D6:4A:4C:B6:53:CF:B8:3F:97:C0:97","sha256":"A7:0F:D8:90:AB:EF:39:8B:78:25:FE:90:4A:34:A0:C8:A1:02:0B:30:9C:B2:EA:72:E3:DF:FC:C5:C5:F0:8C:E2"}}},"request":{"raw":"GET /static/css/main.5f0c7850.css HTTP/1.1\r\nHost: n1casino-review.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 164100\r\ncache-control: s-maxage=31536000, immutable\r\ncontent-disposition: inline; filename=\"main.5f0c7850.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 14 Nov 2025 00:52:09 GMT\r\netag: \"3a57328902fba7ad3acf484b31cb3737\"\r\nlast-modified: Wed, 12 Nov 2025 03:17:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::w2c9b-1763081529583-bcb26d56c95c\r\ncontent-length: 12520\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62244,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (59924)","md5":"91ff0c75dfea3fc963f4bde231c031e0","sha1":"a26f2ae80cd35e9ef2ea3166245048bb8af432ac","sha256":"7a0e1027b61a262cf4d2a237f0ddeed59e7b5d6ed92694477a31a640dd6992a1","sha512":"256128e32a79cf515ce8cbfd9b7e79aae195369eaa701956b6e12543f03422f0920660a796ccbaec92fffe569d6c0e64c9b7feaafacc15e693f2097ac31a7f44","ssdeep":"1536:GFqofh+FYJVawLdXJa4gJbpUtnG/Wxm7hbv9Fy:GFqofh+SVawLdXJa4gJbpUtnG/Wxm7h2","tlshash":"a153a619b914a13e3c2790f993dcb9dc6118f0c1da3b4afafa9a503596c36f11ab7704","first_seen":"2025-11-14T00:52:42.912372Z","last_seen":"2025-11-14T00:52:42.912372Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"n1casino-review.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"customer-assets.emergentagent.com/job_glucksspiel-n1/artifacts/pbf66l0f_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.51.02.png","fqdn":"customer-assets.emergentagent.com","domain":"emergentagent.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.909Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /job_glucksspiel-n1/artifacts/pbf66l0f_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.51.02.png HTTP/1.1\r\nHost: customer-assets.emergentagent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"customer-assets.emergentagent.com/job_glucksspiel-n1/artifacts/bd73q0q4_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.50.12.png","fqdn":"customer-assets.emergentagent.com","domain":"emergentagent.com","tld":"com"},"ip":{"addr":"3.167.2.121","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emergentagent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 31 Oct 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:FA:8E:80:47:64:BD:EE:6B:F2:E2:2D:48:B5:BB:CA:A8:48:8F:51","sha256":"DD:12:D1:AE:90:A0:EF:15:15:FA:69:88:2C:3B:13:73:3F:BE:BE:C2:59:84:20:E3:A5:25:EC:1A:DE:10:90:44"}}},"request":{"raw":"GET /job_glucksspiel-n1/artifacts/bd73q0q4_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.50.12.png HTTP/1.1\r\nHost: customer-assets.emergentagent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 6779387\r\nlast-modified: Tue, 11 Nov 2025 21:53:28 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: RBlWI40qIvADPoDlnD.lalaa.uKSoYLE\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 14 Nov 2025 00:52:10 GMT\r\netag: \"f10ce5125bf1a3b5475468db77e6cf09\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f1dfb112336c56393fdb3341c0df8da0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: xciLMhDN7tohDUlxpL-FEMMPGOiNrUAy_J_XfRYyAobIaM_9UKFH-w==\r\nage: 53093\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":6779387,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2862 x 1564, 8-bit/color RGBA, non-interlaced","md5":"d62ed740a9f5eccebd0e83132b7e33a5","sha1":"ec0aa529d96dca897aa2e2cc960384c28881292e","sha256":"b63d0bb6bd2d1c1378c404ea49da4a548b7d28bc2ebd0fac73c342a2b48fef7c","sha512":"8fdd9a69a52a41fa0e8334869073fbd4265749671db302449bbfc10c3a6240e0e808e7a45ab6eb3027ed197d51e8b9c9ad8560c19a64fabd2e731ed1360dc90f","ssdeep":"24576:b5BMf3t9gvYJAsGzZia4Q9aSIGMwAp6mvb:b5BMvt9gv8AjZiUggmz","tlshash":"9a252360b9f1e56bc6d3afbd8d068e04bd0444149988fb708e48da2c2f4e4edde77568","first_seen":"2025-11-14T00:52:42.913116Z","last_seen":"2025-11-14T00:52:42.913116Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1447,"timings":{"blocked":118,"dns":0,"connect":0,"send":0,"wait":29,"receive":1300,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"customer-assets.emergentagent.com/job_glucksspiel-n1/artifacts/ewnd02u4_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.50.40.png","fqdn":"customer-assets.emergentagent.com","domain":"emergentagent.com","tld":"com"},"ip":{"addr":"3.167.2.121","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emergentagent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 31 Oct 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:FA:8E:80:47:64:BD:EE:6B:F2:E2:2D:48:B5:BB:CA:A8:48:8F:51","sha256":"DD:12:D1:AE:90:A0:EF:15:15:FA:69:88:2C:3B:13:73:3F:BE:BE:C2:59:84:20:E3:A5:25:EC:1A:DE:10:90:44"}}},"request":{"raw":"GET /job_glucksspiel-n1/artifacts/ewnd02u4_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.50.40.png HTTP/1.1\r\nHost: customer-assets.emergentagent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 6649371\r\nlast-modified: Tue, 11 Nov 2025 21:53:25 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: BgNKyhCUHl.lb_.zJF47HzXzM4fIdxhM\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 14 Nov 2025 00:52:10 GMT\r\netag: \"1ee39b60951079d443d795a1822aec6f\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f1dfb112336c56393fdb3341c0df8da0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: aMUWXZX0AID794wMIIELaL66kos-6ccEJHgv8leaXsaEygcwA19diQ==\r\nage: 53093\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":6649371,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2862 x 1564, 8-bit/color RGBA, non-interlaced","md5":"8ed98443fab2a7d4f2f5c221b3d7cf93","sha1":"943493cba735d8aabd2888140082c8b8134db67c","sha256":"7ec4bf272f4c6972d949dc6c9ecfa4c258bd48b7dd19db5506fc37b2065ec007","sha512":"a418884e48f37638bf12734e40a8716dc27f017a809da508f064d7c66fdba89c2bb64917d517d9cbf82a54048913d48e948fc02ee5399a6809c76f7f7788e385","ssdeep":"24576:blRj0AVSa2S6/F4ZxSQmPTqRvRHmbqebdG0r21vt/4HB:blt0SSHS0QmWRJHms0r2TgHB","tlshash":"492523c7bcca7be6a9f470e7704086ddd3f3357b91e2a84b4abade968311e117890405","first_seen":"2025-11-14T00:52:42.913918Z","last_seen":"2025-11-14T00:52:42.913918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2791,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":50,"receive":2419,"ssl":308},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contentdeliverynetwork.cc/n1bet/logos/responsibility/white/responsiblegaming.svg","fqdn":"contentdeliverynetwork.cc","domain":"contentdeliverynetwork.cc","tld":"cc"},"ip":{"addr":"213.182.199.125","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Croatia","country_code":"HR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"contentdeliverynetwork.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 15:44:50 GMT","end":"Tue, 30 Dec 2025 16:44:39 GMT"},"fingerprint":{"sha1":"5A:EC:C0:BE:00:F5:20:E1:12:73:93:E7:60:CC:C9:05:92:93:4E:23","sha256":"0B:5E:A2:B3:5A:A1:36:DB:80:BA:9E:AF:6A:75:FB:14:71:80:51:5F:18:40:23:AF:3E:96:DD:35:B5:CE:68:50"}}},"request":{"raw":"GET /n1bet/logos/responsibility/white/responsiblegaming.svg HTTP/1.1\r\nHost: contentdeliverynetwork.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 00:52:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Jun 2024 15:10:05 GMT\r\nvary: accept-encoding\r\nexpires: Sat, 15 Nov 2025 00:52:10 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 24742\r\ncf-cache-status: HIT\r\netag: W/\"667addcd-1ab6\"\r\ncontent-encoding: gzip\r\ncf-ray: 99e2864b0aaf56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6838,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"12ea1a602b6a2fbc39ad303c5090db92","sha1":"d93744da59462424340276c27b3e9497bc97ac42","sha256":"bcd4b64314865a7627800a7a184787df00982f7b46996059b400d75ede7ecc95","sha512":"571c9fbb7c2f715f055a8b6a970d203e47f90ce6e914b4445b6b9130f4a79fa8fd8dbd6c50e6a17419249b3f35dcb6b889ca37022e723acf7a7837906631c222","ssdeep":"96:FlnZ+2lZpl4AfNcaAB5F6fxEnV8s5Myy53Aa90vKZ0VcCmbJ0U40hkprkJIIwTVw:F1cU3bM65h94JZ4JIIWG8AIGtzD","tlshash":"a0e121ad579997ecf475b2f4965244207d8e5ae90cb3ebb8cf918c30f2620dc51a1c93","first_seen":"2025-04-20T02:55:54.945795Z","last_seen":"2026-05-14T19:38:28.814749Z","times_seen":416,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"customer-assets.emergentagent.com/job_glucksspiel-n1/artifacts/59lg0pr5_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.50.00.png","fqdn":"customer-assets.emergentagent.com","domain":"emergentagent.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.905Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /job_glucksspiel-n1/artifacts/59lg0pr5_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.50.00.png HTTP/1.1\r\nHost: customer-assets.emergentagent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contentdeliverynetwork.cc/n1bet/logos/responsibility/white/gamblers_anonymous.svg","fqdn":"contentdeliverynetwork.cc","domain":"contentdeliverynetwork.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.931Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /n1bet/logos/responsibility/white/gamblers_anonymous.svg HTTP/1.1\r\nHost: contentdeliverynetwork.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":18,"connect":4,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"customer-assets.emergentagent.com/job_glucksspiel-n1/artifacts/pbf66l0f_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.51.02.png","fqdn":"customer-assets.emergentagent.com","domain":"emergentagent.com","tld":"com"},"ip":{"addr":"3.167.2.121","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emergentagent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 31 Oct 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:FA:8E:80:47:64:BD:EE:6B:F2:E2:2D:48:B5:BB:CA:A8:48:8F:51","sha256":"DD:12:D1:AE:90:A0:EF:15:15:FA:69:88:2C:3B:13:73:3F:BE:BE:C2:59:84:20:E3:A5:25:EC:1A:DE:10:90:44"}}},"request":{"raw":"GET /job_glucksspiel-n1/artifacts/pbf66l0f_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.51.02.png HTTP/1.1\r\nHost: customer-assets.emergentagent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 7088933\r\nlast-modified: Tue, 11 Nov 2025 21:53:23 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: KXAenqFYn0TsLUNIgNv6_aU1imDf3mwm\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 14 Nov 2025 00:52:10 GMT\r\netag: \"cef134cf68b17a84d41ab5cf50b59245\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f1dfb112336c56393fdb3341c0df8da0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: ahwxbINAxecZ2NlOPUznRdmHbycRXgz1FNsHmigTDU4fsoYUw5EQpA==\r\nage: 53093\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":7088933,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2862 x 1564, 8-bit/color RGBA, non-interlaced","md5":"ba9caa4cdbfe220a13fa9dbb2ebf8261","sha1":"a2dfec6ec37a93c53a2754d6d200a4c1be6c9c6d","sha256":"1f084c928cf130a415d3fd37ba6d7d9feab19e2c112f014634b4af0ea501bbd0","sha512":"8bd872c070b4a0001e69d74c345d16c05513199f3b29b8299e33be3fc464356fd8a6b777c62384e4a0bc40260752e752dae646bdbc8fe69bb56030bf44f024e5","ssdeep":"24576:bvYWA4nBuiWX4VkwAsFa14BRrj97wbvM+WNXop:bv/50rXmkwAMBhCbvM+WNA","tlshash":"f625232dcd6494b5d7cfaf0501923b68f55c3926fe0c262c0bda5b2f62d6e11533aa2c","first_seen":"2025-11-14T00:52:42.915313Z","last_seen":"2025-11-14T00:52:42.915313Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1886,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":38,"receive":1735,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/rrweb@latest/dist/rrweb.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 07:42:11 GMT","end":"Wed, 21 Jan 2026 08:42:08 GMT"},"fingerprint":{"sha1":"35:E0:1E:4C:64:5C:CF:45:E3:D1:1F:98:25:BC:4E:A4:B5:0A:8F:DF","sha256":"3F:2C:BB:33:AB:E0:D9:9E:03:91:C6:EE:DF:EF:85:A5:18:00:D6:DF:6A:34:A2:86:46:96:AF:91:C2:94:F7:D7"}}},"request":{"raw":"GET /rrweb@latest/dist/rrweb.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 14 Nov 2025 00:52:09 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 53\r\ncf-ray: 99e286481e1c56a9-OSL\r\nlocation: /rrweb@2.0.0-alpha.4/dist/rrweb.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140517,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":31,"dns":20,"connect":1,"send":0,"wait":91,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"n1casino-review.com/static/js/main.9ed5bae1.js","fqdn":"n1casino-review.com","domain":"n1casino-review.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.n1casino-review.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Nov 2025 01:30:38 GMT","end":"Tue, 10 Feb 2026 01:30:37 GMT"},"fingerprint":{"sha1":"27:7C:63:25:CB:75:4B:36:24:D6:4A:4C:B6:53:CF:B8:3F:97:C0:97","sha256":"A7:0F:D8:90:AB:EF:39:8B:78:25:FE:90:4A:34:A0:C8:A1:02:0B:30:9C:B2:EA:72:E3:DF:FC:C5:C5:F0:8C:E2"}}},"request":{"raw":"GET /static/js/main.9ed5bae1.js HTTP/1.1\r\nHost: n1casino-review.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 53092\r\ncache-control: s-maxage=31536000, immutable\r\ncontent-disposition: inline; filename=\"main.9ed5bae1.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 14 Nov 2025 00:52:09 GMT\r\netag: \"e6eea06b225770a2d28d5271fd340d42\"\r\nlast-modified: Thu, 13 Nov 2025 10:07:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2nz8d-1763081529583-95380365a41d\r\ncontent-length: 116514\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":372976,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"057f4c44b4ba9076783d5a851e4f512e","sha1":"8cbd2c3094e1f74971d2a632fafe3f695d022f6d","sha256":"79d3dbf04d473040b3adce82afafd7126d6794bbe03440f38eeb4e1488025c25","sha512":"126ae0042a703cad0ef0f38ff6d842871a6e1dff371172f7442eed0e4aab3a62e13c257b142f45470566af001d2c218b7ccbc0852ef94ad90353e51d32f8c0de","ssdeep":"6144:QuFssu4ugMI9uvw6pA3r1a+ewkM3mkYxkdvHe8+:QuJPMGyZMr0+ewkM3mkY6d/s","tlshash":"9e847dd47451f1616eb702e310af540af3382a1b680d8860f115fc6eb5b899e717bf9e","first_seen":"2025-11-14T00:52:42.91613Z","last_seen":"2025-11-14T00:52:42.91613Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"n1casino-review.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"customer-assets.emergentagent.com/job_glucksspiel-n1/artifacts/6vek9d9v_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2022.51.21.png","fqdn":"customer-assets.emergentagent.com","domain":"emergentagent.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.897Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /job_glucksspiel-n1/artifacts/6vek9d9v_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2022.51.21.png HTTP/1.1\r\nHost: customer-assets.emergentagent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contentdeliverynetwork.cc/n1bet/logos/responsibility/white/gambling_therapy.svg","fqdn":"contentdeliverynetwork.cc","domain":"contentdeliverynetwork.cc","tld":"cc"},"ip":{"addr":"213.182.199.125","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Croatia","country_code":"HR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"contentdeliverynetwork.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 15:44:50 GMT","end":"Tue, 30 Dec 2025 16:44:39 GMT"},"fingerprint":{"sha1":"5A:EC:C0:BE:00:F5:20:E1:12:73:93:E7:60:CC:C9:05:92:93:4E:23","sha256":"0B:5E:A2:B3:5A:A1:36:DB:80:BA:9E:AF:6A:75:FB:14:71:80:51:5F:18:40:23:AF:3E:96:DD:35:B5:CE:68:50"}}},"request":{"raw":"GET /n1bet/logos/responsibility/white/gambling_therapy.svg HTTP/1.1\r\nHost: contentdeliverynetwork.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 00:52:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Jun 2024 15:10:05 GMT\r\nvary: accept-encoding\r\nexpires: Sat, 15 Nov 2025 00:52:10 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 24742\r\ncf-cache-status: HIT\r\netag: W/\"667addcd-2032\"\r\ncontent-encoding: gzip\r\ncf-ray: 99e2864b0aac56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8242,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3839c1bb775daee367045d045415e849","sha1":"65f6fd16d0f08d264ea71dec24263ba99056811e","sha256":"259accb7ee5f7c174e85c8790b187df4bcd93ff8e69a17325cf2d99b9715700b","sha512":"4efc60f521210234ffb6416479cfd2d47a9688eb51f734914fcda5e1cd232ef527a145d8a913d3152b92d1f27f963554e8e537d51534b55c54dbb26d89bd1d1d","ssdeep":"96:7mhkViPd+V2acx7tFJ9MD6ESSFSw61UK/edkWzFzEiEJfxviaLDmiRsekdeIBvbw:aGjU7rqViAmxh8zVBTTe","tlshash":"9102dead23c527bce815e3a94aa19024bbca64ada754eb7cc3a5cd71f7210dc49c4dc3","first_seen":"2025-04-20T02:55:54.984695Z","last_seen":"2026-05-07T17:29:45.93272Z","times_seen":347,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":89,"dns":1,"connect":1,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/array/phc_yJW1VjHGGwmCbbrtczfqqNxgBDbhlhOWcdzcIJEOTFE/config.js","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:10.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 07:58:08 GMT","end":"Sat, 07 Feb 2026 07:58:07 GMT"},"fingerprint":{"sha1":"40:48:E3:EB:8E:D7:69:B1:39:18:B9:60:BF:0B:BC:57:4F:53:4B:85","sha256":"3C:10:22:59:F4:D5:4A:77:F2:C4:D6:CA:C7:4C:A5:48:91:34:AD:14:C6:F2:9A:3F:DE:C8:AF:BA:CF:87:DA:71"}}},"request":{"raw":"GET /array/phc_yJW1VjHGGwmCbbrtczfqqNxgBDbhlhOWcdzcIJEOTFE/config.js HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://n1casino-review.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 00:52:10 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 593\r\nvary: Origin, Referer, Accept-Encoding\r\nallow: GET, HEAD, OPTIONS\r\nx-frame-options: SAMEORIGIN\r\nreporting-endpoints: posthog=\"https://us.i.posthog.com/report/?token=sTMFPsFhdP1Ssg\u0026sample_rate=0.1\u0026v=2\"\r\ncontent-security-policy-report-only: default-src 'self'; style-src 'self' 'unsafe-inline' https://*.posthog.com https://fonts.googleapis.com; script-src 'self' 'nonce-11SMm48urByIXyDUiVkZYq' https://*.posthog.com https://*.i.posthog.com; font-src 'self' https://*.posthog.com https://app-static.eu.posthog.com https://app-static-prod.posthog.com https://d1sdjtjk6xzm7.cloudfront.net https://fonts.gstatic.com https://cdn.jsdelivr.net https://assets.faircado.com https://use.typekit.net; worker-src 'self'; child-src 'none'; object-src 'none'; media-src https://res.cloudinary.com; img-src 'self' data: https://*.posthog.com https://posthog.com https://www.gravatar.com https://res.cloudinary.com https://platform.slack-edge.com https://raw.githubusercontent.com; frame-ancestors https://posthog.com https://preview.posthog.com; connect-src 'self' https://status.posthog.com https://*.posthog.com  https://raw.githubusercontent.com https://api.github.com; frame-src https:; manifest-src 'self'; base-uri 'self'; report-uri https://us.i.posthog.com/report/?token=sTMFPsFhdP1Ssg\u0026sample_rate=0.1\u0026v=2; report-to posthog\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 9\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncache-control: max-age=300\r\ncf-cache-status: MISS\r\nlast-modified: Fri, 14 Nov 2025 00:52:10 GMT\r\ncf-ray: 99e2864b085e0b61-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1088,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (889)","md5":"c18e249cea07a410262f1d0de3d14c74","sha1":"c28195eefe45c5da2629f06c5d46e234939e68f2","sha256":"ac2342dd6d360036035c17e94494307b2927e0f2332a635d7a11859cb8920700","sha512":"2411e4feb32781396c94b93b10cb24d67ebeb9b446f794025e7474fa627bf81d99a808a0a61e5055f4fe0e3643da3cb8ab3d211f88608df9ddf44590c0ce60fd","ssdeep":"","tlshash":"8311cc28f96204b745d9b21c9fab91d76fbac58ba3485c6ce4cc5a04b34d5368586fc0","first_seen":"2025-10-25T14:08:25.901631Z","last_seen":"2025-12-10T19:44:02.684921Z","times_seen":24,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/surveys.js?v=1.292.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:11.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 07:58:08 GMT","end":"Sat, 07 Feb 2026 07:58:07 GMT"},"fingerprint":{"sha1":"40:48:E3:EB:8E:D7:69:B1:39:18:B9:60:BF:0B:BC:57:4F:53:4B:85","sha256":"3C:10:22:59:F4:D5:4A:77:F2:C4:D6:CA:C7:4C:A5:48:91:34:AD:14:C6:F2:9A:3F:DE:C8:AF:BA:CF:87:DA:71"}}},"request":{"raw":"GET /static/surveys.js?v=1.292.0 HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://n1casino-review.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 00:52:11 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncache-control: public, max-age=300\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Fri, 14 Nov 2025 00:22:54 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 2\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: MISS\r\ncf-ray: 99e286560c730b61-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":83327,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4ef867be1b4d598e30f9111e0e374cb4","sha1":"c9d9b7ff1d7452de4a3708ec90917c3ba7c7c6ba","sha256":"6c911b680100d39c5ecae589014643e1fcd4c59f75ff7dd0e120a9f2f64d3d77","sha512":"427eb0b5b5dd610a61b78b81ccba7026d42c804ce989b0623c861ac0fc913d8193879275548ae3fc58aab1f3036973f4d9ff97d35edede363a6b732685962b0f","ssdeep":"768:a0Bpcd+/X0xKcI3Q1d6z3/vINmTIibHZW//h/cI9M9dWu86l4pr4pOWtn9SWXKh6:Nsd+CdIfAoTIiQ/n9M9dWu8jfWtEW3Wu","tlshash":"42834bd9f601f1ae41df807410be4882b33d661afe0c4854b1579cd43de5998a39ffaa","first_seen":"2025-11-14T00:50:58.722128Z","last_seen":"2025-11-14T00:52:42.918116Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1240,"timings":{"blocked":349,"dns":0,"connect":0,"send":0,"wait":891,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/array.js","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 07:58:08 GMT","end":"Sat, 07 Feb 2026 07:58:07 GMT"},"fingerprint":{"sha1":"40:48:E3:EB:8E:D7:69:B1:39:18:B9:60:BF:0B:BC:57:4F:53:4B:85","sha256":"3C:10:22:59:F4:D5:4A:77:F2:C4:D6:CA:C7:4C:A5:48:91:34:AD:14:C6:F2:9A:3F:DE:C8:AF:BA:CF:87:DA:71"}}},"request":{"raw":"GET /static/array.js HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://n1casino-review.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 00:52:10 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncache-control: public, max-age=300\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Fri, 14 Nov 2025 00:22:54 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 3\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: MISS\r\ncf-ray: 99e28649cfe30b61-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":161024,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"def4e27cb797571ad6b329567b875bb1","sha1":"3ab1dc12b1cb0146b4fce2e2928f9928fbf98dad","sha256":"4316dc3cde931866e022f98a7ce17922c155672b0b40875b4cdeaa6c668346c8","sha512":"d99c66e5bd82ff956086614753d0ad7c5bbc9309f3dad986ea741ef5ca54d6ca86e8b891a34e21a33a0aac336b8a767afea0a74e9f51524c009fa95ff8875d0f","ssdeep":"3072:IzLT3XMEd+vLX6KkhkdVTcr9d8EuN/yOMrHUTbkugk+j:IznLhkWd9u+UG","tlshash":"3ef31c97b779d0324ae994a4d0760113e72a3b0d6149842cf26eeccd349d58a727bf3b","first_seen":"2025-11-14T00:52:42.918715Z","last_seen":"2025-11-14T00:52:42.918715Z","times_seen":1,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":33,"dns":21,"connect":1,"send":0,"wait":135,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"customer-assets.emergentagent.com/job_glucksspiel-n1/artifacts/sau9xqbg_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2022.40.55.png","fqdn":"customer-assets.emergentagent.com","domain":"emergentagent.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.888Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /job_glucksspiel-n1/artifacts/sau9xqbg_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2022.40.55.png HTTP/1.1\r\nHost: customer-assets.emergentagent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contentdeliverynetwork.cc/n1bet/logos/responsibility/white/gambling_therapy.svg","fqdn":"contentdeliverynetwork.cc","domain":"contentdeliverynetwork.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.929Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /n1bet/logos/responsibility/white/gambling_therapy.svg HTTP/1.1\r\nHost: contentdeliverynetwork.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":20,"connect":5,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"customer-assets.emergentagent.com/job_glucksspiel-n1/artifacts/59lg0pr5_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.50.00.png","fqdn":"customer-assets.emergentagent.com","domain":"emergentagent.com","tld":"com"},"ip":{"addr":"3.167.2.121","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emergentagent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 31 Oct 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:FA:8E:80:47:64:BD:EE:6B:F2:E2:2D:48:B5:BB:CA:A8:48:8F:51","sha256":"DD:12:D1:AE:90:A0:EF:15:15:FA:69:88:2C:3B:13:73:3F:BE:BE:C2:59:84:20:E3:A5:25:EC:1A:DE:10:90:44"}}},"request":{"raw":"GET /job_glucksspiel-n1/artifacts/59lg0pr5_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.50.00.png HTTP/1.1\r\nHost: customer-assets.emergentagent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 7093372\r\nlast-modified: Tue, 11 Nov 2025 21:53:30 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: g.0fOY6MXJK6odIO7jS1mH3GODXBl5BA\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 14 Nov 2025 00:52:10 GMT\r\netag: \"6bd61653dbe29b63f80d78e74930f045\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f1dfb112336c56393fdb3341c0df8da0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: zIDLp_rhjDCSHWu_VHC7DkPV-VIe_pOWvbNdKpPSIKXAqXx5cDaDYw==\r\nage: 25290\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7093372,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2862 x 1564, 8-bit/color RGBA, non-interlaced","md5":"544a203a71cbd2d06a0fd2e6ded59ef7","sha1":"feb3081866c85cb0c9ced48c807510dd25668f57","sha256":"ce5592876b449554fa0be28cb429d4ee089673e8138c496469e579a600a80617","sha512":"c3c29c0e522cfc5a5de4382c98cb7bf35cc49f2dfd55d230081f59e182d5ce17c0b96a1008ef4f747535b10fa40f174d1971f8aaf312590ae24fb1f9853d3acb","ssdeep":"24576:bnxtaLfBgR33Y4xR3dOzGFINzSKhc00B6ORXOsw:bnxtaLfBgdDV0eINub6uXU","tlshash":"122523d475b24d9534e4639f6980aac5a7f23982b20b1d4b7daeef0264d005cbede0dc","first_seen":"2025-11-14T00:52:42.9197Z","last_seen":"2025-11-14T00:52:42.9197Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2389,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":41,"receive":2204,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/e/?ip=0\u0026_=1763081530239\u0026ver=1.292.0\u0026compression=gzip-js","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"18.234.19.140","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:10.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:07:A5:B7:4A:00:EA:45:09:50:EF:4B:44:63:83:38:E2:97:F8:13","sha256":"6D:1D:1C:48:82:61:EB:EF:E4:D8:57:9A:EA:F6:ED:0A:07:BB:6C:17:71:6F:A3:F1:88:57:DC:E3:A4:E8:44:96"}}},"request":{"raw":"POST /e/?ip=0\u0026_=1763081530239\u0026ver=1.292.0\u0026compression=gzip-js HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://n1casino-review.com/\r\ncontent-type: text/plain\r\nContent-Length: 854\r\nOrigin: https://n1casino-review.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 00:52:12 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://n1casino-review.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 53\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-05-15T15:22:31.396254Z","times_seen":30020,"resource_available":false,"data":null}},"time_used":4677,"timings":{"blocked":2239,"dns":1,"connect":187,"send":0,"wait":147,"receive":0,"ssl":1208},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/i/v0/e/?ip=0\u0026_=1763081540759\u0026ver=1.292.0\u0026compression=gzip-js","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"18.234.19.140","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:20.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:07:A5:B7:4A:00:EA:45:09:50:EF:4B:44:63:83:38:E2:97:F8:13","sha256":"6D:1D:1C:48:82:61:EB:EF:E4:D8:57:9A:EA:F6:ED:0A:07:BB:6C:17:71:6F:A3:F1:88:57:DC:E3:A4:E8:44:96"}}},"request":{"raw":"POST /i/v0/e/?ip=0\u0026_=1763081540759\u0026ver=1.292.0\u0026compression=gzip-js HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://n1casino-review.com/\r\ncontent-type: text/plain\r\nContent-Length: 1463\r\nOrigin: https://n1casino-review.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 00:52:20 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://n1casino-review.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 46\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-05-15T15:22:31.396254Z","times_seen":30020,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu2007.de/?attachment_id=18472","fqdn":"eu2007.de","domain":"eu2007.de","tld":"de"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.880Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?attachment_id=18472 HTTP/1.1\r\nHost: eu2007.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"customer-assets.emergentagent.com/job_glucksspiel-n1/artifacts/jb2f9t3d_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.51.22.png","fqdn":"customer-assets.emergentagent.com","domain":"emergentagent.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.908Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /job_glucksspiel-n1/artifacts/jb2f9t3d_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.51.22.png HTTP/1.1\r\nHost: customer-assets.emergentagent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/flags/?v=2\u0026config=true\u0026ip=0\u0026_=1763081530085\u0026ver=1.292.0\u0026compression=base64","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"18.234.19.140","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:10.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Dec 2024 00:00:00 GMT","end":"Wed, 14 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B2:07:A5:B7:4A:00:EA:45:09:50:EF:4B:44:63:83:38:E2:97:F8:13","sha256":"6D:1D:1C:48:82:61:EB:EF:E4:D8:57:9A:EA:F6:ED:0A:07:BB:6C:17:71:6F:A3:F1:88:57:DC:E3:A4:E8:44:96"}}},"request":{"raw":"POST /flags/?v=2\u0026config=true\u0026ip=0\u0026_=1763081530085\u0026ver=1.292.0\u0026compression=base64 HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://n1casino-review.com/\r\ncontent-type: application/x-www-form-urlencoded\r\nContent-Length: 201\r\nOrigin: https://n1casino-review.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 00:52:10 GMT\r\ncontent-type: application/json\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://n1casino-review.com\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 3\r\ncontent-encoding: gzip\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":961,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"acd140fcab6acd1f12df9953ceb7566e","sha1":"da33b5152f4f13681faf05d74f64b63f12620d6e","sha256":"2705d99d06d3ce37f1c40c660198742f797843fda1096d027582de2c827363a4","sha512":"d40bc3d05a0bb78ef98fbcc09ac6792b111f6b1025723160508d606a2baba83bf3109ce9b624bb9f75945da6e500a32394c6b54787d8db9e4994522c9cbd28db","ssdeep":"","tlshash":"dc11003eb62518798c1c8311d69a7c104ffe17373159bd7ce4ec8ed4b1da1e995a2a03","first_seen":"2025-11-14T00:52:42.921094Z","last_seen":"2025-11-14T00:52:42.921094Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2081,"timings":{"blocked":778,"dns":36,"connect":94,"send":0,"wait":473,"receive":0,"ssl":695},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu2007.de/?attachment_id=18472","fqdn":"eu2007.de","domain":"eu2007.de","tld":"de"},"ip":{"addr":"85.13.153.132","port":443,"asn":34788,"as":"Neue Medien Muennich GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:12.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu2007.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 17:21:03 GMT","end":"Fri, 12 Dec 2025 17:21:02 GMT"},"fingerprint":{"sha1":"FB:5D:6A:66:0F:87:4F:49:DC:8B:53:31:84:4F:A2:12:46:CC:30:48","sha256":"AF:07:B4:0B:B1:C9:56:0D:1C:6F:4B:6E:7F:E3:A8:34:56:38:62:9C:D2:8E:F8:CB:32:07:89:43:39:E3:9A:E6"}}},"request":{"raw":"GET /?attachment_id=18472 HTTP/1.1\r\nHost: eu2007.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nexpires: Fri, 14 Nov 2025 01:52:12 GMT\r\ncache-control: max-age=3600\r\nx-redirect-by: Yoast SEO\r\nlocation: https://www.eu2007.de/wp-content/uploads/2022/08/n1bet-logo-l.png\r\nvary: User-Agent\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 14 Nov 2025 00:52:12 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4517,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eu2007.de/wp-content/uploads/2022/08/n1bet-logo-l.png","fqdn":"www.eu2007.de","domain":"eu2007.de","tld":"de"},"ip":{"addr":"85.13.153.132","port":443,"asn":34788,"as":"Neue Medien Muennich GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:13.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu2007.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 17:21:03 GMT","end":"Fri, 12 Dec 2025 17:21:02 GMT"},"fingerprint":{"sha1":"FB:5D:6A:66:0F:87:4F:49:DC:8B:53:31:84:4F:A2:12:46:CC:30:48","sha256":"AF:07:B4:0B:B1:C9:56:0D:1C:6F:4B:6E:7F:E3:A8:34:56:38:62:9C:D2:8E:F8:CB:32:07:89:43:39:E3:9A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2022/08/n1bet-logo-l.png HTTP/1.1\r\nHost: www.eu2007.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://n1casino-review.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 03 Aug 2022 09:54:28 GMT\r\netag: \"11a5-5e55337fe1d00\"\r\naccept-ranges: bytes\r\ncontent-length: 4517\r\ncontent-type: image/png\r\ndate: Fri, 14 Nov 2025 00:52:13 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4517,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit colormap, non-interlaced","md5":"b6936b774b8ca63adaf005cbfe793698","sha1":"97c46a7a03aa9a8f15cf141a5c422ee7ed745437","sha256":"b390df4850d1303b8f39e4694a2a90853c68fb41515a0008076f63b5d066db19","sha512":"4d1f65e91b6d02ca707fde75fb130cdb2012a0da9fd0886e58c313cd26af05d803f193e68d4742387ee39aa30a1bfb05dd7233604a5b4bcbbf44982261a31394","ssdeep":"96:qBsbIwU7fRPLZrPtdpRfZUicyAMr6QOcNR2KXSryYnib9:v0fdLbxfZCyv6oCOYno","tlshash":"b091afeebf65411ce01cb5b692d725d95e3698eb09d802e3361293a54b833e186b20ce","first_seen":"2025-11-14T00:52:42.921791Z","last_seen":"2025-11-14T00:52:42.921791Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.eu2007.de/wp-content/uploads/2022/08/n1bet-logo-l.png","fqdn":"www.eu2007.de","domain":"eu2007.de","tld":"de"},"ip":{"addr":"85.13.153.132","port":443,"asn":34788,"as":"Neue Medien Muennich GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:13.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu2007.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 17:21:03 GMT","end":"Fri, 12 Dec 2025 17:21:02 GMT"},"fingerprint":{"sha1":"FB:5D:6A:66:0F:87:4F:49:DC:8B:53:31:84:4F:A2:12:46:CC:30:48","sha256":"AF:07:B4:0B:B1:C9:56:0D:1C:6F:4B:6E:7F:E3:A8:34:56:38:62:9C:D2:8E:F8:CB:32:07:89:43:39:E3:9A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2022/08/n1bet-logo-l.png HTTP/1.1\r\nHost: www.eu2007.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://n1casino-review.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 03 Aug 2022 09:54:28 GMT\r\netag: \"11a5-5e55337fe1d00\"\r\naccept-ranges: bytes\r\ncontent-length: 4517\r\ncontent-type: image/png\r\ndate: Fri, 14 Nov 2025 00:52:13 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4517,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit colormap, non-interlaced","md5":"b6936b774b8ca63adaf005cbfe793698","sha1":"97c46a7a03aa9a8f15cf141a5c422ee7ed745437","sha256":"b390df4850d1303b8f39e4694a2a90853c68fb41515a0008076f63b5d066db19","sha512":"4d1f65e91b6d02ca707fde75fb130cdb2012a0da9fd0886e58c313cd26af05d803f193e68d4742387ee39aa30a1bfb05dd7233604a5b4bcbbf44982261a31394","ssdeep":"96:qBsbIwU7fRPLZrPtdpRfZUicyAMr6QOcNR2KXSryYnib9:v0fdLbxfZCyv6oCOYno","tlshash":"b091afeebf65411ce01cb5b692d725d95e3698eb09d802e3361293a54b833e186b20ce","first_seen":"2025-11-14T00:52:42.921791Z","last_seen":"2025-11-14T00:52:42.921791Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/rrweb@2.0.0-alpha.4/dist/rrweb.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Oct 2025 07:42:11 GMT","end":"Wed, 21 Jan 2026 08:42:08 GMT"},"fingerprint":{"sha1":"35:E0:1E:4C:64:5C:CF:45:E3:D1:1F:98:25:BC:4E:A4:B5:0A:8F:DF","sha256":"3F:2C:BB:33:AB:E0:D9:9E:03:91:C6:EE:DF:EF:85:A5:18:00:D6:DF:6A:34:A2:86:46:96:AF:91:C2:94:F7:D7"}}},"request":{"raw":"GET /rrweb@2.0.0-alpha.4/dist/rrweb.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://n1casino-review.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 00:52:09 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 99e28648be5256a9-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 3032733\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 14 Nov 2026 00:52:09 GMT\r\nlast-modified: Sat, 13 Sep 2025 22:16:40 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncontent-digest: sha256=:hqAGp3qvRGRVAfS7bCeBPQldut3BjsEAh+CJl+zKiFQ=:\r\ncross-origin-resource-policy: cross-origin\r\nfly-request-id: 01K52JDRF2BMFCDC4SYDXKVGMV-fra\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":140517,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36544)","md5":"e5479cda2d5984596110ce6deb3fd949","sha1":"1cea8ad5b994edad9a3dcd73b07b5b855a7a26b5","sha256":"86a006a77aaf44645501f4bb6c27813d095dbaddc18ec10087e08997ecca8854","sha512":"eee006517827305b60fd4b5744345410cbb5b0d1b312ff424d566f3d3311ddabe6fe7d3602639bad9f21934a4867f4c217d1d7b02af7abab59913f050b056f05","ssdeep":"3072:7vLW8UTv5Z3PYmo6zBwUrL5h5DGJWZX53vA:TLWF1mmo6zBwUrL5h9GJ853vA","tlshash":"bdd339c9319539736bd755a9907a4241b6306855700880b8f93dedfb38bac4321bbfbe","first_seen":"2023-03-14T08:31:23Z","last_seen":"2026-05-14T13:47:09.779061Z","times_seen":115,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu2007.de/?attachment_id=18472","fqdn":"eu2007.de","domain":"eu2007.de","tld":"de"},"ip":{"addr":"85.13.153.132","port":443,"asn":34788,"as":"Neue Medien Muennich GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu2007.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 17:21:03 GMT","end":"Fri, 12 Dec 2025 17:21:02 GMT"},"fingerprint":{"sha1":"FB:5D:6A:66:0F:87:4F:49:DC:8B:53:31:84:4F:A2:12:46:CC:30:48","sha256":"AF:07:B4:0B:B1:C9:56:0D:1C:6F:4B:6E:7F:E3:A8:34:56:38:62:9C:D2:8E:F8:CB:32:07:89:43:39:E3:9A:E6"}}},"request":{"raw":"GET /?attachment_id=18472 HTTP/1.1\r\nHost: eu2007.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nexpires: Fri, 14 Nov 2025 01:52:10 GMT\r\ncache-control: max-age=3600\r\nx-redirect-by: Yoast SEO\r\nlocation: https://www.eu2007.de/wp-content/uploads/2022/08/n1bet-logo-l.png\r\nvary: User-Agent\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 14 Nov 2025 00:52:10 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4517,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":184,"dns":10,"connect":22,"send":0,"wait":159,"receive":0,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"customer-assets.emergentagent.com/job_glucksspiel-n1/artifacts/6vek9d9v_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2022.51.21.png","fqdn":"customer-assets.emergentagent.com","domain":"emergentagent.com","tld":"com"},"ip":{"addr":"3.167.2.121","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emergentagent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 31 Oct 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:FA:8E:80:47:64:BD:EE:6B:F2:E2:2D:48:B5:BB:CA:A8:48:8F:51","sha256":"DD:12:D1:AE:90:A0:EF:15:15:FA:69:88:2C:3B:13:73:3F:BE:BE:C2:59:84:20:E3:A5:25:EC:1A:DE:10:90:44"}}},"request":{"raw":"GET /job_glucksspiel-n1/artifacts/6vek9d9v_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2022.51.21.png HTTP/1.1\r\nHost: customer-assets.emergentagent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 4002828\r\nlast-modified: Tue, 11 Nov 2025 20:51:59 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: BR7x8RMoWZxkBuG_Jwy8YmVDFxJwyLvi\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 14 Nov 2025 00:52:10 GMT\r\netag: \"91046fd7748583433e205a0a0a70e208\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f1dfb112336c56393fdb3341c0df8da0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: NdCcbiio2HCRR-Mrmt50rFILm6f7bL0PiRWXaQU1AfRE01R1PjAA2w==\r\nage: 53093\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":4002828,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2856 x 1570, 8-bit/color RGBA, non-interlaced","md5":"bf330ab966e01c59e786e0775c16513d","sha1":"751fe1ef3af2954d31ca50029f32aa9647a60b2b","sha256":"a4eba0f1d5c4d96ff33490a002d277e18e9d5d1fac885314e580ea9da22067a5","sha512":"c6c215ee1dab11e1f49ab2ec362cc2da3329bb2dcf6e6c512e37fb751b867a2aad193bee8e7b88e001fa14b3702c4c8825834f3c1d99a934fa9c6099d5340669","ssdeep":"12288:WKs/7gvsJKAjy6KGL7L8jSevBMw1omQFEPkYh05TVB2dYcxt35Dk2H4IDVeGO6Aj:WKUKQyUPLalb1xkBsScgIDI/ayYPrGL","tlshash":"68252323fd5e730fc05121a2db0779cac926b11b70484fabafa24f3a9a1b985f431d55","first_seen":"2025-11-14T00:52:42.923103Z","last_seen":"2025-11-14T00:52:42.923103Z","times_seen":1,"resource_available":false,"data":null}},"time_used":973,"timings":{"blocked":118,"dns":0,"connect":1,"send":0,"wait":27,"receive":706,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"contentdeliverynetwork.cc/n1bet/logos/responsibility/white/gamblers_anonymous.svg","fqdn":"contentdeliverynetwork.cc","domain":"contentdeliverynetwork.cc","tld":"cc"},"ip":{"addr":"213.182.199.125","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Croatia","country_code":"HR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"contentdeliverynetwork.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Oct 2025 15:44:50 GMT","end":"Tue, 30 Dec 2025 16:44:39 GMT"},"fingerprint":{"sha1":"5A:EC:C0:BE:00:F5:20:E1:12:73:93:E7:60:CC:C9:05:92:93:4E:23","sha256":"0B:5E:A2:B3:5A:A1:36:DB:80:BA:9E:AF:6A:75:FB:14:71:80:51:5F:18:40:23:AF:3E:96:DD:35:B5:CE:68:50"}}},"request":{"raw":"GET /n1bet/logos/responsibility/white/gamblers_anonymous.svg HTTP/1.1\r\nHost: contentdeliverynetwork.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 00:52:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Jun 2024 15:10:05 GMT\r\nvary: accept-encoding\r\nexpires: Sat, 15 Nov 2025 00:52:10 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 12791\r\ncf-cache-status: HIT\r\netag: W/\"667addcd-1bc\"\r\ncontent-encoding: gzip\r\ncf-ray: 99e2864b1aba56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":444,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"72576617ca7206823fa9657e230b448b","sha1":"e8d187d585d74f882f24632297d535c86b143c9a","sha256":"e47c35f1ab25d7a620cb24cdd0f9bd47fa71532ddd24c7b14e9a2de77902cbf5","sha512":"195d247bcdd704bc7935907d9a022def3fc9bd7d7c795f8223c9903da6cc50f2c99c48e09ac7730e04fe2ffd7c16855a4391457e4ce46ffe27d8d666cd9c6285","ssdeep":"","tlshash":"24f0abf43624b4852c0d053ed375689120eb24fac7890d88e780382230672925d0e9d7","first_seen":"2025-04-20T02:55:54.926433Z","last_seen":"2026-05-14T19:38:28.826713Z","times_seen":212,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":97,"dns":5,"connect":1,"send":0,"wait":40,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-14","alert":"Sinkholed","trigger":"contentdeliverynetwork.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.eu2007.de/wp-content/uploads/2022/08/n1bet-logo-l.png","fqdn":"www.eu2007.de","domain":"eu2007.de","tld":"de"},"ip":{"addr":"85.13.153.132","port":443,"asn":34788,"as":"Neue Medien Muennich GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:10.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu2007.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 17:21:03 GMT","end":"Fri, 12 Dec 2025 17:21:02 GMT"},"fingerprint":{"sha1":"FB:5D:6A:66:0F:87:4F:49:DC:8B:53:31:84:4F:A2:12:46:CC:30:48","sha256":"AF:07:B4:0B:B1:C9:56:0D:1C:6F:4B:6E:7F:E3:A8:34:56:38:62:9C:D2:8E:F8:CB:32:07:89:43:39:E3:9A:E6"}}},"request":{"raw":"GET /wp-content/uploads/2022/08/n1bet-logo-l.png HTTP/1.1\r\nHost: www.eu2007.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://n1casino-review.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 03 Aug 2022 09:54:28 GMT\r\netag: \"11a5-5e55337fe1d00\"\r\naccept-ranges: bytes\r\ncontent-length: 4517\r\ncontent-type: image/png\r\ndate: Fri, 14 Nov 2025 00:52:10 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4517,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 800, 8-bit colormap, non-interlaced","md5":"b6936b774b8ca63adaf005cbfe793698","sha1":"97c46a7a03aa9a8f15cf141a5c422ee7ed745437","sha256":"b390df4850d1303b8f39e4694a2a90853c68fb41515a0008076f63b5d066db19","sha512":"4d1f65e91b6d02ca707fde75fb130cdb2012a0da9fd0886e58c313cd26af05d803f193e68d4742387ee39aa30a1bfb05dd7233604a5b4bcbbf44982261a31394","ssdeep":"96:qBsbIwU7fRPLZrPtdpRfZUicyAMr6QOcNR2KXSryYnib9:v0fdLbxfZCyv6oCOYno","tlshash":"b091afeebf65411ce01cb5b692d725d95e3698eb09d802e3361293a54b833e186b20ce","first_seen":"2025-11-14T00:52:42.921791Z","last_seen":"2025-11-14T00:52:42.921791Z","times_seen":1,"resource_available":false,"data":null}},"time_used":842,"timings":{"blocked":379,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/lazy-recorder.js?v=1.292.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"172.66.166.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:11.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 09 Nov 2025 07:58:08 GMT","end":"Sat, 07 Feb 2026 07:58:07 GMT"},"fingerprint":{"sha1":"40:48:E3:EB:8E:D7:69:B1:39:18:B9:60:BF:0B:BC:57:4F:53:4B:85","sha256":"3C:10:22:59:F4:D5:4A:77:F2:C4:D6:CA:C7:4C:A5:48:91:34:AD:14:C6:F2:9A:3F:DE:C8:AF:BA:CF:87:DA:71"}}},"request":{"raw":"GET /static/lazy-recorder.js?v=1.292.0 HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://n1casino-review.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 14 Nov 2025 00:52:12 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncache-control: public, max-age=14400\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding, Origin\r\nlast-modified: Fri, 14 Nov 2025 00:22:54 GMT\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncross-origin-opener-policy: same-origin\r\nserver: cloudflare\r\nx-envoy-upstream-service-time: 1\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: MISS\r\ncf-ray: 99e286560c720b61-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149707,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"274a018aa13dd189862b710acd68ab99","sha1":"4b535bf67c6fddc6b75a089df50dfc2c06e118da","sha256":"3187cdf5c63dfc91becee95f625f0ad62089e05e109f754308b89e36e0cbfafd","sha512":"85b3b8f13e63b544722ebdeaee3799edc5dfb8a4f12c039778cce1575e42f8c5a0ef6c6f8b65b7ff0640f51a6edf154aae47c835f6ce69f721645e380e00c559","ssdeep":"1536:JmYGVccSmqV3Zc2UZwh+Rsf0ycmIYUiknaXvghUatNY7YsB2GMztsRYTYBNfps7Q:QYGfnYqPRCEY3kz/bZtmYTYLfps7/I","tlshash":"16e33bcb7666b0335be21165806f0202f1367b19704a8074f26ad9e938bd9c761f7f7a","first_seen":"2025-11-14T00:52:42.924514Z","last_seen":"2025-11-14T00:52:42.924514Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1243,"timings":{"blocked":351,"dns":0,"connect":0,"send":0,"wait":892,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu2007.de/?attachment_id=18472","fqdn":"eu2007.de","domain":"eu2007.de","tld":"de"},"ip":{"addr":"85.13.153.132","port":443,"asn":34788,"as":"Neue Medien Muennich GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:12.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"eu2007.de","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 13 Sep 2025 17:21:03 GMT","end":"Fri, 12 Dec 2025 17:21:02 GMT"},"fingerprint":{"sha1":"FB:5D:6A:66:0F:87:4F:49:DC:8B:53:31:84:4F:A2:12:46:CC:30:48","sha256":"AF:07:B4:0B:B1:C9:56:0D:1C:6F:4B:6E:7F:E3:A8:34:56:38:62:9C:D2:8E:F8:CB:32:07:89:43:39:E3:9A:E6"}}},"request":{"raw":"GET /?attachment_id=18472 HTTP/1.1\r\nHost: eu2007.de\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nexpires: Fri, 14 Nov 2025 01:52:12 GMT\r\ncache-control: max-age=3600\r\nx-redirect-by: Yoast SEO\r\nlocation: https://www.eu2007.de/wp-content/uploads/2022/08/n1bet-logo-l.png\r\nvary: User-Agent\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 14 Nov 2025 00:52:12 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4517,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"customer-assets.emergentagent.com/job_glucksspiel-n1/artifacts/ewnd02u4_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.50.40.png","fqdn":"customer-assets.emergentagent.com","domain":"emergentagent.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.907Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /job_glucksspiel-n1/artifacts/ewnd02u4_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2023.50.40.png HTTP/1.1\r\nHost: customer-assets.emergentagent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T15:20:42.416165Z","times_seen":15223586,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"customer-assets.emergentagent.com/job_glucksspiel-n1/artifacts/sau9xqbg_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2022.40.55.png","fqdn":"customer-assets.emergentagent.com","domain":"emergentagent.com","tld":"com"},"ip":{"addr":"3.167.2.121","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://n1casino-review.com/","date":"2025-11-14T00:52:09.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"emergentagent.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 31 Oct 2025 00:00:00 GMT","end":"Sun, 29 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"D1:FA:8E:80:47:64:BD:EE:6B:F2:E2:2D:48:B5:BB:CA:A8:48:8F:51","sha256":"DD:12:D1:AE:90:A0:EF:15:15:FA:69:88:2C:3B:13:73:3F:BE:BE:C2:59:84:20:E3:A5:25:EC:1A:DE:10:90:44"}}},"request":{"raw":"GET /job_glucksspiel-n1/artifacts/sau9xqbg_%D0%A1%D0%BD%D0%B8%D0%BC%D0%BE%D0%BA%20%D1%8D%D0%BA%D1%80%D0%B0%D0%BD%D0%B0%202025-11-11%20%D0%B2%2022.40.55.png HTTP/1.1\r\nHost: customer-assets.emergentagent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://n1casino-review.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2400642\r\nlast-modified: Tue, 11 Nov 2025 20:42:34 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 4kOw3FptGpo5EIwiAsWMV4_gG4uwqzFA\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Fri, 14 Nov 2025 00:52:10 GMT\r\netag: \"037ebf38f962994723a0a27f2902aca1\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 f1dfb112336c56393fdb3341c0df8da0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 2m146X4yy-ghtorUki4vQrWxWnFxgBUxhJGPN6Q8I6WIeeqocBKKpQ==\r\nage: 53093\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2400642,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1784 x 882, 8-bit/color RGBA, non-interlaced","md5":"0be5abcce185390d367bac801c7a6b63","sha1":"22649d0b72ad3b40a88490819076c712c19227b4","sha256":"539158ebfe972af1dedd5459cfb2bfa4116d2721fe64cd2653102ba96e5af0b2","sha512":"c7adf74e16be6f4d338fbbf919d79c7dc717c2f48ac831478fc2d86db585530c3ae4cdd8a0455c19c557bcb51a0625327f63c6312ce1483aca816d0be76b4254","ssdeep":"24576:u7YGfvzj2sAtiM/j7m8AsoYniDrP+BP3bxhoFvRyBZPKFzHuB:uEG3HiiMnmQoYni3QP3bAp+dB","tlshash":"312533a1b7e0b636de3f07a860331c2a152256e54f86e9be3e4348eb95c0f1c1da7156","first_seen":"2025-11-14T00:52:42.925406Z","last_seen":"2025-11-14T00:52:42.925406Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1362,"timings":{"blocked":403,"dns":1,"connect":1,"send":0,"wait":65,"receive":484,"ssl":406},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}