{"report_id":"c2c024c4-9cff-4c70-9f16-fca8242ee823","version":0,"status":"done","tags":[],"date":"2026-08-15T22:48:32Z","url":{"schema":"https","addr":"degencity-casino-au.com/","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"104.21.21.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"degencity-casino-au.com/","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"title":"DegenCity - Online Casino in Australia | Review","dom":{"size":71642,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (479)","md5":"90be6d1dfcfc2ce8550cbf6fefeff215","sha1":"bbe7b68200d9fd633bf24f93ff2dddc358c0f7eb","sha256":"d3cefd97a6e63b83fddc52d0c231d0fece5051713cf758b41492da92cc9a1c4b","sha512":"5c836ff8d9aae2b3d8f4d1fdd228b381276f066250225263fc50c64bf0caeff7acdb3417ba7fc9461af7add01bc0df7002621882a3fbc7fa40ecfd8c0ef57bf5","ssdeep":"1536:1HXTLPppYSM740PcgoowxvgNeKIIXfRUbRsr0MGLq5NyRN3dBRgMLm:13TLPYSM7Fmx4eufhELm","tlshash":"af630907a642295e61039184bf792f89676d8023970fdde8fa9f417cdfca4898433b9d","dom_hash":"domhash58d6a99c9acd81ffbc4e0a9a32f2a899","first_seen":"2026-08-15T22:45:25.882582Z","last_seen":"2026-08-15T22:48:33.534092Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"degencity-casino-au.com/","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"104.21.21.246","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-19T22:48:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"degencity-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"degencity-casino-au.com","ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-22","domain_rank":0,"first_seen":"2026-08-15T22:45:21.230008Z","last_seen":"2026-08-15T22:45:21.230008Z","alert_count":18,"request_count":18,"received_data":885993,"sent_data":9714,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":1,"received_data":6465,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":2,"received_data":77138,"sent_data":1154,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"degencity-casino-au.com/","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2359a5a7c2dbb46ac4b282e357268a16","sha1":"ae5117e09c1cbf8a762cfd5da3f566b0ba2e5a73","sha256":"6841205a2483bda80a928dc8122439de801b250a914acec716bd8d3491688c6f","sha512":"e5924cdcd740c44cda92382bc6bc7f4bde8f32427c1abd9d082308d61a72011331c0c0c3db97c5f079c62b222d396baef4506d00437ecc9d493af828772f270f","ssdeep":"","tlshash":"420196dd6883503566aa31b70f5bd385be349543500de50ab90c0168ffe6968dbaaf28","size":780,"data":"","first_seen":"2026-06-27T11:46:22.380959Z","last_seen":"2026-08-15T22:48:33.563666Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"degencity-casino-au.com/images/hacksaw_wanteddeadorawild.webp","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.555Z","timestamp":1786834085555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degencity-casino-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 13:23:11 GMT","end":"Sun, 20 Sep 2026 14:21:41 GMT"},"fingerprint":{"sha1":"C8:79:0B:7F:F9:C8:E5:36:4C:E0:CB:60:7E:12:AB:C7:F6:FE:F6:06","sha256":"F4:D9:15:C6:70:51:A3:36:1D:DF:D8:BC:EC:C5:9B:85:26:2D:02:D3:67:B4:F0:A8:68:93:F9:9D:52:76:59:2D"}}},"request":{"raw":"GET /images/hacksaw_wanteddeadorawild.webp HTTP/1.1\r\nHost: degencity-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://degencity-casino-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/webp\r\ndate: Sat, 15 Aug 2026 22:48:05 GMT\r\netag: \"6a7e2b52-14e5e\"\r\nlast-modified: Thu, 13 Aug 2026 20:38:42 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nserver-timing: cfExtPri\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E5VRb68MuSwDyUjOopOopEvAuq7%2B5gpQledHhZB%2Bq7RHix4lVkJwFIoqCeuRHEmoCK%2BIn27sEG0b0g8Auw8RI3774MSMWBNKBepzEg7Tzkb5H6sbdee94fUq4kLhJhi3m7lpvZpFP4RwLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2bbbeaababb712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 85598\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85598,"size_decoded":86553,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6e6bdd6aa82b2a09f64e026004a34163","sha1":"907e622aa463c9a7778e6bf04d7b22df55cb52cb","sha256":"3713e82b8836f80cac6bed6e037ac77bdb2a5feb3ee8c02ca2b1fcd913f47394","sha512":"2dde5556f5dd903c02868726b57e36e3691d42e0de689b680e8de74874db1f29ae710085ee102f15777eca47fe3c20937bddab27ca358face5cc6a9d962d1bf4","ssdeep":"1536:tFIguZjpKOpq67xLstRWgOddRArwUfG0VQflZTymK3oko5TNASQakgKDdtYI2NIy:tFOZjHpq6ZsfsRArpEflZTy/Yk9TgYdI","tlshash":"8f8312261a16b3b3cd12407e4c7b85e19400ab5f5a52dc48e9f5639fbb814c7f12caea","first_seen":"2026-05-03T19:41:35.574858Z","last_seen":"2026-08-15T22:48:33.54201Z","times_seen":5,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"degencity-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"degencity-casino-au.com/images/relax_moneytrain2.webp","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.557Z","timestamp":1786834085557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degencity-casino-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 13:23:11 GMT","end":"Sun, 20 Sep 2026 14:21:41 GMT"},"fingerprint":{"sha1":"C8:79:0B:7F:F9:C8:E5:36:4C:E0:CB:60:7E:12:AB:C7:F6:FE:F6:06","sha256":"F4:D9:15:C6:70:51:A3:36:1D:DF:D8:BC:EC:C5:9B:85:26:2D:02:D3:67:B4:F0:A8:68:93:F9:9D:52:76:59:2D"}}},"request":{"raw":"GET /images/relax_moneytrain2.webp HTTP/1.1\r\nHost: degencity-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://degencity-casino-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/webp\r\ndate: Sat, 15 Aug 2026 22:48:05 GMT\r\netag: \"6a7e2b52-667e\"\r\nlast-modified: Thu, 13 Aug 2026 20:38:42 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nserver-timing: cfExtPri\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPqZMn5gd4YaZTmvRoBF9NCUmOYwF3sz4X3HHEhbaoIFzA8h9HlMiPM%2FhGSlb%2FM0NQSyDPdNaPHdZcAwlp0Nx7lEGR6jhYI1UhD6ckhMy8CeHa6Th7ZFbVoJYC7Fm01Oxn%2FLrjweSISnfw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2bbbeaababd712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26238\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26238,"size_decoded":27192,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5b4e9fbad9c9ed8140cc7200cdd04964","sha1":"c9e0820fddba5a731e7c1eebe0c35cb990910cde","sha256":"65b42d8ecf6552663dcdc4371300c14e38cfe6b2042695aa515b2754f3533d75","sha512":"a15627f77dfc5afbde40e7e900f9a0b4b0c1b8f258ef9d227deef951cbe36ecfae63f0a3d41515da64cec5e63fe7f8119345584a92f2ef10f3104ed43fee8c2a","ssdeep":"384:KFYNg7bXVoo7GsAEYR2MWNpRerXLCAmuLMPJqGFYFpsnSmYppJ1pglUyzheyLs+Y:KFYygsgPipRePCAeYFVXer9L33I","tlshash":"1dc2f13c5fe62c74c3a0b732a58c3db08fb1682d8c764f818e3e5179511d4e6ace919a","first_seen":"2026-05-03T19:41:35.577389Z","last_seen":"2026-08-15T22:48:33.54373Z","times_seen":4,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"degencity-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"degencity-casino-au.com/images/pragmatic_gatesofolympus.webp","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.559Z","timestamp":1786834085559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degencity-casino-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 13:23:11 GMT","end":"Sun, 20 Sep 2026 14:21:41 GMT"},"fingerprint":{"sha1":"C8:79:0B:7F:F9:C8:E5:36:4C:E0:CB:60:7E:12:AB:C7:F6:FE:F6:06","sha256":"F4:D9:15:C6:70:51:A3:36:1D:DF:D8:BC:EC:C5:9B:85:26:2D:02:D3:67:B4:F0:A8:68:93:F9:9D:52:76:59:2D"}}},"request":{"raw":"GET /images/pragmatic_gatesofolympus.webp HTTP/1.1\r\nHost: degencity-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://degencity-casino-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/webp\r\ndate: Sat, 15 Aug 2026 22:48:05 GMT\r\netag: \"6a7e2b52-4302\"\r\nlast-modified: Thu, 13 Aug 2026 20:38:42 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nserver-timing: cfExtPri\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ckck1QbWT%2FQ8%2FoU2Rz0WdvzeXMXIx%2Bskt5DEFDqq6sNx4%2B5cwlYyYo%2B%2FxmWttv6zM9XJI1gv4BDkl3%2FbdM77TofDPIK%2Brs8TRZec8FuGPjvsxKhC8dMjiXI7BINYx%2BzXvlq1N0VJkmDbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2bbbeaababf712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17154\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17154,"size_decoded":18120,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"38399b967c3b2c9ecaebdd2e9703564a","sha1":"b16902013025631c2499ed1ffd1c7a3253df546b","sha256":"e24e0eb75937a9d862e994dddf30b0bbbd50d6542515f4c2392d8c1ab3b7c75b","sha512":"1505a6d2b76ff4fa13009fa05750414ffd1dbe5d8c79862f4fca7f2c294376ba7bcf1596c3a6d9b19e82e5ceb6639830565c17967fc08c7373ba211ee98a3c05","ssdeep":"384:yFYNg7bLy2OYlqyZnAPFOT/2cLmSRDS9DrnTS0VAJmAmmZ:yFYy24lqFFD7DrTTVAJm9mZ","tlshash":"9c72d079026dc365e231abfdbc8dee4f7de48532f7422d84e234567c0660891ab7d119","first_seen":"2025-12-09T04:02:10.18007Z","last_seen":"2026-08-15T22:48:33.545181Z","times_seen":30,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"degencity-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"degencity-casino-au.com/images/download.svg","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.662Z","timestamp":1786834085662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degencity-casino-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 13:23:11 GMT","end":"Sun, 20 Sep 2026 14:21:41 GMT"},"fingerprint":{"sha1":"C8:79:0B:7F:F9:C8:E5:36:4C:E0:CB:60:7E:12:AB:C7:F6:FE:F6:06","sha256":"F4:D9:15:C6:70:51:A3:36:1D:DF:D8:BC:EC:C5:9B:85:26:2D:02:D3:67:B4:F0:A8:68:93:F9:9D:52:76:59:2D"}}},"request":{"raw":"GET /images/download.svg HTTP/1.1\r\nHost: degencity-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://degencity-casino-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i\r\ncache-control: max-age=31536000\r\ncontent-type: image/svg+xml\r\ndate: Sat, 15 Aug 2026 22:48:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 15 Aug 2027 22:44:51 GMT\r\nlast-modified: Thu, 13 Aug 2026 20:38:42 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6K7%2Fs4DHajjvx%2FnpvAhYd5cG0aq2YLJmGZ1RYTky2g1L89rVsnSXC08HcTTVrXdZ2CyWyjiT2bEPZWhY7mi31UUWPNxzM2iLFJHhzXzpurc%2FkHA49y%2BeF1p0f0qzM%2BSHY22ZbRnzFM36A%3D%3D\"}]}\r\nage: 194\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a7e2b52-43f\"\r\ncf-ray: a2bbbeab5acc712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1087,"size_decoded":1538,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e247a0de8cb6e800175ab563ba90f96c","sha1":"6d00ca5b1a343beb0fa26afe90421d3816283a45","sha256":"c6b529c3ede8fedc2c7cf4c87cb7d383835bd38757f397a5390a74385c13b9be","sha512":"d3b2df0f41d9f3187d5023c43779099528d8aab4f50149013ed940ad551ff4392788c7715420a0122a5d38191af07ec8d831330cbd77f5ed71da3926b681fd0c","ssdeep":"","tlshash":"0211f0b0f2f6540ff82f5078fd9c8c250b2e5075b48700846c2f3b91c1961a2e61ba28","first_seen":"2026-05-03T19:41:35.561486Z","last_seen":"2026-08-15T22:48:33.546682Z","times_seen":4,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"degencity-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"degencity-casino-au.com/img/logo.svg","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.553Z","timestamp":1786834085553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degencity-casino-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 13:23:11 GMT","end":"Sun, 20 Sep 2026 14:21:41 GMT"},"fingerprint":{"sha1":"C8:79:0B:7F:F9:C8:E5:36:4C:E0:CB:60:7E:12:AB:C7:F6:FE:F6:06","sha256":"F4:D9:15:C6:70:51:A3:36:1D:DF:D8:BC:EC:C5:9B:85:26:2D:02:D3:67:B4:F0:A8:68:93:F9:9D:52:76:59:2D"}}},"request":{"raw":"GET /img/logo.svg HTTP/1.1\r\nHost: degencity-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://degencity-casino-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=5,i\r\ncache-control: max-age=31536000\r\ncontent-type: image/svg+xml\r\ndate: Sat, 15 Aug 2026 22:48:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 15 Aug 2027 22:44:51 GMT\r\nlast-modified: Thu, 13 Aug 2026 20:38:42 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mb35pdK0wjHbyLwjy493%2FIWJGQiX16xqYbQxOtKviM5JIyz9Tm2vgh%2FqUpFqFC%2B7S3OqxGLpjrpY1K9PhB6vu680SrYxT92ClMsF9Az7%2F1Z0JIBIqo59HvATyiMQG3u8urrCNwI%2BTBF1Mw%3D%3D\"}]}\r\nage: 194\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a7e2b52-ba9\"\r\ncf-ray: a2bbbeaaaab9712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2985,"size_decoded":2078,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d1f2238e1d27e46f232a15c82d7d7fd1","sha1":"a23cbc4a87bd1fd959f6c3a3f05b6894839b4bf7","sha256":"4ccb1832c3f8ea4119bc4354e220ce6572a4a4967667373ed82f58401600de41","sha512":"74aadfaea1c5d157cc65ba36fa4b43dade998e4b5d2f2df446d9f2b274a2f4a88b2e58266fdcd0f666b048b45c9bb7248863856c70d67516d5df54abd8dcd331","ssdeep":"","tlshash":"be51786a85a860befd054370efad10350e3e2ce313114169bcad05241b25a7f9fbb2f9","first_seen":"2026-07-26T12:59:04.502854Z","last_seen":"2026-08-15T22:48:33.547879Z","times_seen":5,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"degencity-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"degencity-casino-au.com/images/pragmatic_bigbassamazonxtreme.webp","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.556Z","timestamp":1786834085556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degencity-casino-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 13:23:11 GMT","end":"Sun, 20 Sep 2026 14:21:41 GMT"},"fingerprint":{"sha1":"C8:79:0B:7F:F9:C8:E5:36:4C:E0:CB:60:7E:12:AB:C7:F6:FE:F6:06","sha256":"F4:D9:15:C6:70:51:A3:36:1D:DF:D8:BC:EC:C5:9B:85:26:2D:02:D3:67:B4:F0:A8:68:93:F9:9D:52:76:59:2D"}}},"request":{"raw":"GET /images/pragmatic_bigbassamazonxtreme.webp HTTP/1.1\r\nHost: degencity-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://degencity-casino-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/webp\r\ndate: Sat, 15 Aug 2026 22:48:05 GMT\r\netag: \"6a7e2b52-7cde\"\r\nlast-modified: Thu, 13 Aug 2026 20:38:42 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nserver-timing: cfExtPri\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N2VETjcWVje0bTrm8ENlSkV%2FQBIqCXTHmNuaK8XougO6cl%2BlAPK6fei%2BeYZiuJpVE3kc15mxMZc2GPfKeLhaLNpy%2Fb1pjkaF%2BRqoNQ0oAHcNZPUq1GmYz5J5JW7tx5RTmgxcsExKt5syIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2bbbeaababc712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31966\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31966,"size_decoded":32924,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x294, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2fed35ef4e0ea66b54d20c6d9c22b851","sha1":"dedc2bfcb37977d795c546aa16aa696cae471322","sha256":"4b7a7c8f57e60f6f90195fccb46b012ab90437c591d0cf3197204412dc4b0615","sha512":"7a50657f61eb24c825f7930bb0586b6a14bfb142a3f84fd011b816a75671e1f84251ca371bfede32ba8bb09059a30e7a4d6aae1dd57d5c56d267c3e479fb4661","ssdeep":"768:gTxPLF09KHSEpt2DmpBxBbEtQQ8GC/4ndo1/adYy4xlE:qhLFk6Q2CU52u9lE","tlshash":"a9e2e058741b6f4f83bf0eff26caaee9bad0468eb993404a95e119e1df384014976431","first_seen":"2025-11-14T01:53:39.187205Z","last_seen":"2026-08-15T22:48:33.548975Z","times_seen":11,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"degencity-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"degencity-casino-au.com/images/elk_pirots.webp","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.558Z","timestamp":1786834085558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degencity-casino-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 13:23:11 GMT","end":"Sun, 20 Sep 2026 14:21:41 GMT"},"fingerprint":{"sha1":"C8:79:0B:7F:F9:C8:E5:36:4C:E0:CB:60:7E:12:AB:C7:F6:FE:F6:06","sha256":"F4:D9:15:C6:70:51:A3:36:1D:DF:D8:BC:EC:C5:9B:85:26:2D:02:D3:67:B4:F0:A8:68:93:F9:9D:52:76:59:2D"}}},"request":{"raw":"GET /images/elk_pirots.webp HTTP/1.1\r\nHost: degencity-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://degencity-casino-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/webp\r\ndate: Sat, 15 Aug 2026 22:48:05 GMT\r\netag: \"6a7e2b52-8d8c\"\r\nlast-modified: Thu, 13 Aug 2026 20:38:42 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nserver-timing: cfExtPri\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P31awCBxhzme9oOFZnz5tf%2Fan%2B42f6AXXvDjKz0nRTRUaJPusSU%2BEg1U40Q%2B4St8dTApsmYDsqsAHW66NWHbjapYVa18g6VG3sqJG9Do2p2grcCPm5336e%2BsEJafKrldbLD5vPcFR98kyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2bbbeaababe712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36236\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36236,"size_decoded":37194,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x294, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f2813d31865fc7d64a666afed0df9ac0","sha1":"73c024be8d0540f4b0e648ab0517db1919ccbc6b","sha256":"7ee732118286953b1b134724fbf9781193b9edb2a57a84deea2291ec4bf7b769","sha512":"fc3f9fa009a477e9eab2dcd674dca84266e3543fbb7cb525b0374ebaf474ba8cd3923d0140c7fc81611b4c0aecbb19eaf022c684163321ee6dfbe006bf5869a4","ssdeep":"768:HtIq84Gr3dQ7LL8qXM3X9VWCLcurSvqoquNSJOC1HysQAcxJ+:qq8u/IqXM3X9VWCLxrSvquNSkC1Sstce","tlshash":"8cf2f18263bc46eced7c98313b598c49a404a09243cbd12956d3b7bc1c44d927fbdeba","first_seen":"2026-05-03T19:41:35.580095Z","last_seen":"2026-08-15T22:48:33.551186Z","times_seen":4,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"degencity-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"degencity-casino-au.com/images/pragmatic_sugarrush.webp","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.560Z","timestamp":1786834085560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degencity-casino-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 13:23:11 GMT","end":"Sun, 20 Sep 2026 14:21:41 GMT"},"fingerprint":{"sha1":"C8:79:0B:7F:F9:C8:E5:36:4C:E0:CB:60:7E:12:AB:C7:F6:FE:F6:06","sha256":"F4:D9:15:C6:70:51:A3:36:1D:DF:D8:BC:EC:C5:9B:85:26:2D:02:D3:67:B4:F0:A8:68:93:F9:9D:52:76:59:2D"}}},"request":{"raw":"GET /images/pragmatic_sugarrush.webp HTTP/1.1\r\nHost: degencity-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://degencity-casino-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/webp\r\ndate: Sat, 15 Aug 2026 22:48:05 GMT\r\netag: \"6a7e2b52-6648\"\r\nlast-modified: Thu, 13 Aug 2026 20:38:42 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nserver-timing: cfExtPri\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UnBwblnLWRP5d7go230xmOzgHHugAcFxn8R5LTAND3RzL4tcSropPfsqzsSkIIkCCwZ%2B6AMxQ0AtImC0%2FBGLaZtgdbbn7iTEYPB57zVqDbK4YzKtk3yqAmc8h0G%2Fhf50mbjS8Bvab%2Fw4kA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2bbbeaabac0712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26184\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26184,"size_decoded":27140,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"170a4e745a8dee5111620b40251e93bc","sha1":"5cb49ea007c553c363b54339bdf6e12371ac984c","sha256":"c9599eea41d448097b3d70a955f9775d6f27a913d99a63be91419f2dfe21d261","sha512":"a40a19223376cb915dacab3df9b5b57469a6afe38c82694f084debe9377034f2ff505a9d420ee5afa6afa7b6b0e7e34af08356e142d3fc25468fa59b0d73c07b","ssdeep":"768:4FYy2EqeM8kgtDDf0Fs3OQ4jmBaahFOZFfquypV:4FCx8DtDU7Fa0cOZB3ypV","tlshash":"a4c2e1e8ad0d6364d64061381ee16f49c3d92f36bb22d099bb72622c04425a97d7256d","first_seen":"2026-04-08T14:54:36.775158Z","last_seen":"2026-08-15T22:48:33.55207Z","times_seen":13,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"degencity-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"degencity-casino-au.com/images/playson_buffalopower2holdandwin.webp","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.563Z","timestamp":1786834085563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degencity-casino-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 13:23:11 GMT","end":"Sun, 20 Sep 2026 14:21:41 GMT"},"fingerprint":{"sha1":"C8:79:0B:7F:F9:C8:E5:36:4C:E0:CB:60:7E:12:AB:C7:F6:FE:F6:06","sha256":"F4:D9:15:C6:70:51:A3:36:1D:DF:D8:BC:EC:C5:9B:85:26:2D:02:D3:67:B4:F0:A8:68:93:F9:9D:52:76:59:2D"}}},"request":{"raw":"GET /images/playson_buffalopower2holdandwin.webp HTTP/1.1\r\nHost: degencity-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://degencity-casino-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/webp\r\ndate: Sat, 15 Aug 2026 22:48:05 GMT\r\netag: \"6a7e2b52-87a2\"\r\nlast-modified: Thu, 13 Aug 2026 20:38:42 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nserver-timing: cfExtPri\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q2k2AGcTWKajj1Iruk9b3Prq5K5qsdwg%2FdCMru1Cu4RoqOByzvIcpby8HNmJiE5%2FLDZReuor9HfJ5QudLmfpd%2FQW5OS0ZdMshthe4yzKfX8jyqtwmpFOflOTceKQD1yf6mx%2BEU1hImFVcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2bbbeaabac2712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34722\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34722,"size_decoded":35678,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x294, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"42f357f69d63d3eaf05b029495a1365d","sha1":"f384a979cc09703436a95a5f18a4fd15f8118221","sha256":"5b552dff824fb797067a0bf51ebb2b22f954162c0c92167d2d381847e2d8cd5e","sha512":"3b41e79abd34854d48bbe33559bd808109def99e413fd56408ed6956fcada5f317049ff349bc23c3286957414fbcc3196af74b2841f7e429ba00fb855378b408","ssdeep":"768:hHpUmWa9ab42awd9wgsUwiFhQ7aKRB21mE+4FMUr8w4JLoqfRHxqeMD:hHpEa9akLAen10n/5r8wULoqfCes","tlshash":"7af2f1eb684010ae1b67dfc96c2f423e8733b6146964fe5ecd0940086dbb9f5b3ac161","first_seen":"2026-01-03T02:24:59.959731Z","last_seen":"2026-08-15T22:48:33.552845Z","times_seen":13,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"degencity-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"degencity-casino-au.com/images/push_jamminjarsicon.webp","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.564Z","timestamp":1786834085564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degencity-casino-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 13:23:11 GMT","end":"Sun, 20 Sep 2026 14:21:41 GMT"},"fingerprint":{"sha1":"C8:79:0B:7F:F9:C8:E5:36:4C:E0:CB:60:7E:12:AB:C7:F6:FE:F6:06","sha256":"F4:D9:15:C6:70:51:A3:36:1D:DF:D8:BC:EC:C5:9B:85:26:2D:02:D3:67:B4:F0:A8:68:93:F9:9D:52:76:59:2D"}}},"request":{"raw":"GET /images/push_jamminjarsicon.webp HTTP/1.1\r\nHost: degencity-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://degencity-casino-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/webp\r\ndate: Sat, 15 Aug 2026 22:48:05 GMT\r\netag: \"6a7e2b52-1c932\"\r\nlast-modified: Thu, 13 Aug 2026 20:38:42 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nserver-timing: cfExtPri\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I2gcPSQ867gHKtcQ7YWgyNq9X6DWRfY8GuMaYE7Wx%2B2tGKs8pEWGgevuXhoCcbo1oMql%2BrBBWBTt7X5YM1eJpoIfP0f6S3BbNqzLXeTBvyDKTc67dAqfBptM3FBv6y9Jb86NbdSfODeiVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2bbbeaacac4712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 117042\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117042,"size_decoded":117996,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0ba1525977c4b742f9a522efbe642042","sha1":"5f2b98e1d3e87be7c06b864d444e7a83d5e34390","sha256":"d4e17d05cec264744367d7e46ed2dc7c4ef077c347f85bee5c5618677c62ba7e","sha512":"42b3bd18eed52f39b382ac322fe33a89075533c8fad2829fa9bd4689d8090d4748948172b168664f61c7438fee7c721ae227e01588f6415092116c11333cdbb2","ssdeep":"1536:CFyzG7OG4M+V5N671HA6EUrfjfnX2frcXHz6GDRVHCZLc6bsJ9oRPmi8/kwhLOIZ:CF2GByNM9A6tryfYD6GT79oRPGkwt3Zp","tlshash":"70b312126e275a4bef14aaf0cc55b21c69fac5746c230f6576348b2cc6db3d828c0f92","first_seen":"2026-05-03T19:41:35.611779Z","last_seen":"2026-08-15T22:48:33.554503Z","times_seen":4,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"degencity-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"degencity-casino-au.com/images/booongo_moremagicapple.webp","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.566Z","timestamp":1786834085566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degencity-casino-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 13:23:11 GMT","end":"Sun, 20 Sep 2026 14:21:41 GMT"},"fingerprint":{"sha1":"C8:79:0B:7F:F9:C8:E5:36:4C:E0:CB:60:7E:12:AB:C7:F6:FE:F6:06","sha256":"F4:D9:15:C6:70:51:A3:36:1D:DF:D8:BC:EC:C5:9B:85:26:2D:02:D3:67:B4:F0:A8:68:93:F9:9D:52:76:59:2D"}}},"request":{"raw":"GET /images/booongo_moremagicapple.webp HTTP/1.1\r\nHost: degencity-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://degencity-casino-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/webp\r\ndate: Sat, 15 Aug 2026 22:48:05 GMT\r\netag: \"6a7e2b52-67f8\"\r\nlast-modified: Thu, 13 Aug 2026 20:38:42 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nserver-timing: cfExtPri\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fkDHW3GFxVFlEBaYPjtV8NW9uoXydYk2lp0reQ7z2ilz%2BfRFojgquf3DUDHbebgw6BkUgCJz9gOkO98c8f9D7HFtB3F3jZM%2B8YugPX0V9Jmc7j2vl2O654RBoOfq4sSdT6M%2Fvm1xgna7lQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2bbbeaacac5712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26616\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26616,"size_decoded":27570,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a8e7b67f4ebb75add380ee17194c34ec","sha1":"a3e437b0d577029bc1f566315d6fd409046a2886","sha256":"cd3dfb52030ea693a9fc09c8385ed242f5ba4aee5d0d2057c9435cb75d4b9d33","sha512":"76214dc51b1d7a5e559354c1c031ff0b5ebc88e9655862212929217cc27a705ca2ce7370ed6626ce4872b6054b15249115fd09c0cb2f4e87fe66de5b92373892","ssdeep":"384:Nf8L67VVpC8+jDlTNdnJrimM26jvl1e8LKQ9pIOYsLM6r8tWAJdnmCgMl1aGTR:R8LeVTmpJdnSTjNLKQ9/YQb8tWInmL6","tlshash":"a9c2e1965954a0bff3e2103865f9739e692addf8708d903609e1f35080e8ea5db99b40","first_seen":"2025-06-27T17:55:53.374458Z","last_seen":"2026-08-15T22:48:33.555271Z","times_seen":11,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"degencity-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"degencity-casino-au.com/images/pragmatic_powerofmerlinmegaways.webp","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.568Z","timestamp":1786834085568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degencity-casino-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 13:23:11 GMT","end":"Sun, 20 Sep 2026 14:21:41 GMT"},"fingerprint":{"sha1":"C8:79:0B:7F:F9:C8:E5:36:4C:E0:CB:60:7E:12:AB:C7:F6:FE:F6:06","sha256":"F4:D9:15:C6:70:51:A3:36:1D:DF:D8:BC:EC:C5:9B:85:26:2D:02:D3:67:B4:F0:A8:68:93:F9:9D:52:76:59:2D"}}},"request":{"raw":"GET /images/pragmatic_powerofmerlinmegaways.webp HTTP/1.1\r\nHost: degencity-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://degencity-casino-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/webp\r\ndate: Sat, 15 Aug 2026 22:48:05 GMT\r\netag: \"6a7e2b52-8ce6\"\r\nlast-modified: Thu, 13 Aug 2026 20:38:42 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nserver-timing: cfExtPri\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GSkgNgELthCTkA4ihH2EYS0kVCZ7U8wFUCl%2FnG2lhMFltLQghRY2Z%2FrmSAY7J9%2BPB6qV9vw%2BPLibat%2FaBQhz3GWGrl7IeXnNJZtmVaPxAVr1t590mIspuZ8Pi1sr63l%2B1dUFEeHANsItIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2bbbeaacac6712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36070\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36070,"size_decoded":37030,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 220x294, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3c0a3157041121341789c64341833294","sha1":"5ff3c13b92cfc7454d3292ae24d1d8e4bcefd4d7","sha256":"7ab2379992cd404a81b1bc92f1de9121486454eb433d44247d1bf00df973a893","sha512":"71d5da6b2c731b8c8fab86fc3429381a6c70732079a7698c9f4265c38b08209102bd0bf5e31405c0ff74382e8ee6ae55cf7d7031352a3f5b69d4b2fdeba34374","ssdeep":"768:7+JIiq7j8MqjvcHw4iCh4iGZPDbgkIj01f5ay76k/M:7+1ggDcQ4Xh4FPDbgkIj01fv7P/M","tlshash":"caf2f1885e94d8e2db4f46582c752fa2c918ee12c992c05ba8e3237790e57c7fd27202","first_seen":"2026-05-03T19:41:35.591184Z","last_seen":"2026-08-15T22:48:33.556021Z","times_seen":4,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"degencity-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.545Z","timestamp":1786834085545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://degencity-casino-au.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 15 Aug 2026 22:48:05 GMT\r\ndate: Sat, 15 Aug 2026 22:48:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5781,"size_decoded":1313,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"be344a68e482fa42801d4cc947d1e839","sha1":"42df17aa9767dafcde068d8e9c7c0dde7a4262cf","sha256":"89a9f89b8ffed5d273f93dfeec2d7ea34bb3cc0e75dd1c3d7b5a00010cd8339d","sha512":"0a6438c8152135d14138dbbfa4c6f85cae9972239b83523366cd0e52943a324d1f852e5ccbcf28a12743985d016e97094e18f07e16b9e5737695d701271bb1df","ssdeep":"96:AOOXaRwOOXaOFZOhOOXaJOOXaeJc+udOOXau9NtOOxMaRwOOxMaOFZOhOOxMaJOR:fRv7M0OFupRS719Ocu6RB7W+Oju8","tlshash":"22c1bc91105be500e6472cc923cf7e2add4e21667494c5797ffe2ca8adeac220325b3d","first_seen":"2025-09-18T15:27:29.816889Z","last_seen":"2026-08-15T22:48:33.556776Z","times_seen":286,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":33,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"degencity-casino-au.com/img/banner.png","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.554Z","timestamp":1786834085554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degencity-casino-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 13:23:11 GMT","end":"Sun, 20 Sep 2026 14:21:41 GMT"},"fingerprint":{"sha1":"C8:79:0B:7F:F9:C8:E5:36:4C:E0:CB:60:7E:12:AB:C7:F6:FE:F6:06","sha256":"F4:D9:15:C6:70:51:A3:36:1D:DF:D8:BC:EC:C5:9B:85:26:2D:02:D3:67:B4:F0:A8:68:93:F9:9D:52:76:59:2D"}}},"request":{"raw":"GET /img/banner.png HTTP/1.1\r\nHost: degencity-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://degencity-casino-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncontent-type: image/png\r\ndate: Sat, 15 Aug 2026 22:48:05 GMT\r\netag: \"6a7e2b52-42eb8\"\r\nexpires: Sun, 15 Aug 2027 22:44:51 GMT\r\nlast-modified: Thu, 13 Aug 2026 20:38:42 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nserver-timing: cfExtPri\r\nage: 194\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kuwVcEdTuYoxJb0HqPesuvM%2BVGAvyi0Ja%2FRXYIYuMHu0xHsleILatDzBNO%2BNPVon3x1lNk%2BcLZ0wcaOUmKWtvQ1Yn2qQaZB4fkkcVz4OgJnoencqtEkrCWou8oh5dkhAwyFOJUt35hlvmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2bbbeaaaaba712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 274104\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":274104,"size_decoded":275104,"mime_type":"image/png","magic":"PNG image data, 600 x 260, 8-bit/color RGBA, non-interlaced","md5":"2be7e6f176079953b0536d6a35f060a3","sha1":"2477f00870219d07f790b56984c9b3055dcb88ed","sha256":"6169e74502d83fd274af90e2aeaf4adeb6370ef12076d426215ba161ffe20b26","sha512":"74e2550db9a87e71dae035e7fc27e18750617c59c8dcf655dfe9a6e418135d03f71f8c5989ddb241547e5532b1fec9b92b3e07f2ef70261e008fad572d4f7621","ssdeep":"6144:7KxPhC9QKasbwkC10zdskJJYvNj+T87TbnxTX5D9VVc9/HS:OhCWKDnCCzdNXGpTNTX933","tlshash":"b74423eff21d885fa20667a6fc57f19506c5dc3190610f87d4de6a2d822ac9ed4c2ac2","first_seen":"2026-05-03T19:41:35.557118Z","last_seen":"2026-08-15T22:48:33.557559Z","times_seen":4,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"degencity-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"degencity-casino-au.com/images/nolimitcity_mental.webp","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.565Z","timestamp":1786834085565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degencity-casino-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 13:23:11 GMT","end":"Sun, 20 Sep 2026 14:21:41 GMT"},"fingerprint":{"sha1":"C8:79:0B:7F:F9:C8:E5:36:4C:E0:CB:60:7E:12:AB:C7:F6:FE:F6:06","sha256":"F4:D9:15:C6:70:51:A3:36:1D:DF:D8:BC:EC:C5:9B:85:26:2D:02:D3:67:B4:F0:A8:68:93:F9:9D:52:76:59:2D"}}},"request":{"raw":"GET /images/nolimitcity_mental.webp HTTP/1.1\r\nHost: degencity-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://degencity-casino-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/webp\r\ndate: Sat, 15 Aug 2026 22:48:05 GMT\r\netag: \"6a7e2b52-6dc4\"\r\nlast-modified: Thu, 13 Aug 2026 20:38:42 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nserver-timing: cfExtPri\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wB1lDF2zwI47rO8e5lXlbCKqJw8o5%2BYmkVwXu2QttTHHBazafGlpyjgpXQX9dWvuXaI2q9y7Z1kGRmsH2KhwBPFbN9Z1ChsWi%2FKYKI2OS8LsLNnL7xqNfw0Fl4bU78ubkcSe0rtFyFms5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2bbbeaacac3712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 28100\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28100,"size_decoded":29052,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"56336c8c2c07277b151fd2dedeee5acd","sha1":"c49c06cdfe5c8273cbeb4c6a212f5f6ad162facf","sha256":"29b23fd0e456d11f144758db1a44c62eb3140570a4461ad9847747e2c91d0ac6","sha512":"5b09e5a059463ee14010a80ef2ee1c1862a5518be3f87f28fcbf8e802c06c3385538136985a62a33c2a6bfafe09d84c1a8dd81676f3400baa7308a7d8cec2a91","ssdeep":"768:zFYyYEPYi+r706sca2IIaUYqjKMeDlJ5eQKuifjublKRT:zFEEPp+icOI9YqmMq7guija8","tlshash":"30c2e1b44ca1629efaa7def481fe08e6a6e0343de095158532e243600604f5a79ab56b","first_seen":"2026-05-03T19:41:35.588336Z","last_seen":"2026-08-15T22:48:33.558318Z","times_seen":4,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"degencity-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.697Z","timestamp":1786834085697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://degencity-casino-au.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 14 Aug 2026 18:07:14 GMT\r\nexpires: Sat, 14 Aug 2027 18:07:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 103251\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-17T11:21:54.540714Z","times_seen":550379,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":17,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"degencity-casino-au.com/","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-15T22:48:05.050Z","timestamp":1786834085050,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degencity-casino-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 13:23:11 GMT","end":"Sun, 20 Sep 2026 14:21:41 GMT"},"fingerprint":{"sha1":"C8:79:0B:7F:F9:C8:E5:36:4C:E0:CB:60:7E:12:AB:C7:F6:FE:F6:06","sha256":"F4:D9:15:C6:70:51:A3:36:1D:DF:D8:BC:EC:C5:9B:85:26:2D:02:D3:67:B4:F0:A8:68:93:F9:9D:52:76:59:2D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: degencity-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 15 Aug 2026 22:48:05 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5AkfTYHtmGNAQL4flEGoaA7OWMKNgalOoRYji3xLOuFxkfAUEEKN5yW%2Bsq4GNnikldfaRtDLWKjzAQyEOqUjxUAWgoomlCKPdp%2Ft9e2b4Inxf0iJVaPP1z3dQsTaxmYK%2BfjfAfiAZqg42g%3D%3D\"}]}\r\nlast-modified: Thu, 13 Aug 2026 20:38:42 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a2bbbea7ac898be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71637,"size_decoded":20077,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (479)","md5":"6b3ec5c9b30ee939ec64f5378fd26a6d","sha1":"84cf10eb19d20615ace3fe7458cfb275828a5421","sha256":"ecbb4a8b542131faa6a30af2faf0afc53644e30e954e10a83306693efb109c80","sha512":"bbabceda18f02dc4067e2aca65ae413d9da59eef9738139deaefa1a37f68722d91ee7cd586ab51e4708cfd5cb0e8bf0a5826c32c1965d0e48cd654d87b106f69","ssdeep":"1536:4HXTLPppYSM740Pcgoowx+eKIIhffMRsr9IaGLq5NyRN3nBRgm78:43TLPYSM7Fmx+eWf9Ro78","tlshash":"aa631a07a646295e61039184bf792f89637d8023970eddd8faaf417cdfca4898433b9d","first_seen":"2026-08-15T22:45:25.886699Z","last_seen":"2026-08-15T22:48:33.559867Z","times_seen":2,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":115,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"degencity-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"degencity-casino-au.com/images/pragmatic_bigbassholdspinner.webp","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.562Z","timestamp":1786834085562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degencity-casino-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 13:23:11 GMT","end":"Sun, 20 Sep 2026 14:21:41 GMT"},"fingerprint":{"sha1":"C8:79:0B:7F:F9:C8:E5:36:4C:E0:CB:60:7E:12:AB:C7:F6:FE:F6:06","sha256":"F4:D9:15:C6:70:51:A3:36:1D:DF:D8:BC:EC:C5:9B:85:26:2D:02:D3:67:B4:F0:A8:68:93:F9:9D:52:76:59:2D"}}},"request":{"raw":"GET /images/pragmatic_bigbassholdspinner.webp HTTP/1.1\r\nHost: degencity-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://degencity-casino-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-type: image/webp\r\ndate: Sat, 15 Aug 2026 22:48:05 GMT\r\netag: \"6a7e2b52-9020\"\r\nlast-modified: Thu, 13 Aug 2026 20:38:42 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nserver-timing: cfExtPri\r\nage: 194\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fz3EooMWiMjoLcc2XULO1bLbN0h6qex6aFLwB6cpjQpv0EGORNi9C%2B1u8BBwnw4z%2FmYh5EuQAdwwQ9wMD7%2FFVmvSqpWjFJLBZd0AFa0RYdpzKbVaR%2BTmN4fSGr6mEXE4dQrpEvFJMGnIng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2bbbeaabac1712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36896\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36896,"size_decoded":37852,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0b260d84651c0ae9632cd1076ae092b7","sha1":"658f763d370afc9658f0a357775f71637345d0c0","sha256":"941e3a7f5b3ae072440f2c57de7ece0462ce104dde5a27a8e004279c6569360b","sha512":"022abf724475d6310d62e75e94fa1e8858dcacc39f02844891a7573f9eb43fdac01d3e5dd9558be4598f7f4792c7cb997834470b3fcacb162677989c0f528283","ssdeep":"768:mFYytqeUNKgjvPUMuPeg92D+/YIduLU0cAOhAuRAo:mF0LX7vXa/YId10WDRl","tlshash":"56f2f23f198b068cda504c74359e4f2a037ffb12d671a5356e54cabee2017869b4322f","first_seen":"2026-05-03T19:41:35.609075Z","last_seen":"2026-08-15T22:48:33.561409Z","times_seen":5,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"degencity-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"degencity-casino-au.com/images/ask.svg","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.665Z","timestamp":1786834085665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degencity-casino-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 13:23:11 GMT","end":"Sun, 20 Sep 2026 14:21:41 GMT"},"fingerprint":{"sha1":"C8:79:0B:7F:F9:C8:E5:36:4C:E0:CB:60:7E:12:AB:C7:F6:FE:F6:06","sha256":"F4:D9:15:C6:70:51:A3:36:1D:DF:D8:BC:EC:C5:9B:85:26:2D:02:D3:67:B4:F0:A8:68:93:F9:9D:52:76:59:2D"}}},"request":{"raw":"GET /images/ask.svg HTTP/1.1\r\nHost: degencity-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://degencity-casino-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=4,i\r\ncache-control: max-age=31536000\r\ncontent-type: image/svg+xml\r\ndate: Sat, 15 Aug 2026 22:48:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 15 Aug 2027 22:44:51 GMT\r\nlast-modified: Thu, 13 Aug 2026 20:38:42 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6QdfzgdPcDXShethgbBkkFhIt101FCnX9Rc6LOElvRY3QlqG%2BLK2btneX0H1AHCLCdOjkiKg6UvAi9lfUzE8GQdYLX78O4jM4VwxNpsOU1GrZMcwR%2F3Pr9IFJop2DisWGLj%2BUA9HxVD%2FRg%3D%3D\"}]}\r\nage: 194\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a7e2b52-2ab\"\r\ncf-ray: a2bbbeab6ace712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":683,"size_decoded":1459,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47d9d90563d126c4dc71e793d26c4424","sha1":"f36a8657c1138d0697ce3fd96bb499ba7d9062ed","sha256":"40463243aa1d84a6dd0dcf78f0d3c44059d31fe0d4751064e07b726069061aa5","sha512":"7f5ad19d38e75f158a35336f15df496e4d9005c0a259f5e71568ab939e3710ab6301dc9df73280c4d4cbb7d0e106e4957786dac585d5c335afd0e06519fdd1de","ssdeep":"","tlshash":"5f01949a0354ca3e42d8c330b0b1828a3e38b0f3c78418c4e0911aa78015480389beac","first_seen":"2026-05-03T19:41:35.597676Z","last_seen":"2026-08-15T22:48:33.562197Z","times_seen":3,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"degencity-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.698Z","timestamp":1786834085698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://degencity-casino-au.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 14 Aug 2026 18:07:14 GMT\r\nexpires: Sat, 14 Aug 2027 18:07:14 GMT\r\ncache-control: public, max-age=31536000\r\nage: 103251\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-17T11:21:54.540714Z","times_seen":550379,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":20,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"degencity-casino-au.com/favicon.ico","fqdn":"degencity-casino-au.com","domain":"degencity-casino-au.com","tld":"com"},"ip":{"addr":"172.67.201.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://degencity-casino-au.com/","date":"2026-08-15T22:48:05.775Z","timestamp":1786834085775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"degencity-casino-au.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 13:23:11 GMT","end":"Sun, 20 Sep 2026 14:21:41 GMT"},"fingerprint":{"sha1":"C8:79:0B:7F:F9:C8:E5:36:4C:E0:CB:60:7E:12:AB:C7:F6:FE:F6:06","sha256":"F4:D9:15:C6:70:51:A3:36:1D:DF:D8:BC:EC:C5:9B:85:26:2D:02:D3:67:B4:F0:A8:68:93:F9:9D:52:76:59:2D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: degencity-casino-au.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://degencity-casino-au.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=6,i=?0\r\ncache-control: max-age=31536000\r\ncontent-type: image/x-icon\r\ndate: Sat, 15 Aug 2026 22:48:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 15 Aug 2027 22:44:51 GMT\r\nlast-modified: Thu, 13 Aug 2026 20:38:42 GMT\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JM%2Ff9Tx%2FJp5MRTcaJL0JKWdGABgjwR%2BF9rmhw8OeiSrJpkL1JJ4Lqy4gjsqm32pXX5MTbZ%2FgpnA0P3FLDZ%2BkW7tVbP%2BvKMEcMb13ckdEZ61a05mpgLbPDXqA923lKkmeAUeNQjMf8WTeJw%3D%3D\"}]}\r\nage: 194\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a7e2b52-3c2e\"\r\ncf-ray: a2bbbeac1ae6712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":8814,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"e56dec8e5c4b056180f7e123a14852ee","sha1":"9875779930ac2515cea717699ad33bc2d9b94c38","sha256":"22952f4d2f1139f6b759ff6d6436673b03a005c2e665f281a911b1c33f6ddb80","sha512":"69212a3f8f19178eaa6580eeb40d2e090052e78ce11f5793449bf69baa7a087ef35cecbef1a00458318811a380735b1f566eda0610c71daeffeb443b7c6c66aa","ssdeep":"192:G2NywHWLXylPqDZl2zSyULxaF+ZlZMCNoBYdI/mY:GCHWLQaKcxaF+Z8CUYdI/mY","tlshash":"fe625aa07f794ea6c08b12ba1c597bfb2e151416ecb84643d9803d637ce912d8e890cc","first_seen":"2026-06-27T11:46:22.376462Z","last_seen":"2026-08-15T22:48:33.562962Z","times_seen":6,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-15","alert":"Sinkholed","trigger":"degencity-casino-au.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
