{"report_id":"d4a91cad-5b31-4adc-a112-fb121c78688b","version":6,"status":"done","tags":[],"date":"2025-08-25T02:15:07Z","url":{"schema":"http","addr":"kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":0,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"https","addr":"kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"title":"Kent Casino"},"submit":{"url":{"schema":"http","addr":"kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":0,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-29T02:15:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-25T02:14:31Z","timestamp":1756088071,"ip_dst":{"addr":"172.18.0.8","port":35010,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 62","source":"{\"timestamp\":\"2025-08-25T02:14:31.702016+0000\",\"flow_id\":1595600869504305,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"212.11.64.170\",\"src_port\":443,\"dest_ip\":\"172.18.0.8\",\"dest_port\":35010,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400061,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 62\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2025-08-25T02:14:31.636209+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"api.kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"node-sber1-az3-20.jivosite.com","ip":{"addr":"178.170.197.234","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":2965974,"first_seen":"2023-08-15T13:44:02Z","last_seen":"2025-08-20T07:56:32.108997Z","alert_count":0,"request_count":1,"received_data":618,"sent_data":505,"comment":"","tags":null,"fingerprints":null},{"fqdn":"telemetry.jivosite.com","ip":{"addr":"94.139.253.159","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":346139,"first_seen":"2015-07-15T08:41:42Z","last_seen":"2025-08-23T12:44:52.118465Z","alert_count":0,"request_count":1,"received_data":111,"sent_data":465,"comment":"","tags":null,"fingerprints":null},{"fqdn":"flagcdn.com","ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":30920,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2025-08-18T07:50:17.225468Z","alert_count":0,"request_count":249,"received_data":370863,"sent_data":108066,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jivo.ru","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2019-03-27","domain_rank":437705,"first_seen":"2022-03-30T15:10:58Z","last_seen":"2025-08-23T02:35:44.556756Z","alert_count":0,"request_count":10,"received_data":1768128,"sent_data":4626,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kentcasin355.com","ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"domain_registered":"2025-08-19","domain_rank":0,"first_seen":"2025-08-24T01:36:44.487586Z","last_seen":"2025-08-24T01:36:44.487586Z","alert_count":100,"request_count":100,"received_data":16002952,"sent_data":51542,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"agstatic.com","ip":{"addr":"54.240.174.26","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-12-14","domain_rank":408512,"first_seen":"2020-07-31T02:50:23Z","last_seen":"2025-08-24T01:12:40.843391Z","alert_count":0,"request_count":3,"received_data":11848,"sent_data":1329,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"api.kentcasin355.com","ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-08-19","domain_rank":0,"first_seen":"2025-08-24T01:36:44.489132Z","last_seen":"2025-08-24T01:36:44.489132Z","alert_count":16,"request_count":16,"received_data":166722,"sent_data":9060,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"vi-sber1-20.jivosite.com","ip":{"addr":"37.18.110.91","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":2853955,"first_seen":"2023-07-29T23:17:29Z","last_seen":"2025-08-21T09:45:23.572447Z","alert_count":0,"request_count":1,"received_data":202,"sent_data":591,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-25T02:14:31Z","timestamp":1756088071,"ip_dst":{"addr":"172.18.0.8","port":35010,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 62","source":"{\"timestamp\":\"2025-08-25T02:14:31.702016+0000\",\"flow_id\":1595600869504305,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"212.11.64.170\",\"src_port\":443,\"dest_ip\":\"172.18.0.8\",\"dest_port\":35010,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400061,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 62\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2025-08-25T02:14:31.636209+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"code.jivo.ru/js/c775408/locale-en-US-json.js","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c212727a7bacb453945e1ab7025234a","sha1":"5ff39073a6077374bb26f1f31b2428b7c0c8bb6f","sha256":"b8f45519424c6fcd31acb1d568c259fcb7297e38246ab98529e31d5d1490dde4","sha512":"8226cbb571eb34c684a6ae6b13056a7b968eb12371a25ea0a05861265b4019b0ec1170d0a2dd4a42495765a2b9e7e6a3c65aa8e86b93ba2920af050de25a058b","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8Bi9FLeRJK:C7H7ObdFkOIphZ8w9FC7K","tlshash":"fd22d71ee7017f360fa613c3744f7b53b6a480e592646cb5d88c826953b9bca721778c","size":10507,"data":"","first_seen":"2025-08-07T16:51:42.115213Z","last_seen":"2025-10-09T00:19:26.491677Z","times_seen":878,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"0448413eb22bf4901b27cf364ea01a83","sha1":"9d09826000b83bbddbe2a32c67dc7cdf77751bd3","sha256":"4abc7748aabbd4b8752f553178b7b70749371b8fcee34ec0ec169b3ec779b174","sha512":"d6fe6dde0126bc4b94c0130f97394b67f087fe2a52f713153369fa21b5d08a05a7e3b32f7e29e208422983c340845ac1036b67787cc8b286900b485a49a809b8","ssdeep":"","tlshash":"5590028710460926a1e9500257133300209304a90d419c0055060411362430f82155ca","size":43,"data":"","first_seen":"2024-12-23T01:16:29.472085Z","last_seen":"2026-06-07T02:17:55.832593Z","times_seen":433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/runtime.bdf4cbc3730af2c5.js","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"a38ffe42ea3ebff727160bdeb1aa9684","sha1":"75a67a4fed51cab9d33cb27dfec21e4d306ee69c","sha256":"4697ad81f6a668f6d141ced1580927f898f9ca3d88b6792d301e332a1bf7b2f6","sha512":"d6cbb34a065b272b40850c16b1be4b3adc500129819733e6251a6e0bb277db58d309dffbea4517964b05bdb0a7dadd7a60c3c8610f1ccc28ff133f082c2fca09","ssdeep":"","tlshash":"167118742718edb226f100c5283dc984f21c6836096bd8f1ab2bcc797165ad20d36ff2","size":3692,"data":"","first_seen":"2025-08-05T17:20:37.537569Z","last_seen":"2025-10-20T13:59:14.988751Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/polyfills.522796e73cfc2d4f.js","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"c32c895ba1c11332ec0886604c9067fc","sha1":"ada1267488d0c32328e15de3aa80f27d8b5e34b2","sha256":"c251ed452280ed17db7dc496ad874e795263d42312f745e2edba4fa8a0af4e95","sha512":"72d8a3164396f07c0bcad29e3022968975ace373e6ea63eb5b15b93bfe34862c62fc8d2ecaddb556d1a581fc52cecba5795b8046b7f5236526063c84ca76b5ea","ssdeep":"768:xFhDiDOx1jogSxDqlnbhH4/bwEbVuHD9QAi/n/OmF/bcVxvaDv9AUIj+5oY4+m3X:/hqR65ERxSvFq5M+mQR1z9tiTP1","tlshash":"86f219da7392b0b287f654f5c57f8007e63634a5384c88d8f14d99ea383714aa166f3e","size":37124,"data":"","first_seen":"2025-08-05T17:20:37.376571Z","last_seen":"2026-05-24T00:49:22.724572Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-07-28T15:58:14.930244Z","times_seen":343020,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/main.d27349ae8cf3dc34.js","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"a326effc33c1bdba26faa444487424d4","sha1":"6a9d93d35b5e8ef6d5dad11ac2ee4b227109148f","sha256":"f6839761bedcc56f99115960ca9ac134f9bfe54f216d00d33e234b5c4d62ecb9","sha512":"85eb66074e271334486ee534e7a835286e9968baa0c67be166b59887b37475b8062fb91850f740b398ab89d9545781388b436a610e6c88dd3e71d1680fb53e77","ssdeep":"49152:c7uPoEFQD3027cFUSomn/xbq4CE6czQzXWWAFECywB6eJLhXL64goLpN3cAENdL6:BcvS","tlshash":"75b56ea57322f03627d78496a07a0586b33c6448eb03949cf3ac8cdc96dde9a617773d","size":2345481,"data":"","first_seen":"2025-08-05T17:21:03.938622Z","last_seen":"2025-08-29T16:05:26.899404Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e161e1ea1bd4ab5573174b8e99af5cd0","sha1":"0e52870820c79a796e4dbf874c6dcce25cc62ec0","sha256":"f5d641bc17e7bbf332d6c0fe4dacd2eb388c2e6fa75d0a0ac5a1f6ee4b3b9ab0","sha512":"f9b188abe82594b875def325a8b4689271645568ae85ce4adb69a05ee627b87d4918043d241aa7716709ca1daadc243b428f0bea7796786e7de542a8b1383d9f","ssdeep":"24576:UZc+CRaJl09dqNykgy00HpesgCHv+Ks67veMFqxJOuz6CEzlS1m:OcT9UNykgy00HpxgA06LeMkxJOuz6tzZ","tlshash":"0d455bd571d1f4a907e355e9943f2005f23a2c2a7409e064fabcdcc6aa6658e6237f3c","size":1178168,"data":"","first_seen":"2025-08-20T15:19:29.200734Z","last_seen":"2025-09-01T11:30:14.355622Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/widget/ESt1iDtMoi","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb67ace13289d0a81d036d9fef5831a5","sha1":"899370b37be05ac62acc0eaea3be85094ac53de0","sha256":"f86b7ffc0af355910158533d9fbf988232bd7656e53450579a53ffffe6d029c8","sha512":"050d81dd86043d98d3974bd5ddb63c8aa6bab6464ea5ca7045d77b01fdbc383d0780736a98e86f87e4000012de4a406749c741ddfd0d29719e1c6a01ff6a42b7","ssdeep":"384:boUJJkQymrml40+rANbl0q09TmF0q6QlEeJBz8U08waxceb4:6lviAfJMKv8UDxceb4","tlshash":"04822b6e7959b93743b208b5a16f6209b33549ebd404c920a405e94c7db8edf813fef8","size":18073,"data":"","first_seen":"2025-08-20T12:20:50.31739Z","last_seen":"2026-01-03T17:18:00.984344Z","times_seen":187,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/js/bundle.js?rand=1755689377","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"36ed3928d4677835a0fa15a5fa268db8","sha1":"c56d62cb1533751eb3e4b837f84f13c29bbf9b0a","sha256":"adce61b05fe4330bed9178b616ff95b5703b15c3157fe7a0cd4e22659f55d911","sha512":"5593b617acde340647b90a0bc5579a7ce673a6121003eb4fbc30c2fc44127eb28b2d689f0cb54c90f1722454d4cdfad1fb58a49611feb7038d13f39dff55f122","ssdeep":"24576:BVSwS96xbB0ljHeY8yuWoBm+QsVduhEyuD1eb4d5oVIUfWuAbP36IHEdbDORs:zSG0lj+Y8yuWoB7QaQFu5eb4d5ouUfWy","tlshash":"58454ac5b1d1f06502d355e6a43b2009f23a2c5e3809b064f7bccddbea6659e6263f39","size":1204814,"data":"","first_seen":"2025-08-20T15:19:29.169219Z","last_seen":"2025-09-01T11:30:14.351016Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/js/c775408/chatcontainer.js","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"121a81b58b2fe1381353fa74b29bf37f","sha1":"f2399f81e037e43870ebacaec05ea70ea24fcd25","sha256":"78b55aa83342da20d2ca142f652c4ea9022890e8380bc3b89293c4ecab701ac6","sha512":"d721284ab22598591d4619d222da3d8340aed2a41f977c273a0241e854ef2674d7a1ea9eb7930b89b5ea653b5351c81ba38ee6cee1dc3f9587ee9dda93ff9a22","ssdeep":"3072:ifHy9dHe/o7gMv/dDYfOLxIQ3i49XgXDeRoOw3Odayf81+9FP:4y9hHdDYfMxIQn9Dw3Odae8k9FP","tlshash":"6c542ac472d0f8a942e741da947f2101f2292c2df409b958f3f8dcd9ab5598e2266f3d","size":298448,"data":"","first_seen":"2025-08-20T19:14:17.38903Z","last_seen":"2025-09-01T11:30:14.326201Z","times_seen":83,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"flagcdn.com/24x18/af.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/af.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 631\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-277\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1628134\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W0K3DHzyyv9qYA%2BIBRuSZZ3yrB%2F%2BoGTUk7N%2Bm17rRAGqBt0xBDcGdMv7PrhYwB9txgcbgLk2sIOXZbUp4LsZafXHHA1MKOb6bg%3D%3D\"}]}\r\ncf-ray: 974793a1ac740b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":631,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"336f878ff5520c25142944fb576e2519","sha1":"2bacd60286ccdbf14d3671c4f0f1542a6ae2f3eb","sha256":"2f525756b4e434e0ed0507267b53105da3d2519ba697834929b7069c563c3d29","sha512":"0595d5a636743881f626d4c1d08e8084061b55eeee51c954d384911537ed975ff7347c44e9fb65696042eb1a9d019a4b71fc90c71a48c8a38641235533d21128","ssdeep":"","tlshash":"79f068b9b2e8dd91558a19770fa7510a8b903c3bc973121c52741e3105ddeb883842c2","first_seen":"2025-03-08T14:29:59.861831Z","last_seen":"2026-05-24T00:49:23.423392Z","times_seen":122,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":119,"dns":45,"connect":1,"send":0,"wait":10,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/hm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/hm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 809\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-329\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2099417\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sQQ8XlwXrrJI6fQv1PYKRddDtlr6%2BvFyJr4mco%2FnJqDdrKT%2BR%2F4P8fX8txEYsYRXL4BMNkGtR4gXGCDwcDq1w%2B%2FQnzhQWLwXtA%3D%3D\"}]}\r\ncf-ray: 974793a75ea80b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":809,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"2f955c4d01185ecb885bfacba667d19f","sha1":"04ac20ded46e706ef82d8b4c63dbb18f09aa4599","sha256":"efc8652635ec1419d6087101d524c6048b19a55ecfb2e9574d4a756759751102","sha512":"7e705660c482cd90d3b3c2e7d8343a984a992026c38b043e73ddf1b88cc0d854270ba5f092206d81d96b0b5e73675cc18251ecfdf1f14ed9c14e54900485cb61","ssdeep":"","tlshash":"b801c5eda709acf5fa80f43793532060e95440737403e008a1e8ad84a142214e6c7626","first_seen":"2025-03-08T14:29:59.906314Z","last_seen":"2026-05-24T00:49:22.939659Z","times_seen":112,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/hn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/hn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 809\r\ncf-ray: 974793a79ebc0b61-OSL\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-329\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1975725\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=I0whoi4QcLyi%2FDJCEknRGNL1skoWgDnaKGxhL5UJv%2BMVD5%2BBwPhvapMa7p1MeEMo4xEN8rYRKoEHNr6fyzstmbmQkVmdX7mCAOvRxvF6SmD%2B%2F%2Br4YGZYcwcekh7eYQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=901\u0026min_rtt=410\u0026rtt_var=90\u0026sent=324\u0026recv=172\u0026lost=0\u0026retrans=0\u0026sent_bytes=104402\u0026recv_bytes=8577\u0026delivery_rate=20299065\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=55fad1da16cca10b\u0026ts=1031\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":809,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"db7cdb64ed62773a546a14652402dc94","sha1":"27f1782269383f81ac2729cf392ad6ef5cdb5829","sha256":"6e12080317edf8dbd2241884a069e058e60047e8a697f09beeccdf44bb29d314","sha512":"90a01f844cbc822edd6f1eb7a15a3d158162671dd2786ec0ea3859621f9a4e933975f1ac408d609b6cafed5c09f17341286ad1efa26117d9f73769f344bb1797","ssdeep":"","tlshash":"7b01811591c72aec0fe8b672c8ba00c1f87601971844c3968cd17f5bd9b292c59443da","first_seen":"2025-03-08T14:29:59.883175Z","last_seen":"2026-05-24T00:49:23.139536Z","times_seen":115,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/jp.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/jp.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 562\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-232\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1712358\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BjTe5odrf2YyzeJPVkpzetOa8q5kLWweeFq347uTbmPG%2B8M2%2B0mXcvrvamz0HxNtdKWkHsQ6KCfvIJW92dqJ4IojRh1kgC6MKg%3D%3D\"}]}\r\ncf-ray: 974793a83ef40b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":562,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"459b255604318bb53e5b4214cab10b98","sha1":"4a54a0032b5d0f7179feb22dc5c63432906c808d","sha256":"c050fe7db556a759cdbdd3cf0f814aeaf5120bbedfb1b489cf64bca27c3c82be","sha512":"af127349f3402cb8f48cfcc9be369ee5e7b1df599815db4f412a5886b49901a5d9cb581bd71d7190907bc8d3710db8ec9080116fe1f84571102c9f51645baf35","ssdeep":"","tlshash":"bff096f26c042f0c94f7d2b18141ec827f59c2d9a17c31a32841fe0215b818830f0645","first_seen":"2025-03-08T14:29:59.876298Z","last_seen":"2026-07-24T22:01:00.683156Z","times_seen":177,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/us.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/us.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 890\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-37a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1709780\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2BWgALLG9U9%2F%2ByHkXOAu4gfGeRoMS7fNyOH8686HjXfEmmqVBpCGZgNCSdkbD5vuVSwfuI0yPRgNla9Att6gsmJASHDY05PkUw%3D%3D\"}]}\r\ncf-ray: 974793ae09850b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"555c2f910aaf9eaf2fc1f819f6086617","sha1":"cf593b6ec1d2d81ba108c54308a36b6efb291cbf","sha256":"4d47f45af3fa53dcb923a02649229ab886d07544cc97ed5fcc3416fd85d3834e","sha512":"8493ad9a843c557eebae847b17b4bf2db7607ea7bf00b01d3e01e9e717b226d8e00b5838e4e84e6e83f74289b800535cc22eff62715886929e17fd5472c16785","ssdeep":"","tlshash":"c51196d1ebc87499ff1934c28263f23cc2209bd4977568622dc3e813167364edb05e9a","first_seen":"2025-07-02T10:58:57.988466Z","last_seen":"2026-07-28T08:27:13.790204Z","times_seen":521,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/css/c775408/widget.css","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:38.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /css/c775408/widget.css HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 Aug 2025 02:14:38 GMT\r\ncontent-type: text/css\r\ncontent-length: 18447\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"68a58209-480f\"\r\nexpires: Sat, 30 Aug 2025 11:30:17 GMT\r\nlast-modified: Wed, 20 Aug 2025 08:06:33 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-08-20T11:30:17+00:00\r\nx-node: m9-up-gc10\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113923,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9d3703823f1b24818d48934739c248b8","sha1":"50d5ef6e339a699688994b3ce4bcd2cafae682b8","sha256":"b41f916c2cbbcbc05ce9eca4e34863fbb74f3f278e77f7da73f43af1f6df7f6a","sha512":"da28d5cf3fd5a34c0a09d2742ac50894d14968f033e154e9ed24937d2c6c35bca2614e8c9aa0e3220fcf6f079e71a6007992fcd5524f2d0780b6bd0356b0583f","ssdeep":"1536:SL5vTKGyO6G6PrhmDuzyP2I2CjSQpaye6A69+KlI47UE6RFkPQeiLOcO3DX6jck6:MS8UdM2XDMOshR","tlshash":"11b3d866ead2953ce91e541ac8c5aa3ca53de502cf330daff344f3e147c66e21276909","first_seen":"2025-08-20T15:19:29.028965Z","last_seen":"2025-09-01T11:30:14.294092Z","times_seen":178,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/banners/kent_header_BG.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/banners/kent_header_BG.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 104482\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-19822\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104482,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"79bd6af17c741d3d688f7bd73a27c75c","sha1":"87fe1027c3ea410affee53c63352e2f0f506d3c3","sha256":"936047322d7ab882f0fd49ee7ed6a0845431a59abb7bcac5acab3139a7cd16bf","sha512":"0897e00559a906628f3945358ab3e4d99118d53570739438eee030bfe634413753960bda965c87dec40aa7bf1409ee0640c2f779614b20a9b8a5030db4cb4b50","ssdeep":"1536:98t/z1rfx+1ifrMlls3i7erkhFpt/ABfh5HozbvjybLnmo22v5fVo1V6tavJVWkD:utZjx6iU7hDZAvtUHEjF5i1V6tQWkNsE","tlshash":"d3a3010a4b1d12d6c8589e2fce2f65b4389011f6a6f783863762d7e450693ccf41af5e","first_seen":"2025-07-08T21:30:00.251385Z","last_seen":"2026-05-24T00:49:22.754371Z","times_seen":82,"resource_available":false,"data":null}},"time_used":1003,"timings":{"blocked":887,"dns":0,"connect":0,"send":0,"wait":77,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/io.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/io.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 1059\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-423\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697706\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vCJULJ3Nb75WST%2Fref2xJnqMZg%2FffapABB%2Fapl3kl95yQqHoM8hER%2B%2FnWwgiCuwKiW44RloB7PxWMrKslEU47um5bRUOFbD%2FRQ%3D%3D\"}]}\r\ncf-ray: 974793a1bc9b0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1059,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6c47330f6638c00a13fb5a6eceed933b","sha1":"61b9b3302976d22388ff99604683d04fb8734dbe","sha256":"f4417fa7fab2a1d9dca60604adcdb8f4a7b55f1f9a5de8e4b0e0a2ed779f8041","sha512":"fb279747a8bd192bd7be8cab56b99c5d4313eb241085883bce84d8027d2378c0db59a8f7f6da90a933b643fcf40e32bc64d4f8fd1cc4431b94a27345c98240e9","ssdeep":"","tlshash":"f211dcb742c43e81712bf2110b7b545df703b57644244d12940f3db559d38225b3a91f","first_seen":"2025-07-02T10:58:58.245526Z","last_seen":"2026-05-24T00:49:23.077066Z","times_seen":109,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/lv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/lv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 521\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-209\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1961912\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FA8qyjUDQ3PqWu09ojGi397RxXCN1wARiFX1Aasjrq28B%2BJv67%2FPOePTw6wm2rZ6Tr2Rmt5RVAncPZ1iIH5SArO8sYbLeydJ4g%3D%3D\"}]}\r\ncf-ray: 974793a8bf1f0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":521,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"c37f7269d562514c0ca74352e0940d0b","sha1":"9a4ab27acd3d1dfd659b698dc3d41e300b3b8a5d","sha256":"21104c4670aa6a345e43aca28b251a9687ef8bf364fc6594d1006d345f56705d","sha512":"48d9fe4982056e46ff4253e7d26d72a0bcc6ee3a57e4883ae71181e248dc76b413470e45492dd14643d5579b72775780e5bccdaa48492e3a9e5277cb819f6064","ssdeep":"","tlshash":"38f020e0e3e10e34e8bec760050960009e15a0c4862e93cf2da8a5389522011a2b2a15","first_seen":"2025-03-08T14:29:59.799342Z","last_seen":"2026-07-24T22:01:00.711297Z","times_seen":132,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mp.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/mp.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 968\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-3c8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1079734\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VEmK4%2Fz5ViAZI4Mmbkynt0JLoli6Wr1doGmxIocZaqZ1ZPZgxUseru9wPw4eIlLRe5TBMYeHqobxFtuXeVRNEnYhhqdOybdwtA%3D%3D\"}]}\r\ncf-ray: 974793aaf8150b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":968,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"727029e70bf85d6f956c713653b78d4c","sha1":"d256b6741e0e333d868f8368af3f8ab7729fd151","sha256":"8cba52048b185ff0184285e84a87d5342303a7d4a08b7591b003e24a26a4e3be","sha512":"a660912d565dc98f722fdaacd359f7a096ad77d8f12c6cea2741220bbfb2d55e02899171005d265dfbdb48a66c34cde330c27e12ad0e5a1e4cf0a057063e9992","ssdeep":"","tlshash":"0b11c82e1187560ca77336f088e41826cb7d0c5911a4bdd95810d5daa9cf21570e5b79","first_seen":"2025-03-08T14:29:59.859794Z","last_seen":"2026-05-24T00:49:23.112247Z","times_seen":112,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/sk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 674\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2a2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1141706\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z80lL2vUprsOV83kyUOz4OnDHKBox8AFHsLnkrwtgoQCxTIkYaBDhvpJlMwBqKs2p42oJ2ZkfeH%2BnEmTQcb9BvOjED4F6oteeQ%3D%3D\"}]}\r\ncf-ray: 974793ac88cd0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":674,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8aae00475abff798c675e3a3ad932e8f","sha1":"74bd87fdd8e56785a43adeca39d736e423486c44","sha256":"ccc70fc124bb0e3aeee2e8213c44ff47cb6df46a6b9ca1f81da321b32cf59eb0","sha512":"fdccc9a162be0a86ccafe701f34753e6a9891bbf980895da795574d9ff4b9723a686084b4dc0cf32eb02785f6d71e4c6b44c51a771052f511cf9d5d0f0c00bef","ssdeep":"","tlshash":"a70123f2cd47ee48e80ac95f522b07c439b087e14c1db01a3a53cdb50ee78995182d2a","first_seen":"2025-03-08T14:29:59.893422Z","last_seen":"2026-07-24T22:01:00.734185Z","times_seen":132,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ss.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ss.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 725\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2d5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1901454\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=09rDuTGMoeYTJM%2FbtVCKCD%2FZXoacudm4LoyjMmdGWaUuxkYWqF7sa0eFxWRlv4q8dg9YrPEmDJ9qb9DH7xQlHlVLd0lUOHfolA%3D%3D\"}]}\r\ncf-ray: 974793ace8ee0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":725,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"efc06cae0511f471032b514ff11ce90f","sha1":"3c4a7f30017f2246c7a6e3bc7328123fa579ed97","sha256":"9c8fc73d5142d16cf930510218354baeb9ea40f976eb20a02e25ea02398d6f23","sha512":"87cb923423061e799713631470169ecef2ed9f1bd8f7547e2aba470bfd970ca87e5af266791d4e1c583e30de88937f463cc622d71bec1994edbc43bfc1974eb7","ssdeep":"","tlshash":"870199f353fa1ee549c5b22a84540d099c3760d575dc01458a6f81312db61903bf6806","first_seen":"2025-07-02T10:58:58.127587Z","last_seen":"2026-05-24T00:49:22.638076Z","times_seen":109,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/bg_left.bf3268148a5a82a8.png","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /bg_left.bf3268148a5a82a8.png HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/styles.297578458c20fb04.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 67148\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-1064c\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67148,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"16d4a751bbe2010d302f4a020ebc784a","sha1":"a948fc682bcfe8b064c23c66c600658022cde760","sha256":"42e09559f7aa6719d88efcc4425f265e4d68f2b41eb22a7ca490866ac9aeaae6","sha512":"3197a206fb83509333f8f43060f7a743307de98c722422512e54f610faf4d13f782258ac4b8cac00d3d5ec8df673887c9c8b03a245546f5c80bee3d6c4a43fce","ssdeep":"1536:Mh5TxcQUoMGUjIYmRh1+n+Nvd5GPcCu+2bQWtISgrJqE/HuySn7nxaE5m:MhmxGNYmsn+pGclbntIl9qWSnje","tlshash":"f16302a92042e456b71f3d16dba861431393c84976d2ea9ddc5093ea8057beee432fc8","first_seen":"2025-07-04T05:14:00.889341Z","last_seen":"2026-05-24T00:49:22.93248Z","times_seen":77,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/cv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 768\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-300\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1480040\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8BTDT%2BHtZePM%2FwdojfRCjUfnYg0tRAKI%2Fc9l5IISeHGcepsxJqpq%2B4%2BTZaXL4KBJnLCY8%2BCP4HJGfgHTG%2FplZI7dYmFUb%2Bb7kw%3D%3D\"}]}\r\ncf-ray: 974793a1dcac0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":768,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"e64c7cb0b8a6c497b44a4282e2c87267","sha1":"f7bb8415436f45b9274890012b06703d65e7ed71","sha256":"5d7ed95cb00ae16cbe7e43b522b88745ac948180f19819ee11f4e01d1a584641","sha512":"c59f912d2f614833b51a1f8b81ed15125b9d702be849f64d5b3c6b5cf1751b9fbf34286c23a0d01accb802a581603421b1dacc61e6788822ddbaadfa609ab739","ssdeep":"","tlshash":"0201c5e50ee90898dbfe3623f4ae4ffdc8240d182720320b04bdc4790949128314ea8c","first_seen":"2025-07-02T10:58:57.914925Z","last_seen":"2026-05-24T00:49:23.079402Z","times_seen":109,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/es.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/es.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 675\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2a3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1713818\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qau9H%2F39uPuh%2BgiDZtUB44o0T6dSnhQlk9kffxpcEAXeHAa5CAJe6Ag36AeaOZ4dLOMddJrHJXjzXahZUmIun9qdnbw0XE5urw%3D%3D\"}]}\r\ncf-ray: 974793ace8ef0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":675,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"1fff425dd4013c97a344ccc544e201e2","sha1":"c2e625fa60c9b03f757d72fa89a08185b995a5c8","sha256":"3340937bdeda491b7c090153d8788b069c25a0f8075f37ff75c56c1270854f0a","sha512":"984049631ffc84a543aa27072dfc681d92205ca2b0e97f421ecd22161afbd91d495f6506729e9136f6158046eb0d2e55ba04831afed5bd492ada04f166c72805","ssdeep":"","tlshash":"5e0188f784c00d6bde7c613691072538d9182f20c8bd4a481a3d5872056871c89f918e","first_seen":"2025-07-02T10:58:57.918856Z","last_seen":"2026-07-28T06:01:00.67052Z","times_seen":370,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tj.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/tj.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 719\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2cf\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1960203\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fefN8KMi%2FU7DdulQvhbHLFL8oh6J%2FE2qiNGDKiMAHiH1GgmgVuYihGl1ITdoIxcMeXx4B%2FCfVnHolIZ5WSqbsBhHUgUzr1985Q%3D%3D\"}]}\r\ncf-ray: 974793ad59360b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":719,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"385c3a1356ade10cacc5bdacc701d774","sha1":"9ded03f3362fb48abb55c0d8b7baea3f166a3c36","sha256":"6fcbdb60d2613b4b7357793f148d63cf9166ecc6e5cff35e9a99d8d6fffa46d9","sha512":"c6460d009c09cdf1ccb14608cd053121e012d762e1d53349e9f227899676316681f1ca6590b63ebf789e417dabf032d5b72946bd7765c0ed3d9a34081bc40a69","ssdeep":"","tlshash":"6c0110dbe248f879e9540277488b95a76cf200561a748046b91cce7bd90029b1ea6c8d","first_seen":"2025-07-02T10:58:58.199969Z","last_seen":"2026-05-24T00:49:23.698475Z","times_seen":115,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ve.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ve.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 634\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-27a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1947730\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZLA%2BNKd6%2FH0ozVAswk79oBubIar2DtEBY5jpYqa6iT2zgC%2FYhT3z2CG2mchctzOKLpYeLrT3cNuc4RIr61h%2FZ0ma%2FZJqWTFXmw%3D%3D\"}]}\r\ncf-ray: 974793ae39970b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":634,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"7415a4288508752dae39eb4515fa548c","sha1":"f3c884f01b279d938dd852d717a9e85ae19c2a78","sha256":"ecd51b77bf709b69e0c9bff61a240bc8c87240f6bd25c802508eed4ec542f536","sha512":"155fd370cd915c51ceeccd1c06dd89662e5a81ca0e0d397c500fed11538e1b20b87cb4b97373c2529c7efd9bb5c7fb29bb80481986f3b290855f58787ad537b9","ssdeep":"","tlshash":"89f0c22081072f39be84022b8d2a5682ede28838f823c5038d8983b68cc417040e63c3","first_seen":"2025-03-08T14:29:59.802206Z","last_seen":"2026-05-24T00:49:22.688963Z","times_seen":120,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ax.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ax.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 727\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2d7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1942777\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nhUgyBGs%2FFEZC5CLgXsTKkvDR8GhGenwh0oh9%2FtXJJbaiFcdSAFN%2Fn%2Bj%2BLJGztWRG1c33nNrlrzz0BIGh9gYY2wT8pQ4udeu5g%3D%3D\"}]}\r\ncf-ray: 974793a1cc9d0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":727,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a19592240e06ab1b38d225316b62561a","sha1":"c1db2a47a766265572577c8e087513ed66f9f5a8","sha256":"5ce590731962d351ab4194b7c6a3622b125920311d76922f94b5f57c79b00259","sha512":"58908ac65eb4835e113a3d0b369ad51cb72ea04b75c20783ecc772be18ec03b435e6603c0fee0963c223f9ac58ceb8619b1b7fe4b0d448ddbb7278cfceedba0a","ssdeep":"","tlshash":"5901652e2e6caba57bdc47ba6558c864a49210b1ad3d6d730a82c8381d46b14816220c","first_seen":"2025-03-08T14:29:59.862521Z","last_seen":"2026-05-24T00:49:23.37613Z","times_seen":114,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":137,"dns":47,"connect":1,"send":0,"wait":13,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/categories/all-games.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/categories/all-games.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-2d3\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":723,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b8466e84cf3d2723e7243e0b789a495","sha1":"23abb03e8a9b517e41a0e937582c423812c4152a","sha256":"52e4d71cf849da5b825336f2ac582067309c2224fb42fddf05850a9d014034c7","sha512":"410889eac2eacadcfcac3602f17e669ae2d6ff293dcee6dc7cfd2a1972e374c19ab733ec51385644105539007b299d3ac08ff7fd88864ae2a53b580d6561b2fa","ssdeep":"","tlshash":"6201dcc6e1ba83aee5af810c9bb584a417cfd0ba896541c8254d8bad054a4c1e2422b8","first_seen":"2025-08-05T17:20:37.288121Z","last_seen":"2026-05-24T00:49:23.326214Z","times_seen":74,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":287,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/categories/rocket.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/categories/rocket.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-566\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1382,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e1c0341cbec88eb6c9a871222f5a4de","sha1":"7eca055c14289a64ceff32cea6e190bea17b4f20","sha256":"9dfdbe962b955d376dcc1e291d6d6863623c51e5bfec9d0a3a65976df400b402","sha512":"d9e7914c7ba0d990cebf7d7e18abf82191c225cff96d4c62c3d028df502428852f98430db18285f11dccb4fbe3b5a9ac28d64ef36b2d288ba6e2198a95194a00","ssdeep":"","tlshash":"e22102d75168934da9cd961aef60eed5332ea07fb1fa80c19c5f161c624aed1f006060","first_seen":"2025-06-22T12:57:21.037098Z","last_seen":"2026-02-14T05:42:27.057237Z","times_seen":129,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":280,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/categories/casino.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/categories/casino.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-3fa\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1018,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7642082198daf48355ff55d5cd82d4e5","sha1":"c0ab3e70eabeaeeac787336b0874ad25de4bd4b9","sha256":"1607a70524618274f2c209ead0fa547be954006ce4280d460d83af01d0bff1e9","sha512":"e32b5116932bc1463bdfdbb5bf4dd39e71c76638268ccd4e3e56bd0485764c09d90e077e943f5aa9b3792471e3cc6bdc0516bfd3c4aaa6fbe4274b5b04913d20","ssdeep":"","tlshash":"751112ca52b4960cecc959afdfa16284610bd0fdb529d889f1cde7409e878a4e001850","first_seen":"2025-08-05T17:20:37.400862Z","last_seen":"2026-05-24T00:49:23.496678Z","times_seen":74,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":193,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/search.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/search.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-16f\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99e1aa2a8c9183dd4af4aabc7a4d978a","sha1":"f195d4ceeb7a461b1e28645b2354beb0745afdf4","sha256":"a1c785b6ffd11c1982b91cc53ee4d749df61f4347128244be17b94ed0872cb18","sha512":"e194fe8aeb4569254343bd8eb3d81681cf425f2ab78ee4b235107d2606d697bf1d905f8fbac9a5c4556591b327869e0aecc60e07a1dd3d57998ae29bf17ad9f3","ssdeep":"","tlshash":"f3e0c0f4130c48ecd50f9a3e9f7a8080c362e4f36828c001b1dcd4286703356b4c3959","first_seen":"2025-08-05T17:20:37.40545Z","last_seen":"2026-05-24T00:49:22.834818Z","times_seen":74,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":217,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/tournaments/small-tourn_desc-8.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/tournaments/small-tourn_desc-8.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 33658\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-837a\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33658,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d039c19b3a5fddf10ed6ff9cb3c4d4f5","sha1":"b05faf6e69f14b0e3606fef3556c19ae460eb0a7","sha256":"0f8ef2a2e528108631f922e1d2cee93f934010887f6d39a3c8896690f98eb01f","sha512":"c7c3543e57dd8b3b6ad9c93479a9e62bf30b2238107ac12c98a42f2ca4f649c53ced77a03225695d2552be22f23ab12f2405b97c81c199d6c0f657babb353af5","ssdeep":"768:JpTtcRcN5olqWQXWGkL+SW4k1P/UhNGKoPHRKMm8Co83a9Q:bTtcRcNSqWQXWLL+SWl1P/UhNGKgxvEt","tlshash":"7de2f1e468f88f2ac35beeb247c2929fd8b2350e0a50fc1a00452dd924546561fbe3f7","first_seen":"2025-08-05T17:20:37.178709Z","last_seen":"2026-05-24T00:49:22.826936Z","times_seen":72,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":279,"dns":0,"connect":0,"send":0,"wait":76,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agstatic.com/wlc/flags/1x1/ru.svg","fqdn":"agstatic.com","domain":"agstatic.com","tld":"com"},"ip":{"addr":"54.240.174.26","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.agstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 25 Mar 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:22:43:3E:BA:C9:EE:89:8A:DA:E5:F1:6E:A5:1A:CE:62:7D:8C:8A","sha256":"A8:15:5C:3D:F0:FB:92:90:3A:8D:33:6C:77:5D:61:01:E8:D0:25:40:55:13:A1:47:54:B6:2A:66:2C:61:44:8C"}}},"request":{"raw":"GET /wlc/flags/1x1/ru.svg HTTP/1.1\r\nHost: agstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 294\r\ndate: Sun, 24 Aug 2025 09:32:54 GMT\r\nlast-modified: Tue, 26 Dec 2023 14:45:29 GMT\r\netag: \"b5556eb6e16708fd2f7ccfc0b204bc5e\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: A7-DhrssA07myt7LibMWxx79n2gvXe_I1vPUsjWVMa5hpo4ilLyoCw==\r\nage: 60101\r\ncache-control: public; max-age=604800\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":294,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b5556eb6e16708fd2f7ccfc0b204bc5e","sha1":"f46b9c780444a4513b32d3972dd13b42ae386a9b","sha256":"1562997120cc48657c55544098ab20d6ea0b635d223a2d21a32f2888d0247a1c","sha512":"b8d13f7cd9dc54ed22b9669836e033e6b2afb3486bd0447bf401b71b5cff1675e30858567e68d99029cd4c31ec7f6e44b2403bfd0b240b1471db29bd2b43825c","ssdeep":"","tlshash":"b7e01291988cd54cc94942358f3cb1b3607bd8c965c0158df5a12d1120d33b75c55adb","first_seen":"2025-06-02T18:43:51.073879Z","last_seen":"2026-07-10T20:37:54.85204Z","times_seen":168,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":79,"dns":39,"connect":1,"send":0,"wait":2,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/hk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/hk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 501\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-1f5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1883660\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ubcYuh8uKOXkV9X4DNwi2wjQ%2F0TsvJbo76UB2BA%2FWc%2Fzu4BwlvDjPlwXY89GXSzuv2J1gPCJKdUvdhgarj5GNvd2kRmMvU60g%3D%3D\"}]}\r\ncf-ray: 974793a7aebf0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":501,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"1be20dd5b1d374e45d11fc620116c8e9","sha1":"4547de6bc39720313f745f8febcdb15b231b5dc4","sha256":"d6c641621067bef14fc333dc70006d387278cc05c579072312f6dcc92b273b5d","sha512":"0ab36a66c693d71cd31d714e77e87a3cd08e4640d8f091a727af06cb4de02316f54088df8e55fea3d77ca3e71c2d716a76c663a8b216ed6a941ab35417c49d43","ssdeep":"","tlshash":"1af00edeba042e64602a833a987687a0d43b0ae98582bb6e71197ecc07c12af40d0691","first_seen":"2025-03-08T14:29:59.875009Z","last_seen":"2026-07-01T02:50:47.736887Z","times_seen":126,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/styles.297578458c20fb04.css","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:32.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /styles.297578458c20fb04.css HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:32 GMT\r\nContent-Type: text/css\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-21f24\"\r\nExpires: Tue, 26 Aug 2025 02:14:32 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139044,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c6fcef02bd77150da09bd383e7471ad8","sha1":"e64930aec0995d9aa838f791c892320216012482","sha256":"056f5e24799b52661a5845db972cbc78b36fd5dec9fd9f0ea14601fc8ea7df4c","sha512":"561e939773e18759fb2fda8dbf6497c8e8b15614e295e4dd96d1d5f921d4c26e6487064ca95f944160a0f160ac8a3793aeced876bb4718f4ae8d3adebdfbaeef","ssdeep":"3072:HHmv36/OKu7R/5yv3E3TnmCEoTac+jdNUBUQBYcO86SqkQ:HH036/OKu7tEv3E3TnmCEoTac+N","tlshash":"75d30922e539f2a53717c45373849fec1278f80dfb172ae4f1a6cd0c5ac605692a6b6c","first_seen":"2025-08-05T17:20:37.464005Z","last_seen":"2025-12-05T03:04:32.679163Z","times_seen":73,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":133,"dns":0,"connect":68,"send":0,"wait":131,"receive":17,"ssl":72},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/my.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/my.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 845\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-34d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1797274\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=15M9zJKKE1QEKj05goQ7ZX%2B8oJg2OuH0245vVMP1o3x4T5ZIjc6c7Ix3XDnLxrh2Rpi84yNSi6g1aNXLNMhpbmMPuvmSgaRZWw%3D%3D\"}]}\r\ncf-ray: 974793a94f610b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":845,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"5721e18db757877cd5f271d60961ca7b","sha1":"ec9c440a3b6dc5a5df1568514ee92d1c5997c47e","sha256":"6c68ec6876683872ec7c91fc37a78b3c3c944fb3ac20c72a0f9680feca1c30fb","sha512":"be87ed771da8eb0e51a068ca16d18f904e9963a1fb81c9563e6a35a6584e3c791b5f8e6fd2c7940c157f9827e1e39fb13902032875f66a084cbb416b1dec732e","ssdeep":"","tlshash":"0e0152d75bb54c70ed382df65f1d19d8fca824199f180237428158690ab1e96e919c0a","first_seen":"2025-03-08T14:29:59.885701Z","last_seen":"2026-07-24T22:01:00.700111Z","times_seen":138,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/qa.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/qa.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 549\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-225\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1712358\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1H%2FA4AskbdNVey2C%2F6R6LuqotT4iBi1FS5TXR2MQL1TIYH2xwIzEUA8mpMSg1wSVBJ6zXuP02utEOwEI3BhdglcfLx1pJ4WBrw%3D%3D\"}]}\r\ncf-ray: 974793abd8870b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":549,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"ea8b33d6edda66b29d354eda9fa56deb","sha1":"037de6b5eec2b7b1d40345d881af7e2fc1059cad","sha256":"89862c0fe13de78d286113e74a4c489baf7165a649bf6f35ce623331cc23b971","sha512":"8c30026795103e2943ef1ced834c26ba284b48f4f151c769de2a3f9a178d241a95e12f653a79f4fbf6924f2fa5e01861d77d2c56f88f196079dd0adbbe5b31fa","ssdeep":"","tlshash":"89f020c746638833cccec5676386df7ecd90a928d351740b192cc2ab332838a6408092","first_seen":"2025-07-02T10:58:58.059726Z","last_seen":"2026-07-08T04:03:21.432788Z","times_seen":123,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/im.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/im.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 536\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-218\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1801594\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GVIAxqm8G7ZVMzkhzCYq1R7ZfarIgKK9%2BL4JtV7mM0Y0iOraQqlPuZkr%2F%2FUw%2Bk%2FakmtVAo93kkQjkStfEk3g0EnfaK%2Bnm%2FyqMQ%3D%3D\"}]}\r\ncf-ray: 974793a81ee60b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":536,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"563193a286c3017ae25cb457f72ca2ff","sha1":"918af13ef3ad67271b37546048e7249759ba80e5","sha256":"128fa5894e903b226d145eafff5cb7c7c861a86b91318bec42c409e7f052bc85","sha512":"09f1dbe1341caaa2623d2ff9da4a812658fb8b4e9f5f9f9b64dca7b693c36c1bb0c2d95de04d3c7e216724cdc646e09d5be03c77492d74d2a88594309385d48f","ssdeep":"","tlshash":"f8f0c0a11b43dc27ee2a92aba41b4612401d706b436a581a8843be24551d6781c74666","first_seen":"2025-03-08T14:29:59.784791Z","last_seen":"2026-05-24T00:49:22.670942Z","times_seen":114,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.kentcasin355.com/api/games?lang=en\u0026pr=kent\u0026device=1|2\u0026page=1\u0026category=43\u0026per_page=48","fqdn":"api.kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:15:41 GMT","end":"Mon, 17 Nov 2025 12:15:40 GMT"},"fingerprint":{"sha1":"5A:21:78:73:C1:44:39:14:ED:89:01:53:36:B3:22:CD:5D:DF:67:CA","sha256":"79:D3:CE:5B:49:98:7E:53:E0:CB:AB:20:5F:B3:F9:AD:68:D1:32:26:53:54:04:32:5E:A5:B3:7B:05:B3:CF:A1"}}},"request":{"raw":"OPTIONS /api/games?lang=en\u0026pr=kent\u0026device=1|2\u0026page=1\u0026category=43\u0026per_page=48 HTTP/1.1\r\nHost: api.kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://kentcasin355.com/\r\nOrigin: https://kentcasin355.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nAccess-Control-Allow-Origin: *\r\nVary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Max-Age: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"api.kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/banners/content.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/banners/content.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/webp\r\nContent-Length: 93284\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-16c64\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93284,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e7b7dde0d218100f03ab0eef2e6e3f46","sha1":"482b5889bc9feeadc87c8a84519d1846aecf06f9","sha256":"e16f39996e1705459551f3deffb5272f7339f80a5dd8715656fe384b4a0732ac","sha512":"2072f09b3922655a355de956ec8ca5a5701a9a99bdbb3d308c1265ea728d5fd653b305d74d86dbbd369fd616f480c74e198350a191d223cfedcd278c93de86b4","ssdeep":"1536:2QJDKHDm2xD4VMr6IQQD4+GaUmOOe5Zj4sJoMys2iRkOvEUwKSrC9LED9lVVH3jt:2QJ0NxD4Vjj8maNWZxH2iK4EYS29Lm9b","tlshash":"9b93128b58c77c3ef069ef2762be671353e8381dc020e597e757b13e71900668932555","first_seen":"2025-08-05T17:20:37.042733Z","last_seen":"2026-05-24T00:49:23.177551Z","times_seen":74,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":118,"dns":0,"connect":0,"send":0,"wait":130,"receive":112,"ssl":72},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/tournaments/small-tourn_desc-10.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/tournaments/small-tourn_desc-10.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 29320\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-7288\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29320,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fe2ed7e8134a7bf0baa6964751e01f1c","sha1":"c4dab8478413af1dff8a2b4c918a56ca5acc043e","sha256":"239b8991ab0563562637a2d9968a0383c5d9a75fd67d1676a4f96bcc4307fc2b","sha512":"06eb9c82b8c730b222b0c5aabb420566c8f36212e0e424d23d5023050e49490709325e4bebcdb1ca70966fc998cdfbcda9a1dcdd14590d2b98ca28546319e98e","ssdeep":"768:I77avlEyWUIgiS6XG5eKDhk3rIVqyuhH9fQroD901SAQMI:UudEhUv6W9Da3r6wfmoR01LU","tlshash":"fdd2e1b108e0de44454fefb4984b4714b9d8dde33a8593986eca18584cc71aee6ae8cd","first_seen":"2025-08-05T17:20:37.186355Z","last_seen":"2026-05-24T00:49:22.659987Z","times_seen":74,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":568,"dns":0,"connect":0,"send":0,"wait":70,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/kh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/kh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 670\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-29e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1879364\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QNDwXr5OsB4XJLtaIc5qdpft55G36r%2Bbpr5J5wxYJmpd8jy1LQjly4cVD6gSk5F6uYqkx0mbAJzs602CjEJKhlROl5LwFyg%2FGA%3D%3D\"}]}\r\ncf-ray: 974793a1ecae0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":670,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"db8acd0b7ff0f488fbf13f2a6b169e71","sha1":"153d6d6666aa1ed17e04dad087d842cc71c66fa5","sha256":"4e5cb5d752827644e1af835d844b314959d6a3a1c85e4c8bb01d933c95f3d49e","sha512":"e5fd4d052c21b55fe2ddf6ba689e1813e6e1c557f842e77e0e9d6d9963714abf3c0c1e2340b17e163480b6f8f550480846174b4e92a75996ab4452152243b062","ssdeep":"","tlshash":"c901c8b89114acbc62e17354c41bc4a7fd023c58fcb5e2f0983ea8e1bdd074ba289201","first_seen":"2025-03-08T14:29:59.83609Z","last_seen":"2026-05-24T00:49:23.117165Z","times_seen":118,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/mv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 569\r\ncf-ray: 974793a94f620b61-OSL\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-239\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1876612\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fDcI6A84T3mjb%2BxUX6K7T4MFqZfoKJeG8AN%2FjuQlnYgImCDD69ZVvIatNU2ehTghrxD%2FepMw6SUEl8hHygV9BRHK8Ti1uHT%2F%2BCMh43AYPotEmq53ouS21a0iM1k1gQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=937\u0026min_rtt=380\u0026rtt_var=338\u0026sent=460\u0026recv=247\u0026lost=0\u0026retrans=0\u0026sent_bytes=145143\u0026recv_bytes=11617\u0026delivery_rate=20299065\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=55fad1da16cca10b\u0026ts=1306\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":569,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8807dc6a15fe1624d4be05cab01c75b1","sha1":"21724dd4540cf653c10f583dca1a629af30cf3a0","sha256":"8855a458ec1f527d7af28301199e9b9cc3d32e71abdb5eb781cc76a24dbc28dd","sha512":"107bfcc5c81c6aa392e7e08a8e5f316552910433041dcc000d81ed00584e167fc69fb6854368533459d3c385d9b169424a5fdffd15e5e3431ba3a88b1b594cb5","ssdeep":"","tlshash":"3df0e1650a0aad19c3d553b3859f266468d584343555b30a39449ec7327060c71be7c1","first_seen":"2025-07-02T10:58:58.123048Z","last_seen":"2026-05-24T00:49:23.432162Z","times_seen":114,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/yt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/yt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 787\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-313\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 9185\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s7fUkuE0qlzdbuwF1o4kWOV3aa76stPbjqF9y8tTPrGm9EaSeARuJu3P9Qiclcw%2Bfd%2FiobY7H6Y1PDOEqZWB2ceT1oELgEWcjA%3D%3D\"}]}\r\ncf-ray: 974793a9af7b0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":787,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"9b294e247078a87fb95da3c59f6861fd","sha1":"0295079e750dc5236d064b24a3b1b336021395a0","sha256":"ba890ea44a98663727eeea9798b2177917fba6bbba7ad1845e4a95f53b2b4c92","sha512":"950d3e1d19588eed9367ed5754c2dd212805310754f9fd944c0bca6c29b3f8398d62ff1a8efa4f1457301c4ecc536ceca4dbf57db0b13eca6c6cbf64a9979d77","ssdeep":"","tlshash":"3a0175c40bc9de305ff863a8fb6af4ccdf2181aab02080c981d915028ae3968c278865","first_seen":"2025-03-08T14:29:59.848608Z","last_seen":"2026-05-24T00:49:22.58031Z","times_seen":113,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/lk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/lk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 757\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2f5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 9186\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8lMgJhsnu8uyrkA6LzqDtYsYjDUjw2k5zn%2F702Rh2Yb1TGyw%2FF4yPQlRmLkjhBrXzeGzxbr7KZxInisH68Ko2Bga6LjWE8hNWA%3D%3D\"}]}\r\ncf-ray: 974793ace8f10b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":757,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"dffe1eee15fce54f94f86e513fa41ea5","sha1":"3eb85d43df427e335a340cc95b91aeb2e93c2144","sha256":"bfb6e72f33fee800a3efeaff5091c0cdd2df2ee39de9d7a89e9fbcfb4b168596","sha512":"056bc7624c0891707172a5a6ed92bf8ebd7926d40282c3fe9d94874ef4be97695ff96c1f64275f41874204e0b19e9ca121174a4f4116bd1383b59439e30f0dad","ssdeep":"","tlshash":"e601b5dab20f561d4c13a851d3da25b5670990dd7811e53b4112e2f929029474284c94","first_seen":"2025-03-08T14:29:59.946228Z","last_seen":"2026-07-26T18:03:35.148722Z","times_seen":125,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/runtime.bdf4cbc3730af2c5.js","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:32.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /runtime.bdf4cbc3730af2c5.js HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:32 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-e6c\"\r\nExpires: Tue, 26 Aug 2025 02:14:32 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3692,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3692), with no line terminators","md5":"a38ffe42ea3ebff727160bdeb1aa9684","sha1":"75a67a4fed51cab9d33cb27dfec21e4d306ee69c","sha256":"4697ad81f6a668f6d141ced1580927f898f9ca3d88b6792d301e332a1bf7b2f6","sha512":"d6cbb34a065b272b40850c16b1be4b3adc500129819733e6251a6e0bb277db58d309dffbea4517964b05bdb0a7dadd7a60c3c8610f1ccc28ff133f082c2fca09","ssdeep":"","tlshash":"167118742718edb226f100c5283dc984f21c6836096bd8f1ab2bcc797165ad20d36ff2","first_seen":"2025-08-05T17:20:37.537569Z","last_seen":"2025-10-20T13:59:14.988751Z","times_seen":67,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/vg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/vg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 749\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2ed\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1781710\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kgievsE1FTUes3RmJmbttj6Il3Z2qmmMTEgYVH%2BdTa%2F%2FYXi26G3FnEdmjWLJ5U7WpLjKFUHvoZKFsLu5goOHWr9cyqoZREqIrw%3D%3D\"}]}\r\ncf-ray: 974793ae59a70b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":749,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8195dba032d4b21f6e4fcc3114f7c3ba","sha1":"97f59dfadfb42c1fc2c9da587a85ed40b55899c9","sha256":"fa7efe286b5409a26ccc2f8eb5f98da4090ed4945f393d6a420286e9fbca30b5","sha512":"f8c95cd96b5c5c530038995786d4a744fbbaba1aee1793704400746ac327c9153b5f5f42ce49bb9023992a6e6f9be340c19ea162f1465e649eafa81816e2c647","ssdeep":"","tlshash":"cd0165462ac95c699e399a33e68a4e48e1fa512cd9d4625f10ad13d6cb3d20fe1f1207","first_seen":"2025-03-08T14:29:59.803043Z","last_seen":"2026-05-24T00:49:22.771757Z","times_seen":114,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/tc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 719\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2cf\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1781709\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mMM%2BunewpbXmxSuiuun%2FjtKBY2Wb571cOKEI0SRPsPe%2BxNbvUhhaQd3rfxWryt7GOw9YTqmA3Lx0waHFTm15KMKgEo2ToNaVVw%3D%3D\"}]}\r\ncf-ray: 974793ad99530b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":719,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"2622412a0b0c4a2caa821f53162589c1","sha1":"b65aa0fb87a8ca21c0c3387ab9d1f0e411fac9bf","sha256":"5cafc181df151b5202568cb1b8fa8dc3d16c51ac2812d34c7bd35a76a92aff92","sha512":"f732a7ac150736cc99c1f6744e41dc4a7940dde515a4bc1e78717a38f0456f593baa18461605d36765be1cae61b796544517513c25f5348c9101507647d8e7c9","ssdeep":"","tlshash":"6f0144d2e3082e7bbcda4af586057847e1e12a0492d564061d534f4e560ab4a3fb737b","first_seen":"2025-03-08T14:29:59.815948Z","last_seen":"2026-05-24T00:49:23.148872Z","times_seen":114,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/do.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/do.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 618\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-26a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1546815\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9guZxcxF3SqbuX7Q5icPJKtSFSNfqrnDgUQGFM2xqgsHN2gIeI1PiLm6Ar6njDLEvZc0RJeaXOWaAVtr%2B7HRvgs76HUBtNALJg%3D%3D\"}]}\r\ncf-ray: 974793a26cf40b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":618,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"3da4b0ba3cf317165b110660dfde7755","sha1":"3a6138c355d583aa90937014e6273d61af37bf06","sha256":"47b8cb0e7c20706cd41e1e28b3b6dad9ad273e8a2281b1446896cb3852b03c85","sha512":"f3a8bb515884932bdae1db825b7f92915d5018c32168eba2e96d0ba8a3faf64da6ce3e5aff64ae85d812c0053929984e9113a8a2d3b0cebb9026a9caea3d7468","ssdeep":"","tlshash":"fcf0b7f151c00875cfb5e3e2f0e41918d182ce19d33ab04b6141ea384c11bc5d801141","first_seen":"2025-03-08T14:29:59.994705Z","last_seen":"2026-05-24T00:49:22.843929Z","times_seen":116,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ht.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ht.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 744\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2e8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1801594\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rx1Q6UlLrix0crnfBNASK1gJrCmDi1V9%2FOKYNPhLK%2BbS%2F92dWa4%2Fdl1IQrycJJj4HBbfv6Nr4f8dHj3Rv6OpZBfEdAm%2FgDgo%2Fw%3D%3D\"}]}\r\ncf-ray: 974793a73e9d0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":744,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6a086174f8b9baa8a1e64ac8bd7501b3","sha1":"398fcac50eb64b2aca7a7d4608300a21f0831b0a","sha256":"f86e7e4a29c17cfbd9922c9212ac442fadb0bba25ffe54b4b73e77e55b6785ed","sha512":"e32bdfdefaf6c4ea4c85fc1a97174982dcc7d635e6880e75008b5af62ee2c8f5efe3aa9281dedd375f8407fd44a536c6a692eb0fea4f47eef2b399aedcd0a3b5","ssdeep":"","tlshash":"200165c9f68c8c98cbfcb239c9210167f9eea84a015d588b20434930114ca2fdab10c7","first_seen":"2025-07-02T10:58:57.909859Z","last_seen":"2026-05-24T00:49:23.164984Z","times_seen":110,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/no.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/no.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 670\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-29e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1901457\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0q8iAf4zU2TpgKe8w5YbV6u2aRqhtl1c9c27juDccck419mBchi1vEPwnoBeaTXTwodXjOCjsfRVzF8ecWGAo1dFGDZrDhVO%2Fw%3D%3D\"}]}\r\ncf-ray: 974793ab181d0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":670,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a9740043a6ac2a5f2512dd196263e7af","sha1":"8a56b456d3851dd06003845ae859aad228c3c0c8","sha256":"c07826d3a8286ff20351850821afa5e1fbfc39c1ec29e3fbce5a0b91f461ac51","sha512":"9ce9ac1835a769a10bb623b912c8eb382bd97342a6185a4efd34338638e57d5a4719a9156a78a6f8906e1e8bd8ddd4680015081a7d30c0647cb340ce94ffbbce","ssdeep":"","tlshash":"4f0123f614c1ddd0e7fc3326a37c92c25f50c4f6b755611857966e213440f42429930b","first_seen":"2025-03-08T14:29:59.801518Z","last_seen":"2026-07-24T22:01:00.731307Z","times_seen":168,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sy.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/sy.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 760\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2f8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 252370\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uzwAbyICMzEayxEjhYtH%2F1rlkTCQzoDS6DOFv6rOVbkPGw0IF9OZr%2FEOWmESxL5bTmjWQOWASHBbarbSwJhQtDJJv6A2qHac7g%3D%3D\"}]}\r\ncf-ray: 974793ad59320b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":760,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"47004a837376804b2cdd34f98d7e2a6b","sha1":"f5b8db595ba85a6c8c116ed652cd88b8452e01ee","sha256":"72e3e45e53835344c386f98b7e5ee7d71091ecf1c303387e8e30874ee8c82575","sha512":"9f5e52b70e9de7ecd1cb13a42b21a766d71386574f9e23f46a47a5a11f4878a75e1f245402e49f8ff60af36afaaba478fc970508c98b9d240fd301ac857356b4","ssdeep":"","tlshash":"c80165c7b3403d18c839537157086a319d1420f492549116953e6f5eaf3178d66aca65","first_seen":"2025-07-02T10:58:58.216603Z","last_seen":"2026-05-24T00:49:22.997512Z","times_seen":110,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/games/ico/BloodAndShadow2NL.jpg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /games/ico/BloodAndShadow2NL.jpg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 66210\r\nLast-Modified: Fri, 27 Jun 2025 16:47:52 GMT\r\nConnection: keep-alive\r\nETag: \"685ecb38-102a2\"\r\nExpires: Tue, 26 Aug 2025 02:14:37 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66210,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"db860cd767f703ef71d43b36be3871b2","sha1":"983404dbef1931fd4b5206e6150b29590eaea267","sha256":"633a9923772b0ebecede3ac99a0185423c865311cc0a45acd3a18f378fa889b6","sha512":"bf395a90de8d2df9c2b4e46f489023439aa5f080ca48f5f1557cfa91e417c1f6ea4232bca8236e0f894a740aa890bc7d5ed9b50060808d8ddc8caae8f421d9e0","ssdeep":"1536:SZrq2J3d9KsB9clZY3rGtBjXZ6w60k2UNehEWQUc:SvKw3abLZ6wkfNehThc","tlshash":"4853027296e26b507aab383e2f1cff2f869fc8a86ee7d4d1a7c5db856044714c0c6141","first_seen":"2025-03-08T14:29:59.934306Z","last_seen":"2026-02-19T08:22:57.941807Z","times_seen":216,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/games/ico/ApocalypseNL.jpg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /games/ico/ApocalypseNL.jpg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 62342\r\nLast-Modified: Fri, 27 Jun 2025 16:47:52 GMT\r\nConnection: keep-alive\r\nETag: \"685ecb38-f386\"\r\nExpires: Tue, 26 Aug 2025 02:14:37 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62342,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"3f64e9b184055e22875f1840c9d88970","sha1":"2fd898d543eb6189d2f3403d0507a44d37905a66","sha256":"9ba4eb7f997de147b761774c7e3b6a4308fe5b6f40e54402cb087a48eeb8caa6","sha512":"06bee10ab53484d882d653ba097f99935436bd6a695d042a5ea35e294f9b7e5fbd33e5ad63b074aea6d8deeae86e11a2b3bb6c13d39b6a150e32c7a373e125ef","ssdeep":"1536:mjTgFrHE8eDVwwZl8IQGFV02WUvPR/Ry13:mHZ8eewOGrWUR/U13","tlshash":"dc530231ac0a4668fb38e7b35806bee663d97da5d04c075920d7ad70836af370c1a576","first_seen":"2025-03-08T14:29:59.914571Z","last_seen":"2026-02-19T08:22:57.980832Z","times_seen":214,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":215,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/main.d27349ae8cf3dc34.js","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:32.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /main.d27349ae8cf3dc34.js HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:32 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-23ca09\"\r\nExpires: Tue, 26 Aug 2025 02:14:32 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2345481,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5c52e9a9c7ebaadd85b76dd7ba023c97","sha1":"d9d268aba9afceb69daf31987c32791cee7950fd","sha256":"4626ed6d8034be71d510b69249ef54bd688373de74a3986af86febcf6656bf3a","sha512":"818be7b9d78e4da4dd35564a849524d7b0289f0b490531618400ec19a8ae9456bac2404ff1ae4e315edb6c35ef450b8ee822edb133bcccc4b675abdc13985774","ssdeep":"24576:c7uPoEFQD3027cFUSomnZyAxbq4CE+Jc3SyXQzz:c7uPoEFQD3027cFUSomn/xbq4CE6czQn","tlshash":"13255ca5b632f1362b968452607a1585a33cb40cdb07b08cf3accddc56dae9b617273d","first_seen":"2025-08-05T17:20:37.232983Z","last_seen":"2025-08-29T16:05:26.884002Z","times_seen":25,"resource_available":false,"data":null}},"time_used":692,"timings":{"blocked":127,"dns":1,"connect":66,"send":0,"wait":131,"receive":293,"ssl":72},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bs.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/bs.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 609\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-261\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2274675\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fJrJixzX%2Bl4mapimCqEeYfyN6D3gVkHgTuXh9Gzj9NwxU0tOM8j0g9QQ9WRoysWwP9sSs4sOByE6KqrUAE%2B1NUpuiHqts%2Bvc9A%3D%3D\"}]}\r\ncf-ray: 974793a1ac810b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"e85b53938ddf2684a384947eb5228e11","sha1":"ebd8737842d7f13723ff1798b6376e2fe09a5481","sha256":"4527c54aacee5796b9c975a7e2cf3112564ec8baed016ea9186c0b6eb066eaa6","sha512":"b05667892a66034d86c39cc00b20668a4d6888cd43f9f3d9a18cf827bab6e4f1a53f2b3724f9d6de65093b71ca524d9226009da1c9719402105f3a4ff410bb50","ssdeep":"","tlshash":"53f062fa84d07c3c4b23e52d93dbe8a2f60b2d08581435974000d14e7fb7328a09b300","first_seen":"2025-03-08T14:29:59.972849Z","last_seen":"2026-06-04T12:58:41.616414Z","times_seen":121,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/mh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 705\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2c1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 252370\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a10VE8ueUI%2FDyakq9GHzJNPMIf4wd7%2Fa9Y0jpsHeRfwtrjSALmfS72ce3aDIvU2HK4IxbEDEoRPmdya9pheTSNLsAvKZ5sIKxQ%3D%3D\"}]}\r\ncf-ray: 974793a94f660b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":705,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"9ea1878f0fb9e977a376784eefabf5a5","sha1":"0fe472df663f23f57db1c439af35190a697d1a02","sha256":"ff6b089ea1c2437dc0c571c7541b05de8a66f10d9110cff103385590b2200a11","sha512":"7b16a62b18570c18ff4ab08a3fe71ba2a06cf02491b456f61d3a6f0ac9a5c23599526fc72485d7d206c142c727801a09b46d9481a45176ac070768a56c969179","ssdeep":"","tlshash":"d20194fad2466bfdfa4c53776654ca0be1de51bb9d32ea268f4008e90200896d01e620","first_seen":"2025-03-08T14:30:00.00045Z","last_seen":"2026-05-24T00:49:22.557735Z","times_seen":112,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/kn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/kn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 689\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2b1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697707\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2w2GgBfUkKj8RU1pmQIVAAxlDsDtTuFm1Hl3z7Io8gr1QJsVl4z8Q6cQ7tIEYegYQ74DaqOa6%2BTdO%2Fm%2Bt%2FOmhIuskovprareug%3D%3D\"}]}\r\ncf-ray: 974793abd8940b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":689,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"618d27e2342b2716bbafd66161f9e6a9","sha1":"3ee86556daced2ef9315aaed25a2a0828542cdde","sha256":"2103837d96970acfa3466f5f728b2d106688839d217c651f1aac221e334798c1","sha512":"c1cb8f471ad4fc34e28eff8251986f5f1870ac13b921679e6788a2d49814eda68e25e8bd06e100b0714931f7a597ff903585cb27c1c4259a191d692308c46cdc","ssdeep":"","tlshash":"1b0199d33e081d76b70d06263253653d3a00a2fc34441c19a6489e04ac10ad381c264a","first_seen":"2025-03-08T14:29:59.765115Z","last_seen":"2026-05-24T00:49:23.487989Z","times_seen":115,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sa.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/sa.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 650\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-28a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 421723\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cynuxk0gWo2VLO36lhCkS1JYDTCW4YlDelA%2BQkbyzqa1pFW6%2B1oaEGqCZKuGQSRK34NhTbdof3ZReRRC1%2Br4JXbv1zw6luWcyw%3D%3D\"}]}\r\ncf-ray: 974793ac78c50b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":650,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"cae101912005fcb42940d3c529743ce0","sha1":"32d5bf7808b2887ef2e268d70cc9a6263b32767d","sha256":"a6682c0dd97b2db81fcd8fee07714cae418062cf53617da5d0a7cca2f1400ed8","sha512":"cb5f15d1e5b9b4f209233412e04b0eb594a57e024ea594007a7c7dbe919e0f2292a192987ca982567f61383f4d57388908d6b9a43a9d6f3fa2d8e3ddcc1f3f1c","ssdeep":"","tlshash":"3cf068ffc7899f10c5c84956c10614d8eb35641733fd71f4731682552d9ab281e8c146","first_seen":"2025-03-08T14:29:59.900166Z","last_seen":"2026-07-25T23:43:19.245797Z","times_seen":198,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sx.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/sx.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 705\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2c1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 9186\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xnZ7NbFHEAtsG13c9jJkT95YyIiVLTHJa6hyHOc2wQzmQowrGmNLP5L2uS1lm84050mvqmQREiB1uGM8Kzp7x2yCwC2vBkbv%2Bg%3D%3D\"}]}\r\ncf-ray: 974793ac78cc0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":705,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"f3f786d142753ad84f2394e303f6e37d","sha1":"9ddfea20a6933b02ecb43028c5ea57be3b2b0fc0","sha256":"c74b94065751ea304dae5c37ee43b2494cff74cc2af1082af1adc2d5375b9427","sha512":"340cb07551ebebe204645b4ea3424acd30b2a9fb9a74ba902bd4dcc692ee2a9f9dabfc301710f88d7c6d4d19bd49dd5b3dbc4344f29cad8cf8177f121c07966e","ssdeep":"","tlshash":"f801448f638bcc3abbee08919505e055d7a20214824d4c4c962068fcd2f115aebd5d5b","first_seen":"2025-07-02T10:58:57.955289Z","last_seen":"2026-05-24T00:49:23.646392Z","times_seen":109,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/footer/payments/bitcoin.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/footer/payments/bitcoin.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-1673\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5747,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee55a8b8023b414560960992a34fea69","sha1":"53b955b7d1b3f5998369e6a48766e420104a4e10","sha256":"1ebf0d67f8863af08c2fed6fa33f7131899291c493d77d7f0d878be130fa5b6d","sha512":"b7e7db9ea04ff24740d29a7050ebaf1caa1be7c2f1918f0287068fa208bb01777db4cfbdd80d651e2ec93b1182d07fd3a4261aec37ec2d2cd5912c56c4c63a47","ssdeep":"48:9bVg6AqJuPwLoaOZSGOVJGsbw4Lxs6cFdm72L91FE2rUMm6rfluTROYknvgjTXsE:tS2nVSzk7t2BuO7nHYSsP0e","tlshash":"17c1e7c033aa6489f424d7eb5f5b903a7822bcfeb9408814d3e88e64f1d149c5c25ed3","first_seen":"2025-06-22T12:57:20.945168Z","last_seen":"2026-05-24T00:49:23.336185Z","times_seen":219,"resource_available":false,"data":null}},"time_used":651,"timings":{"blocked":582,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/tournaments/sec-tourn_desc-8.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/tournaments/sec-tourn_desc-8.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 46610\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-b612\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46610,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5ecf311b50c6e527278cfd9ae8413977","sha1":"64ca976ace554eea6c27e6b5847317fa78e64899","sha256":"7de96dccf65804d5b6b23f0adef5f6057777292b5274e1d8cb578b3a7cdf4011","sha512":"aae9f9cbb91e9b128d760d668a5b533a46469a51f1e57c1715fd8007b78a0cf7ab32a76a0ffed04f351d376b32412498f3e9febc867df533142bcaee930faf11","ssdeep":"768:XOeTTABthJWFod+mCcB5omuAI5g1UFsx/i4dkPueo+4sKAt8cIsk2S54kYcSd+Pa:XvMthIF8+mBPJEHsx/rwzo+4s/pQ4CSD","tlshash":"5a2302c74e9ae48c301cc3a910d7d6069603f50550ffe87b85f1b2739f285ee0619ab8","first_seen":"2025-07-08T21:30:00.283966Z","last_seen":"2026-05-24T00:49:23.203286Z","times_seen":74,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":409,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/show-eye.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/show-eye.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-226\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":550,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2717499eea21670fe38d2fe66132278a","sha1":"ce998810e95ea865e8c70e15b9a1556d6dd7c9e4","sha256":"79660b7167bdd2aea6ce651356ee08b305af8e18a9a4bfbd51bdb0ef463858a7","sha512":"51dbd96e856554ef1485f0509a633ab16721b0ce8403efcd39e041840de0df83d60cf42f5166e225dd929e5578edbc683d05f3f06e03f228c00dc212339bb83c","ssdeep":"","tlshash":"e6f0c0ffd6482e5c75174316ebf93126002e1132474cb508d03524f0a388a0e7f3f888","first_seen":"2025-08-13T10:56:46.911553Z","last_seen":"2026-05-24T00:49:23.054281Z","times_seen":31,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":338,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mq.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/mq.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 780\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-30c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1103762\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oMnwzybr%2B0VlvoPxkidM44g8sCgGsKvfGTlUggO5JbNGod8DKCIJ0vaZC%2FxlPqEEHmiOMsA12ZTsUlb2%2FRl5680cWpht7TJy0A%3D%3D\"}]}\r\ncf-ray: 974793a97f6f0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"f868dc07ce76455596e346ac0298c619","sha1":"ca71bb65fb6764fe4e0c186ea07ad236f68fba80","sha256":"59cb0f4320b857924fe2cc4522a8370fec710199fb5b5afdaf572ac86d83c006","sha512":"407db632a51b10106db7d4ad8275c12623e6e1f395ba92e4d4ab6aa9b50b14bfb680c7f57af7315d199aaa244ab99750023bc6e53a418e7043d28e48968d23ab","ssdeep":"","tlshash":"cd0175dd6a29dc96d92c403faf8c3db6bfd2f38000661196df30e11a02212208198a2a","first_seen":"2025-03-08T14:29:59.95576Z","last_seen":"2026-05-24T00:49:23.245596Z","times_seen":115,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pa.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/pa.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 692\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2b4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1947730\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eRayehc58ZVdp5zL0wT70LdzunFRga5rYdu%2F5LBIlcuyfO%2Bv2b2%2BA734%2FCbyrM4yHNEqTfWnJRL6uzkhU08reNFICkBdEjwShg%3D%3D\"}]}\r\ncf-ray: 974793ab58400b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":692,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"cec3d001b892f58845f18351c32cbcd0","sha1":"6fde7e7899d9ac817739e031070c4b7efa915717","sha256":"d4767c9977f3ffb92a55be247c7cf8685c454abe702a791de93c44b9d66750c5","sha512":"68dec9528bc0aa4e7cbd98dae58b8f1bd65822232d6251e91b854ae4bc7e3d994774c4733415fff0ae37f22e948d49eb3d0bc884c8ee8938aa6b4b004ff333b3","ssdeep":"","tlshash":"c40194f99c2f7e27d1890c414112d22188af40b355f100afb6a8f4301dd268d76402c1","first_seen":"2025-03-08T14:29:59.832524Z","last_seen":"2026-05-24T00:49:23.38647Z","times_seen":116,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sb.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/sb.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 678\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2a6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 531520\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FXFlC3wOu3PvtvErDX4UqVvRDYIcoA2WDrF9uyRufIzuu0lzDCu44nqF9ZjtmYYTfKJhuHO5lfe00UI%2FqfN0uyGvBOnrCA9nfQ%3D%3D\"}]}\r\ncf-ray: 974793ac88d00b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":678,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"46a6e800b9a1d30f350f90cf25524158","sha1":"cc303ee5fe10a2acb0d55367a887b1b0e33c7898","sha256":"593b5bcb75fd6f0f7f878d461141b99033fc9fd34e4954d2d5f80aa8b7a83b01","sha512":"5ea631cbd77dc7e8c274ab531a13162fb64a4f2679d81b0848bfff32deee5000a5a7110af91b9a48430aa5202e094f1721622b701f39b35ec9c7a3c0829b62bd","ssdeep":"","tlshash":"800183e34210ce05f7fd11198024fd9ae826024cb6236ac218994e733ac714e9db4355","first_seen":"2025-03-08T14:30:00.040299Z","last_seen":"2026-05-24T00:49:23.695953Z","times_seen":113,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/games/ico/SanQuentin2NL.jpg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /games/ico/SanQuentin2NL.jpg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 56812\r\nLast-Modified: Fri, 27 Jun 2025 16:47:52 GMT\r\nConnection: keep-alive\r\nETag: \"685ecb38-ddec\"\r\nExpires: Tue, 26 Aug 2025 02:14:37 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56812,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"7c3be9ab175fbb005271d657123d6244","sha1":"2c2561015aa712c6a8f10c21bade1e46d31565a8","sha256":"8c44f54e896fb647f8b6db93f7d8573458b175d1866490cac1a38135255aa57c","sha512":"ac31799b906c98a9e05ffa02c0af72f23c7937083618b6099050aff7dd1ee006c46e0353c2bda28f080a45d2d37be5b1bf9ab33d5ec4778cb911a06246f4b854","ssdeep":"1536:jHZJMb952AV1n7WSGOWhFF7hMVEPnUGdhr7xIGeYNLavOHYf:jXMbLVKxTFVMV6UGdhvxJvNuv9","tlshash":"b5430188b1b149cef4bd5a744fa5b4dc80cf03855313241be2cf2a3bed556018a5abaf","first_seen":"2025-06-22T12:57:21.222338Z","last_seen":"2026-02-19T08:22:57.711348Z","times_seen":212,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/js/c775408/chatcontainer.js","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:49.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /js/c775408/chatcontainer.js HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 Aug 2025 02:14:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 71828\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"68a5820a-11894\"\r\nlast-modified: Wed, 20 Aug 2025 08:06:34 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-08-24T11:30:37+00:00\r\nx-node: m9-up-gc82\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":298448,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"121a81b58b2fe1381353fa74b29bf37f","sha1":"f2399f81e037e43870ebacaec05ea70ea24fcd25","sha256":"78b55aa83342da20d2ca142f652c4ea9022890e8380bc3b89293c4ecab701ac6","sha512":"d721284ab22598591d4619d222da3d8340aed2a41f977c273a0241e854ef2674d7a1ea9eb7930b89b5ea653b5351c81ba38ee6cee1dc3f9587ee9dda93ff9a22","ssdeep":"3072:ifHy9dHe/o7gMv/dDYfOLxIQ3i49XgXDeRoOw3Odayf81+9FP:4y9hHdDYfMxIQn9Dw3Odae8k9FP","tlshash":"6c542ac472d0f8a942e741da947f2101f2292c2df409b958f3f8dcd9ab5598e2266f3d","first_seen":"2025-08-20T19:14:17.38903Z","last_seen":"2025-09-01T11:30:14.326201Z","times_seen":83,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.kentcasin355.com/api/bonus?lang=en\u0026pr=kent\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:15:41 GMT","end":"Mon, 17 Nov 2025 12:15:40 GMT"},"fingerprint":{"sha1":"5A:21:78:73:C1:44:39:14:ED:89:01:53:36:B3:22:CD:5D:DF:67:CA","sha256":"79:D3:CE:5B:49:98:7E:53:E0:CB:AB:20:5F:B3:F9:AD:68:D1:32:26:53:54:04:32:5E:A5:B3:7B:05:B3:CF:A1"}}},"request":{"raw":"OPTIONS /api/bonus?lang=en\u0026pr=kent\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://kentcasin355.com/\r\nOrigin: https://kentcasin355.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nAccess-Control-Allow-Origin: *\r\nVary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Max-Age: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":768,"timings":{"blocked":221,"dns":1,"connect":37,"send":0,"wait":40,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"api.kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/bm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 751\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2ef\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1975724\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XN2g9GN%2ByircBOzMo4ZChHWRw3A1Yih%2Fh%2BZcAmFS%2BXHtTtcOyqzYCkw8o28ffVP5nWhfp%2BDob6nOzgoWP5cOOZJG5vOV%2Bxbe5Q%3D%3D\"}]}\r\ncf-ray: 974793a1bc8c0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"f8ee398f383937ff67598e46ed2b9d63","sha1":"203bbb3fba9e9b74b2e035defe303377e854938b","sha256":"df9f8f34a5b2e27caef03abf84c6f460d6ac0d09008b8ce8ca3ef185681729ce","sha512":"26bd51cdd7bf47be9a419d21f4c0b730a5117faec52d7cf05274002b66776132dc220fea6d93ea0a20005336e717459027de476e5725ef873efe3f63ecc3b0f5","ssdeep":"","tlshash":"c50165920fd4b95c9b3c826784ce7936f9b6e21df3487b390c1ecec4752990d1265207","first_seen":"2025-03-08T14:29:59.993342Z","last_seen":"2026-06-04T12:58:41.654832Z","times_seen":120,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cx.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/cx.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 696\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2b8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1628133\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pQWtme6mDMo1aMBZxAvald%2F7LAXTthU%2By4BFZrLvyCXtSb8bR%2FOUS5PurimAoWjSSHot1CrcVPwjj8w3Vb7l3AYaQSfoXIX99A%3D%3D\"}]}\r\ncf-ray: 974793a20cc10b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":696,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"ea66f1638e2dc92d11cfbcc25ea79b99","sha1":"e9c2f91bf6c8bc02bf3babfbe5f47b7955790933","sha256":"0560468f4f2ad53bd584c730b9421ca6bef2ad0b6b668f17ad5868561618a4e4","sha512":"45bddc499a24a6deec86446e1423df2afc94543d9141e6c17e990e0a2b8a84eb04e124f590ff88653115265cbfde0abfb5e56f98a6c3c4fe4753f092113e2078","ssdeep":"","tlshash":"880144d0f3d1df4994920a55c306ca44e40f852db7d44d53603b9ef624148873bf94a6","first_seen":"2025-07-02T10:58:58.148078Z","last_seen":"2026-05-24T00:49:22.694601Z","times_seen":108,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/pr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 707\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2c3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1705919\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6wRhGWOLVTm%2B0J1Dn35v8qaqnaMsEw8453oHd8hIlqQMtjM4oyjPtGx9j6WDejxrubEeoVSmxuqbWN2OJQi4%2BOTBOpJ8B0jkQ%3D%3D\"}]}\r\ncf-ray: 974793abd8860b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":707,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"63850939e5eba027d376b28ed98725ef","sha1":"7de7ecbeb0e43191685cff2dbe307828f91382d0","sha256":"484ce9350de77488d539605c0d7cdc1204f7f18e6fcd4d20827ff2e8540690c4","sha512":"2697865d2a779ebccd0f3530c68d3786254e12149e4df7c95acb2ebbb8ff2406897e286bd2e20f7e481aab613a3941db7730d0cfe3a591466e8d8c5914fa9f0a","ssdeep":"","tlshash":"3b0199a3b31dd97fcc557f37ca2c94a06b17275a06460c872e415565e0df4c14f51144","first_seen":"2025-07-02T10:58:58.319591Z","last_seen":"2026-05-24T00:49:23.671916Z","times_seen":107,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/bl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 759\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2f7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1966596\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2F9dnbLHIFRq9IRYj3tOU80ZZmDSzaoPs%2FaK80jxuGJ2Yxaqq96GSIq1YjBKdpVAB6%2FS7iOHgAFAbb0XXTfg6gjHd%2Fy4P25Rmg%3D%3D\"}]}\r\ncf-ray: 974793abd8920b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":759,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"290a7c7181d810bfcb6afc7de1f3789d","sha1":"bff43cd9481cafe46337809645ed674fa787edba","sha256":"8842a5cba6c72519491c33312457b274cf8cdd495837bf449c25decfa7c71dc3","sha512":"16ca3dfcb5eb7f45077f4a8f6e8f74e8f8eeb621f81db68f3626362df2d43aa6ad376cfc91fb84b376ec49c37bb194c81398e55fa91b62733f6a4865c1766f64","ssdeep":"","tlshash":"3501b5b08b4dcdf3ccba10573eaf9e74ed0a2ffc58a850421e664d68fc10342a69094c","first_seen":"2025-03-08T14:29:59.85643Z","last_seen":"2026-05-24T00:49:22.980955Z","times_seen":114,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ua.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ua.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 664\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-298\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1449857\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6agGdIzomrH4fVPU8xaYsV7NCvfL5iFuZxnh05DMpn8x944KXaDRkJOb1J41wKyc%2By2t50q4q0mDU9qNMkdZeZkojmLSBItNNA%3D%3D\"}]}\r\ncf-ray: 974793ad99560b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":664,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"a82a5d0a43b25a90c525d839836fe970","sha1":"395820239fa807857075e1699fb81c24b2a23a23","sha256":"7b98c8f6e089c8cdae83f09d9b1e233a42ab23d6a07e0a5df9926afb1027d0b2","sha512":"aebf7f6122fd9f1ceb85fdfaa72b2f7503f54d5d4cd6b526888e75b94931895ea609963fd4a8e02a77be2179cd46353da306211f7f434e371b25dbe164e046d0","ssdeep":"","tlshash":"7f01689b8505e6763d3a335f16a2b8c2f024ca2f0b15a50a718c77f08a675e1054d7cb","first_seen":"2025-03-08T14:29:59.931857Z","last_seen":"2026-07-24T22:01:00.669156Z","times_seen":129,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.kentcasin355.com/api/tournaments/kent?lang=en\u0026pr=kent\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:15:41 GMT","end":"Mon, 17 Nov 2025 12:15:40 GMT"},"fingerprint":{"sha1":"5A:21:78:73:C1:44:39:14:ED:89:01:53:36:B3:22:CD:5D:DF:67:CA","sha256":"79:D3:CE:5B:49:98:7E:53:E0:CB:AB:20:5F:B3:F9:AD:68:D1:32:26:53:54:04:32:5E:A5:B3:7B:05:B3:CF:A1"}}},"request":{"raw":"OPTIONS /api/tournaments/kent?lang=en\u0026pr=kent\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://kentcasin355.com/\r\nOrigin: https://kentcasin355.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nAccess-Control-Allow-Origin: *\r\nVary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Max-Age: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"api.kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/gw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 589\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-24d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1781708\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U8jI4cCGrsbvzI0azAWhexPU%2FBvwxdKbrlKr4o3ThOsSR8uISC6PuxqgbdUPTOhWG%2FBapfzv7DYVPqZ5WQ0Um3m%2BiNvfijItLA%3D%3D\"}]}\r\ncf-ray: 974793a73e990b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":589,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"ed0732a36907c70ffda362f609e9ab22","sha1":"dfbfd722a2f6b55cae31ca161d4ab45432ce9647","sha256":"2b0d8026e3583b0773981ad41a0e861db589ab6981d70fa151cfc5b1459b4fbe","sha512":"ce5fb3c9fdab5991eca756934c3b91b1e2c39a54b50aadeac8a646692cf837c8e438dcf4347b3501ed5cbf2c8c9ebb53435e45e0a6f3f3fa2e330c649374fbb9","ssdeep":"","tlshash":"24f041ee03033cddc91a402e0869dd5f9c3302a09e218726e171f9baba155ac907e1a2","first_seen":"2025-03-08T14:29:59.793606Z","last_seen":"2026-05-24T00:49:23.316695Z","times_seen":115,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/categories/popular.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/categories/popular.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-24e\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":590,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad3ab692945a93c4974467c3373d236a","sha1":"64e77bb4db1d16ab111fd65b2fdb3d003bcdb1ec","sha256":"9777eea65b8ca55f74b723ed796e04bce6dce9ba08ebe21344097df97d479a1d","sha512":"f762ff835b5e6e6bd39f240f39c2c3507d3cd306ba5ca409814711f095b6f7ee5f99f4d2777b39a7c555c4f51744d85e56404c78f97bb4f4f1a248bb5edfe6bb","ssdeep":"","tlshash":"28f04ce6c20843bc60ce4e9ca76c7124633eb0b6749540a1ee8d459e44035d0f9ab918","first_seen":"2025-06-22T12:57:21.087647Z","last_seen":"2026-05-24T00:49:23.558433Z","times_seen":138,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":305,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ec.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ec.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 938\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-3aa\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697706\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hAkINg7geI%2FIfNJncGbTqxCCHaOh39jSfr3rpNdHMCNHBhg195OcFJMIXzUB8i7VFN9wpazloMF4oxU9xX9xYJVu2KLLEYbw5Q%3D%3D\"}]}\r\ncf-ray: 974793a26cf70b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":938,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"23e676132fafc00bc1a37fe207419612","sha1":"476b2879609976f23aea31c833c0fd61c2396945","sha256":"88665b276b77a01ee763d1412eec2a9b93fc1970de9186f9c1f4f8b40f81eddb","sha512":"82c23d823196dff4fcffbcc93980bf4c0f55400e6f7de35a85a4ebc98d36fe35206106a5bd876e8fd18b37989d9b470e500add27d98c044fc3e43a8125de3906","ssdeep":"","tlshash":"f61154eba2c49d1ae9f180315f462022fd3cad6e5517180462e5c9b98d697bb065c31e","first_seen":"2025-03-08T14:30:00.060941Z","last_seen":"2026-05-24T00:49:22.919808Z","times_seen":116,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ir.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ir.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 685\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2ad\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 252370\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDNe1wJk0DI0hSCPUCAsdq%2BdEDaNfv8CbYRvMsUp7RSjoCYHwStjzbZFaYVdAuMoqYsxE7qWxixLbcOOoLrpRfQge4PphHToEA%3D%3D\"}]}\r\ncf-ray: 974793a7ceca0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":685,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"514d0f3823b82e3b6ac7f8fe5c9ec7ef","sha1":"32239a185c0bbed7176c49a32fa8ec7ae248c693","sha256":"e9c19e80fc035187496296b3e3ca585e522b722980b9af554726d92d3154c2f6","sha512":"51040bd230586b5a91424531744509b4e2d6c5dec8a4a99e764afa5dbc238dee93a53ccff9bf08ad0fd610901ed9a39cb4fc563e278dda7819eb18cd16d6790c","ssdeep":"","tlshash":"d00188627621741dcda41a70859ee48037b463417ceac03dd04acdfdcd64e0b0849466","first_seen":"2025-07-02T10:58:57.917495Z","last_seen":"2026-07-24T22:01:00.709323Z","times_seen":115,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ug.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ug.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 884\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-374\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1141706\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c121m7IpQRQNIo9s8E0mmUPyenLXV4e8R%2B8RAOF5M1E62nfNmAM%2FVqb7yA5xR3tE3HC%2FeVKlF05VxmAGHZoDurpPUOPmAxRWiA%3D%3D\"}]}\r\ncf-ray: 974793ad99550b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":884,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"63e3d82917425c14269b98911d3bf8d1","sha1":"85ca03c4a26e0e6321afef95d105c1591c52eba3","sha256":"b11c536070c0835ef3695bd01f5b8724183707bf6ab31b2b075a1ddc6249ec4d","sha512":"353d52f47608abc795ee1acdd1523bee9fe72386a561bf1ee9d15506f0f677fa49d7b67bf374837a216bb08034b954b085138a7719a7d4033556fbb39d4a81d6","ssdeep":"","tlshash":"9d11b7b6e20a451fd9a52b13b078ad305e93e908824624d43000d02e7ea7dc98a4af05","first_seen":"2025-03-08T14:29:59.857829Z","last_seen":"2026-05-24T00:49:22.962748Z","times_seen":118,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/switzer-regular.03e7decc532f08a6.woff2","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:32.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /switzer-regular.03e7decc532f08a6.woff2 HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/styles.297578458c20fb04.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:32 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 16728\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-4158\"\r\nExpires: Tue, 26 Aug 2025 02:14:32 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16728,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 16728, version 1.0","md5":"e23161fd661d68acd57b789a9480e91c","sha1":"4ee6034ab8db8f6ae87f82ba2919574005dc91d2","sha256":"ddd9595560c35725e00d01667ce9bee519d245620e610844f0dd149df10b5d5f","sha512":"cfaa87e0974980fcb0e353db0a68deb3907846a6966e46fa21b2b637edd29071baf13825bb9ca2f10f457cd94baf3684d68b4c41af3a8353b14d21ea538f4e65","ssdeep":"384:6pTkKBpsb+Kkz953yu1mrwtzaYIAH6coLs9gLGwNnCPIRKRaaj9FG1ZU:6pTkKJ3yALtza/upE3nCgKaaJFG1ZU","tlshash":"1972b0295b80530fd91df5a270a4dfff61ae1ee4593ef8c23590b0b1284597a04b2db8","first_seen":"2023-06-01T13:52:06Z","last_seen":"2026-07-26T16:32:28.408276Z","times_seen":4509,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/banners/BannerCat_1-31.png","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/banners/BannerCat_1-31.png HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 121108\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-1d914\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":121108,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"ac1eca0f7f0ed84113d537cab8e9b8bc","sha1":"1106eb8dbdefd23c11fccb7092aa3559bbf28ebd","sha256":"aff41f6965077dd4a6065ff8472af1f7fa52b6b8aec2b7ffe09d3da55d507df0","sha512":"c29f35178d69bca5b18eb2b5f662a2a9a5030e7cc00b58b7dd53b80e28a5a2a2c2258cd7f1ff336338b0647b0ee3997142bf96b9bee0a4e4eb66c68739b4417a","ssdeep":"1536:vnMsz1Myk60KcNt61lyIphvxUSKg59YfILnnox98dnJFGSXxKgriDuTEFO+ZzSpA:vnMKmy+ZtoyIzvgcnnhFxXEzCG+e3GWx","tlshash":"aec3127dfa6a1c12b609b530f1416d02d6dcd4015a984f0d4db6fc79026cf8bf27368a","first_seen":"2025-07-08T21:30:00.371642Z","last_seen":"2026-05-24T00:49:23.007955Z","times_seen":86,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":483,"dns":0,"connect":0,"send":0,"wait":70,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ag.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ag.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 698\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2ba\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1801593\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bRtw7i5j78J7ekjCUQ0C9BP8Qfpv78wf0e2SguV%2FN1xTfqJqZej5vBC%2BL%2B6mOVHwsQ1OImCUe2UNivFc%2BBRCeMQtsaW5voZt9w%3D%3D\"}]}\r\ncf-ray: 974793a1ac7a0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":698,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"36d31ea3ae228c27c7e86c945613e13a","sha1":"2a17e30d848ee86a0a36c36398912daebe42a171","sha256":"229b2fa20fb75cb2651fbcc074ab74bc12553207b6fb4a7925042b5ebe312c55","sha512":"9e47a2114e581375893d56bdb4f183459cfb0d0ead2a063113bdd928bec0f2d9e8ac491be66ade4dfdd8135aa34ff479b3397674e79e4532f1dcaa4eadd0191d","ssdeep":"","tlshash":"cf0144d857499cdb6f1f7491a80c4fe168455b57710cd206e0bc056673153a63197963","first_seen":"2025-03-08T14:29:59.905297Z","last_seen":"2026-05-24T00:49:22.976211Z","times_seen":114,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bb.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/bb.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 592\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-250\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1962872\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S3qGXDQwaDEs%2BrTNKiNIoWn8B6QwDdQwSBPxjpfMHxFoVBgYYgnJhTEbYJ8UdJT25Yl1T0LouIY7yjeOP2%2FaNmt1ov1TUSUZXQ%3D%3D\"}]}\r\ncf-ray: 974793a1ac840b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":592,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"727aba397dafc31ad769739e36833550","sha1":"a5388b26c76294d1896d46945abde7dd1d636b9c","sha256":"a46542d5a4f6a8412a0f3470d2287ed27bd68f578ab74cf224ed94290f8ed93a","sha512":"4bc0c255ce2732c43525f2588cf106674ce26c861036fe0e6df1791017841a554eaf22bbdd61791347c3e753cd2f31346c95c82124bd09c8f8106fd260610308","ssdeep":"","tlshash":"c6f0e1645f411c66dced561367c29b22defcc7768ce66137015aa4fa630462aa1b4048","first_seen":"2025-03-08T14:29:59.84522Z","last_seen":"2026-05-24T00:49:22.956017Z","times_seen":115,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/er.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/er.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 769\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-301\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 252370\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QfDFq7KiskVMe2m%2B%2FDP5X6RSsoL5xqu12RVurJ2HdDEHQLfZV8BcfOb37B2IcTIG0i4ciEBROA%2BrjvHRZgXAepAbuIkIWhaSeQ%3D%3D\"}]}\r\ncf-ray: 974793a2cd150b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":769,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"f0da095ed601c69f94dc8a4b459f2b81","sha1":"306f2cbf1844b78dfd1d1975800357b609806e9c","sha256":"12354ec060e054f97855f6165b864d5fa4ea47970853360f244c94034b58c8e1","sha512":"66e10054a1a1a8730f1c151ceb1ce15a157cc770906b49a47c969e11095670b1df5245b0f522293e6a0c3f055c6ce35a23afc57d2946bc9c29f06295a7decb61","ssdeep":"","tlshash":"3901751e370555e49d0904a193dde194dd1a57643cad507a1e55423fd3aa35ce9c2603","first_seen":"2025-03-08T14:30:00.013452Z","last_seen":"2026-05-24T00:49:22.608572Z","times_seen":114,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/gu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 692\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2b4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 252370\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FDyNLJFFYBv6w4oz8hIO6aTX%2FQhYvYy%2F%2BKPpnoAQSKtmoee2EyH7q%2FAaEZ3RCZhENA4lsDmAF8hEeOIIg15m5zV1r%2FqEmnxy6Q%3D%3D\"}]}\r\ncf-ray: 974793a71e880b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":692,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"ab4cfbeb3d2980e9376b84529f998e9f","sha1":"be687ef967a46b9dcbfb936c85e6c0eba4fe3e99","sha256":"31f7429ef57dbb38ee6294961c97ace8c2e62e49b04471587e7574b7c8580881","sha512":"f5ff5d0a1326905b00679af74825aa35cd24c32faf04aaaf4001d38a66c153331e2ad27e5c3b98537ef31108b8c47ccfca4e3821b6232ec79c19e211596e9b63","ssdeep":"","tlshash":"7f01d8d11b90ec1a300f4320d0e514f1afd80904e772e14749d98d3cafcf068c1c0198","first_seen":"2025-07-02T10:58:58.076081Z","last_seen":"2026-05-24T00:49:22.990454Z","times_seen":106,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/gn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 696\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2b8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1781708\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WMUk3xdI7T8%2FQyrdOj2Bujt%2Bxt6DvJmHiTyp80zYoufv7FA4nZcM1IpAta4RJS9dHq91YHN6dHkjeOd0IfW5eUAms%2F6Lc3eLjA%3D%3D\"}]}\r\ncf-ray: 974793a73e970b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":696,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"1b087c1c59cb806d0014db517f5d89bf","sha1":"59ff2d03dcecb9363dab5668cdbd5ffa4758a0c7","sha256":"6e84785f1109be4d557432c45e5481e2948aab183016f8dd5c3c74931004c808","sha512":"55e6ef95101516d9867856d092bd2f53ec9ea21d30f62a514eb2ed8e865cbdd644ef3e345f26944af0a626d99a7f0a9ba024f7bcc8a65cea33267ea238111a3a","ssdeep":"","tlshash":"e30144abe0bc3efee1c51232da5c16cfeda611241df140293ac9f9525d2130d40d176b","first_seen":"2025-03-08T14:29:59.810384Z","last_seen":"2026-05-24T00:49:23.535894Z","times_seen":114,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ws.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ws.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 485\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-1e5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1901454\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eY7D3n0C2c6q6PNY%2BePikUoPlHAdg458KKZR8g0RU8WjsKAq4OuQY5a2iT5JO40TbQ1%2BTRzv5BEvbnuoSKkwq%2FI8h0pjWdgfDg%3D%3D\"}]}\r\ncf-ray: 974793ac38af0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":485,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8a068f6bbb4c51713f95f4e8d035fca0","sha1":"9a8c2ca7631e508c5cd473d08e7ce5ca6b80d338","sha256":"93be89705551d5c91a08b4a6464433f0f04b490e09bee105e5c7c13b93b9c8be","sha512":"04c8bfa8340323a92b5b00d461d58f94e4ab80ca5398fab2e3978fc4d8ef8d6cb2d7350507e3406787b1501783cf442e2337510d32aeedfb1b5870c32c5720c6","ssdeep":"","tlshash":"0cf00e4ad217dda899d64721869e8f98d63279f09130a084cca5f2a0af0140adfd0004","first_seen":"2025-03-08T14:29:59.952652Z","last_seen":"2026-05-24T00:49:22.705413Z","times_seen":115,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/switzer-600.a50b65dc40b33829.woff2","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /switzer-600.a50b65dc40b33829.woff2 HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/styles.297578458c20fb04.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 19640\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-4cb8\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19640,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 19640, version 1.0","md5":"eb58db2b5a33a05641f253eb4c3d772d","sha1":"31dcf3e4095f08599b84767f57e93b17d634c008","sha256":"d6497c264dbf70ae51add5103b6c7553dadff334b5853d09adf8c9f1c63ad36b","sha512":"184b7a5420fc8fe092e084d4b843fab5e4a04284c436fdcde09867b61fc4cdca9380097f66a10bee01c0cf253e904e14a9de3e9e02fe01175802b680046edab1","ssdeep":"384:OZn0uOn6ClgwNcP+hkgzwV/Ajy/6uZbj+sn85M8P9Benw6MiW12+t9aLwNNDJv7m:OKuO6sgwNc+Sg8VsNuXGMg9gw6MXheLt","tlshash":"4e92d1000bf24c33e712d7b5dfd5124b448a55d0fbe65f3988f350762ea69668ec1948","first_seen":"2023-06-05T13:27:27Z","last_seen":"2026-07-27T09:38:50.591118Z","times_seen":2166,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/tl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 590\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-24e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1876613\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6vaslAIWm%2BgnTwBC5llocRZc7h%2FQKHXBgDYoivcNesMViQ27ypX%2BSSxQnhZo2cu%2FWzvu7F%2F2JKMKyMsXoT14eUIUEwVfEmb5ZQ%3D%3D\"}]}\r\ncf-ray: 974793ad79440b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":590,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"1a115fde9950b1ded2bdfd5b5a800e3f","sha1":"f4cf814fb37b8803ef636d003415ba3269c44fb0","sha256":"a852a6a3f3d1d57cb13efa11a6a4ad2cffa3983fca1328afc5c549e107727b31","sha512":"971b1fe429065cd2becb796031d362a16c10442d2b49318e7ff1fdf1fa4b8077149eaf8837f0f5a42109ca29b7b88948a7f0e7433c9d81bfedaffe31bffe4c35","ssdeep":"","tlshash":"29f0b7b1236034354e558f9442134270bc4443e59dc8cd48ce8f29db8f217cecac4bc0","first_seen":"2025-03-08T14:30:00.041023Z","last_seen":"2026-05-24T00:49:23.576411Z","times_seen":116,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/je.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/je.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 840\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-348\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1801594\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZimiP%2F66tnEtdQ6ZHroFnGcy9Bc%2Fmd6tWTfFM8eGIKVNF8qEZ4i69NdFd2Cl3eBmg6xqZ%2FnyT3%2B%2FIKfQ61%2BmaVTIsWrDu16Iug%3D%3D\"}]}\r\ncf-ray: 974793a84efd0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":840,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"bc3d57ff1fbdffc0d1046583c1387f54","sha1":"8bfb782b4c6ea5fea78eb02df988185aa6520652","sha256":"a619a95e7cf8b2e1c7b9e715428269bf1c656057c3a6ea34f94f0865612bfa34","sha512":"bfd7dc10d322c1fcd52a53e243528d9dfe07ed27f49a13b686605724e4ad893ef011948e23962f68adf92d767a010aefdb28aef6da6f0b3d76261299de3cf5c1","ssdeep":"","tlshash":"1301865af2cac93c8ddcc050a1e5e0c7d098e3ca86059d935db8de71951c3cf364e069","first_seen":"2025-03-08T14:29:59.892365Z","last_seen":"2026-05-24T00:49:22.831074Z","times_seen":113,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bj.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/bj.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 544\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-220\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1781708\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ezKn6p8v4OY%2FLwC4XgeP4Sr425tXc2%2BrdvOWOoxwWdba%2FR3NLvg9QuUoNvbRHBGSGp6OX92VRMRxmguQMq%2BDJZbOwGrFKU5ViA%3D%3D\"}]}\r\ncf-ray: 974793a1bc8a0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"d366402e49ebf7e08f2df0a2ffccb410","sha1":"ef08064547dca861e9175749de4b3abc78f39730","sha256":"99e70aa27435cbc26e49d1e905847ecbd5402c0ed33d05af62b6ced80daa10ff","sha512":"2464f238c296e95cda98f840c78c61299f236b0d6d7c6dc97cd851352df20f85abde17e3e6044610f458610f5ec812a5882cc646cef38d8dd3fd1b7cf453086c","ssdeep":"","tlshash":"ecf0ec44071c8c30ea48027300548d4fcdfb43574c720644ce76d51b4404b6913b1052","first_seen":"2025-03-08T14:29:59.820874Z","last_seen":"2026-05-24T00:49:23.100789Z","times_seen":116,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/switzer-700-italic.1107dab5a2b7b463.woff2","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /switzer-700-italic.1107dab5a2b7b463.woff2 HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/styles.297578458c20fb04.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 15604\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-3cf4\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15604,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 15604, version 1.0","md5":"2c3951e7b40d2c0d0257f5340261d0dd","sha1":"917fe952e13eb314d554d50d87d2d33c1609f4ba","sha256":"0e11e659d374826312dffca4e775323581d2142dad6e3afd2c9ecea18914e799","sha512":"fe74dcd6f3fe2c7a3c42e8eed60f0a88818377ec13aa767332a4ad36cb5930d32e1e4bf880bde5d00535525f4eb5846eafa9517753d2a9ae81f6629f1a844fbf","ssdeep":"384:uIQUd1lpPrPNUt+v5ykjSKCVh4x2TpBZbGaTJIS:uIQk5NUeyk2KCVh4iHJd","tlshash":"ce62c099c5fa8e1fb38c9ab7fd5f07d843a2471d08d05484c431c4d98a2da818ce7ee6","first_seen":"2024-07-01T06:02:19Z","last_seen":"2026-07-27T09:38:50.520751Z","times_seen":126,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":90,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/switzer-700.31bf83bcbf020d67.woff2","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /switzer-700.31bf83bcbf020d67.woff2 HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/styles.297578458c20fb04.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 19432\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-4be8\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19432,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 19432, version 1.0","md5":"8463cdb9a06b7047c6e2e7eda0fd0627","sha1":"bea3f13f55c080e15e50312a5d5cecf29b08f801","sha256":"7aecbe035c1e311eabe7cac089f565c917558c365f809d5a9684881782370e1f","sha512":"cc46e30571e453431269f6ab06097c96601fcf4f700af69ab6416bc632b86d8fd756f7bc6c8710c05686b62371ec87b3a5ecb5dc5fdffe5010ec0603ec678b08","ssdeep":"384:sKMcqtSsJOPJmS0eepoRtwLHtJYvmW6Oa/0SXFao+HwvEeSzglljMt0ge0dvyO/:Qcqte4MKoRtwz2b6Oa/0MaxwvjSz+Itt","tlshash":"5a92d0e0228328f9f0640541768ed0fdcf61ed1964f227585046b2999b773deb7399e8","first_seen":"2023-06-05T13:27:27Z","last_seen":"2026-07-27T09:38:50.514768Z","times_seen":477,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":133,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/base/modal_bg_top.png","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/base/modal_bg_top.png HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/styles.297578458c20fb04.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 3296\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-ce0\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3296,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"002f6405001637428e8a7ec2051cad4e","sha1":"e9ea19c142913898f8cb8b76aa4dee32dda09efb","sha256":"a2dad420dba7d5c9bdaf34ed54593742ea7ca92ca0e8ca275c1c5860e2159c7a","sha512":"9e242e87e15eacecde39efeb5ad6ad331a017dfef7823eac7df2c99437ff66e4f995025b5cacd313dd8ccdb8a07711d0576682ace7a9c9c2ff4811030c0ac09f","ssdeep":"","tlshash":"54614c86c4d841706b9c1165b5ba7971dcbcedc182c2890c6dc90e5a55abe8bef2dcc3","first_seen":"2025-07-08T21:30:00.384113Z","last_seen":"2026-07-27T09:38:50.569213Z","times_seen":43,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":345,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kentcasin355.com/api/bonus?lang=en\u0026pr=kent\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:15:41 GMT","end":"Mon, 17 Nov 2025 12:15:40 GMT"},"fingerprint":{"sha1":"5A:21:78:73:C1:44:39:14:ED:89:01:53:36:B3:22:CD:5D:DF:67:CA","sha256":"79:D3:CE:5B:49:98:7E:53:E0:CB:AB:20:5F:B3:F9:AD:68:D1:32:26:53:54:04:32:5E:A5:B3:7B:05:B3:CF:A1"}}},"request":{"raw":"GET /api/bonus?lang=en\u0026pr=kent\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://kentcasin355.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 401 Unauthorized\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7cf714ae14fb3ef2ad31d617faaa81ad","sha1":"b3bb95321665f0e7de10c070a2c46c6774993a5b","sha256":"d15e60e5c01e59baf38c5509c322ac8fbce6c5404bacec1acb6d7443e2eed8c5","sha512":"b29d5929710e806f22fd5b36ceff61cf729d5c08a5f376d6aa8769d3a5ddf1e3ef078eeb74db2fb745c2eebc0d2e6cf19cd435e4aaeb99ccae702c60ecdcb9c0","ssdeep":"","tlshash":"a9a0222a82c008cb2c222800bca8ce32b0e880cc8200082f8200803cabcb8ce220302c","first_seen":"2025-08-13T10:56:46.829702Z","last_seen":"2026-07-27T20:00:40.738167Z","times_seen":69,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"api.kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/gl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 684\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2ac\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1141705\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FaPsuUC7c9hf8mkAILe18nlK%2BcFaECdM8UvCx6NSFbFi0XnmMq68zNOiJKkKPTnjHQcsJ%2BCTYO5aSKy3gL%2B5D79akZuRT1kwOw%3D%3D\"}]}\r\ncf-ray: 974793a6fe810b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":684,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"711b3e5067b15c390282ce91e883a9bd","sha1":"878e25a4fd5b1e7324e3658e2f04a21487d02fdf","sha256":"a0946d111935649b57ecd558963fc3759ad7b73c667cf1e50f70f9d203674d6b","sha512":"59d177d129271075c8544009fe95fc2400260b99e34271eef5e267d2a47b99bd1cc36361b99337ef7d2c8a18ec4404dacce3fdf344c8613bbe01eb1abff83b51","ssdeep":"","tlshash":"a50188f05e94c9dd477a86365f0b1984e3415361790d3f5f9e01cca46209f89cd82701","first_seen":"2025-03-08T14:29:59.925453Z","last_seen":"2026-05-24T00:49:23.361148Z","times_seen":114,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ly.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ly.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 614\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-266\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 867681\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hg%2F5oJna5u5N4u51yYCnRpkMBOFrlgHz2N7ifvuXT1%2F3l6rTZ7aKwqDf6%2B5R%2BP5ep0G7vgpEUlO8VGZTHzqiDhuLmA3lCfMK6g%3D%3D\"}]}\r\ncf-ray: 974793a8ff440b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":614,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"e883dfdaa4cef41ddf9a81cccb1a0609","sha1":"5193323797d58e1d18a65725e6e4e1c2ba70f74d","sha256":"c81d6b85ab92dd7c7d67fbde59bff6604f3ebdbe51330391d5b78bab5633445e","sha512":"93420705560402b09f42144f26109ba46ed0b81afc5adebbab5d9bee4082168e638e547a72bf5434ed01da23fc165160a6b1a30a67ac931915ef0e36c074e532","ssdeep":"","tlshash":"b0f0023b72d14e29cd5647b611ac45b1c4b4b156852c18c74608d7ba81e1304962da5c","first_seen":"2025-03-08T14:29:59.800096Z","last_seen":"2026-05-24T00:49:22.715352Z","times_seen":117,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ye.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ye.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 633\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-279\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697708\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u3VfFGovNE1YRkbiPWbAtBA7BSbJJKGU4%2FU1SKI0uMJ97R7PJOvVlIZv9ZuRKOUnIGKN6X1IJBe%2BCNN%2BCeh3ZKwC1HUYJvpiDw%3D%3D\"}]}\r\ncf-ray: 974793ae69ac0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"badc4f27ab8e05c1e347b1898e05ddd2","sha1":"3c760d17fde20efd2ea4f3304c02967547d61769","sha256":"e0172bb01de015a4f2383f11827673a8350f30c5e47aa2701b43d659d528a146","sha512":"f5a699b9123643b1563e5736cb96051d43b77979c559e0e5b2c89ca3736dbec5e11ffd3148de8eecf72034b2e4342a6fd4f6382cb1f5d73a9e598af8481c91e0","ssdeep":"","tlshash":"daf068f372d04c77e6d54db9b45da144de85b23a543801db988cc86a6f30b6c00502ea","first_seen":"2025-03-08T14:30:00.017304Z","last_seen":"2026-05-24T00:49:23.607784Z","times_seen":117,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/polyfills.522796e73cfc2d4f.js","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:32.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /polyfills.522796e73cfc2d4f.js HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:32 GMT\r\nContent-Type: application/javascript\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-9104\"\r\nExpires: Tue, 26 Aug 2025 02:14:32 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37124,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37124), with no line terminators","md5":"c32c895ba1c11332ec0886604c9067fc","sha1":"ada1267488d0c32328e15de3aa80f27d8b5e34b2","sha256":"c251ed452280ed17db7dc496ad874e795263d42312f745e2edba4fa8a0af4e95","sha512":"72d8a3164396f07c0bcad29e3022968975ace373e6ea63eb5b15b93bfe34862c62fc8d2ecaddb556d1a581fc52cecba5795b8046b7f5236526063c84ca76b5ea","ssdeep":"768:xFhDiDOx1jogSxDqlnbhH4/bwEbVuHD9QAi/n/OmF/bcVxvaDv9AUIj+5oY4+m3X:/hqR65ERxSvFq5M+mQR1z9tiTP1","tlshash":"86f219da7392b0b287f654f5c57f8007e63634a5384c88d8f14d99ea383714aa166f3e","first_seen":"2025-08-05T17:20:37.376571Z","last_seen":"2026-05-24T00:49:22.724572Z","times_seen":148,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":83,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/bf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 623\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-26f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 531519\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZBvwVpkSiWswD8CFwG4NVRjMrK7Xp%2BZzx8oBE9ifa%2BnnZxeJobDxwuimVbUWVHy0VR6wESsbPg7az9%2B9cBEZicrqEgsJ27JQ9w%3D%3D\"}]}\r\ncf-ray: 974793a1cca50b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"636a09f66f56d3ad3130b85eb242f3f4","sha1":"23b5b47e98c40a0d7a24c53b9334a7dfcc6a172f","sha256":"73dd0bf7f1b43db06f46b87431646eaeddd94b90c663584ae1ceb4f0b9c50eef","sha512":"e0092e9a5e0f2623bb2551f3ae6ad57bc87ae781c9484974500ff30bf96525f2753d00672fbf64e241e02e4363f4620c726d35434608779aef7a896dae6df882","ssdeep":"","tlshash":"aaf008a1e66d0e54b1d777e45e8754c5bef2fb3605295371835d54840a1b38cc580c53","first_seen":"2025-07-02T10:58:58.183444Z","last_seen":"2026-05-24T00:49:23.218111Z","times_seen":112,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/td.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/td.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 528\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-210\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1879364\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQoENlg%2Ffm31bE1zVNfjwWoWhB2PGw39p7EO9Zj8utYPq4tuYCr3e0wLwoXtlc52JguHRfUhpAiPGHj%2FD6EIrwZ9VHDYS1Mwng%3D%3D\"}]}\r\ncf-ray: 974793a20cbb0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"3abc773a744c60398ee20b13bde5bf1b","sha1":"6f464a7e2ad70c6aa3a5a6ac74765898a01e4239","sha256":"db33b7eab728a5068b14cb4107e9b851b5accbe27a25e3f734b98938fbde6840","sha512":"d91202fb9578f8a285c50f966f236c1eaab42dde89e824fddee0a37fe02adc0aa43186194b61111084053036e4fcf73911dc6a7b28e7294952162938c1bb8dba","ssdeep":"","tlshash":"e7f075d9868d4c39da1932637937ca200c1725215c8c9b03ca9af021fa0224f4380f91","first_seen":"2025-03-08T14:29:59.874226Z","last_seen":"2026-05-24T00:49:22.934987Z","times_seen":113,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/cw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 654\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-28e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1628133\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TZ5m%2BldlR1tsxfqvZJfmLIiBzoki2Ez6heJP7VJMPxPKZH5p1nCFsQtm3NEt1MrMRrk6ci%2Bq18PRfW9rgySqUEvUvoKR%2BpQucg%3D%3D\"}]}\r\ncf-ray: 974793a24ce20b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":654,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"1187db678162a452f3859374c7df0dc0","sha1":"c459ef1b490332ac8251f732873a4de2a0d50679","sha256":"228ab3e26561fd96dca0325d9f22fff36f6c3ab2134e596644f5e400990ffe43","sha512":"296661ffe832971e1191bf020638111f3577d5e34d2746bef064450dea4cd4595ed3a89d0fcb275aee7045375163140ffef972a7aae5d9db5059ca60d36fe730","ssdeep":"","tlshash":"b9f023a67382bd4c5c6720332bbeb4971d7552f07dc1b1f18603d420136b1da11f4291","first_seen":"2025-07-02T10:58:57.969995Z","last_seen":"2026-05-24T00:49:23.471151Z","times_seen":109,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/tm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 730\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2da\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1745086\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2FHqgM8dGMiolXJLqqdTAKzJY4uBdA1q0gvptBEezlcVyPViaC9xAQWmpqxS1QiRQD1894JEE849TbdomdldVllxVdeHrSMYNg%3D%3D\"}]}\r\ncf-ray: 974793ad99520b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":730,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8c6a093ff90ba04824ec02a0bdf06243","sha1":"ff32054894cce13aa693189a0f028744cc153e53","sha256":"548c0e06368e600a8fe6bd5c7a74c801a39671676485a1d075df4ef02822d9e9","sha512":"1409c88ba2e9b4f4b923ecfa08a77fd9e941eb515df3d6b25b54085181e2dc73b70fb4089fdc89987ae8b33063812c1af35019340797469c9b7fd6f5292cded0","ssdeep":"","tlshash":"6c0194fa2b4d2c2f2f90830685eb09c8cc85fb32ba84f4284c1c60698b125de3d50da1","first_seen":"2025-03-08T14:29:59.879935Z","last_seen":"2026-05-24T00:49:22.74923Z","times_seen":118,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/email.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/email.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-840\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2112,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa846645c5f8078b45acf92561a6469d","sha1":"ea1fbce2185fb6b086593e34f5f944adaf428fc1","sha256":"b9c07bdf8d1702a048559cedc1661075145c54a792b5f00833276c083c44d250","sha512":"8c983d275feac3a84e8fe5259ee6bf28926914b41d42ccd308050409e02cd348cf907622d0e23ded7c117fdece40578c7260db0fdac06f11f3757b796ff723e5","ssdeep":"","tlshash":"234131f9d3dc90cad90be731e923a471a59e1cbf6b58478c82583750eb080f5e5cd855","first_seen":"2025-08-13T10:56:46.75989Z","last_seen":"2026-05-24T00:49:22.623521Z","times_seen":32,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":348,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/cm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 590\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-24e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1962862\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VFIPJqIOeYL2MHDRj%2FuJ4zR5ezgAEa8iw695vQ2dIzCleIL%2FMg3HHyghHTQ4Ze3X32dD5bRAVRBZDWI11OIaaU32URj2kH4ykA%3D%3D\"}]}\r\ncf-ray: 974793a1ecaf0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":590,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"fb83f1c5d732212ff0640daecfba4e0b","sha1":"6995b23371b88890ef484d9a1d92f9b90cb9dfa5","sha256":"e0ca3a50efb5861715493aa0f3c0796c00e242d1ab4e6ab8ed8607cd4f5362b8","sha512":"cbe2a26c84e5a35fc5d246ffce8ed83a5124ecf1af9d44ec12e93d708107d3a03e49286ac686ef607da62b50c0e752c05a82e28fd779e1718e3df3609f1667d5","ssdeep":"","tlshash":"7ef047ae53f14c5c736059f1141644bbf1272115401cb29140f9dafb1a833145aed5f6","first_seen":"2025-03-08T14:29:59.964616Z","last_seen":"2026-05-24T00:49:23.341113Z","times_seen":116,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/cg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 600\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-258\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1801593\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2FVLDhOV1L%2B8TNhiL3QFxvlmzEjr8O6eU6UhHHrzaywzaDrn5bk9XQwPnocjwlah1bu1eCFDFuu2f08UWcR5e8Mz9CkPJtBHIg%3D%3D\"}]}\r\ncf-ray: 974793a23cd40b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":600,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"f1a4f83e5796c62ab7b246b853b98613","sha1":"23bdd2f62069b1fbf798ec2d240d8c260f9c20ea","sha256":"efd95bc45f3e63b2c2bef5d8b42c679c4fdd575a2fc0996a5a14a213cf2ff2dc","sha512":"d24aeb9aeac302cf884e17a6e5b89a0486edef80f1417a3dbe5e77bffa5b3c5f54e78ed6fc09cbb553c2432b346801650342f614c16bbe40bbf476768ea6e740","ssdeep":"","tlshash":"d2f041e6be012deacd056a564766314eda1822c2c8cea357230841b7ceb320e3647696","first_seen":"2025-07-02T10:58:58.026713Z","last_seen":"2026-05-24T00:49:23.121997Z","times_seen":110,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/pk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 647\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-287\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1801594\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FZnzpivV6xceT6WG1Jk2PSIuFfBDl5cY7R%2BysP3wL39YfBUEENiH49kAUmVMzi%2FBvIA9t0ujq%2FfZAmahfhv5DMlo0BvU2j7j6w%3D%3D\"}]}\r\ncf-ray: 974793ab482d0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":647,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"4eac43b3d48696f0d8852aa2acc98a8e","sha1":"e712135c957d7788bcb4f67da452e15dd7cc3f62","sha256":"018e856422df85363af38c902a4e8556527663fcca7012197fa3b11fad079db4","sha512":"436bf4b281fef300e5277d110340f72e7869bc27be02245b93fe9f227f82111f05badf8b34af0c8554831775aa8aa918c64e46a6327892e81cda46408cebc16f","ssdeep":"","tlshash":"16f068c0db463f68aa15487b0b2d504b7c1e0d51f2343991074768003bc3d5c6654eaf","first_seen":"2025-03-08T14:29:59.967366Z","last_seen":"2026-07-18T21:55:13.740159Z","times_seen":127,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/footer/payments/tether.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/footer/payments/tether.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-ce7\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3303,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b7623eec1db8da3ee0ab1aca15c81ea","sha1":"7376c1080dbcd43c0a87153b0f81738090c1ae67","sha256":"1c6845faee131c97bb9c586095cda10016abd0f82f8e704eb86d9fc219cace8e","sha512":"d5051c0cfce9a1bfa9defdedda8e79161eec3b601664c4382486409058fce507401b69055c48b4c39379d41edc97668935f40bf51c1f50bc717c980a016268c7","ssdeep":"","tlshash":"3c6193dc76a851fcb404f2ee2b0721693d0624fbbb684a50f62d4cde3996884cc84ef5","first_seen":"2025-06-22T12:57:20.92505Z","last_seen":"2026-05-24T00:49:23.610091Z","times_seen":218,"resource_available":false,"data":null}},"time_used":692,"timings":{"blocked":625,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/footer/payments/ecopayz.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/footer/payments/ecopayz.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-16f1\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5873,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6197bc595d7071792571c5d4a216da77","sha1":"ba1da339f8d3eed04f74f6130d8f5979e42606f2","sha256":"8e2eb49e0d2c978103e880739de327c71a978e398324e9f0b6bc424a3e0938ff","sha512":"698bbb08b15c6e06df383c1bb15927242eacdab1aaf8cdefd047c261e4c2422655cc609106a7dff84e2c3a0f7fad614cb13bd5323cd2fd476b86e7ee00d73529","ssdeep":"96:UJHwrwEBxByzVfzm/Jc8T8qdENTU5u/aMp86M8/9z9weTmMQMsu+DLZVLj:U1wdyJUdE1R/apUqeTtCLrLj","tlshash":"b0c1a5e8377c92f4f54ad7fe872664e5340260ffaa4589dcf39c6c28aa8145d5c84ac2","first_seen":"2025-08-05T17:20:37.06344Z","last_seen":"2026-05-24T00:49:23.066558Z","times_seen":74,"resource_available":false,"data":null}},"time_used":632,"timings":{"blocked":565,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/fk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/fk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 752\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2f0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697706\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7iDCR7CnLSf2NOQbLC3PtZ1H%2BmERF1pNf%2BQlWxvoS08aJ%2FBh24ALSuZXDIbgozJPgOcNqyncewYCkiWrg9NjugWg0SFF8wP6nA%3D%3D\"}]}\r\ncf-ray: 974793a35d4d0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":752,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6248a2b95c9cd018ada7b3b13eb248bd","sha1":"23f5aa83e8c7b15f6eb5bb488c91980198cba9a5","sha256":"59877daae9eed4247b68ee5e9c71d02c63e2b04271f3d73b6f31453ec6b5ac27","sha512":"1ff79c6ad51497b150d4539d723c9029a406a6a7e9f62bfe8c08cf314f9034c2bf87bc679abcabe2a0cb33610da7da6212ae25e61809415d202c7d13baee6840","ssdeep":"","tlshash":"1b01b58d31264d5c8b7cba76d7282ce80c298ce812062b1109508c36d0f6d010e3a466","first_seen":"2025-03-08T14:29:59.918201Z","last_seen":"2026-05-24T00:49:22.847555Z","times_seen":114,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mx.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/mx.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 618\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-26a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1709562\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jr2HAgGYPKz4m4YSK3m%2BYsGPXGs0c3%2BF9LHf3yf%2Bn44QzKgS7o8J665TmlXq42raOIH7rjRKDL22RtaIUBzk0nSjaPmbbr5erA%3D%3D\"}]}\r\ncf-ray: 974793a9bf850b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":618,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"de714e2091fe4a0d799b0e0d83f29b5e","sha1":"7d1c8253d3db0653a5259e755637cc3e4540e286","sha256":"eacb592918ede12179edf57557f1e29f15b795b2c17027d8cae8e2d0b79e10a9","sha512":"0d8242460aaaaf1c0ff9ee35ca4b689b7746115c3bddd47530d21742dacb188ee39c417e543c3dd008be7648fbf4bc58ecb16c2ec99c0800bb18425af718ee87","ssdeep":"","tlshash":"ebf00cca2788cc6a15144719b93ff8527f9884bb0a38c831876946e4ab11b298685a23","first_seen":"2025-07-02T10:58:57.905745Z","last_seen":"2026-07-22T00:37:09.300302Z","times_seen":127,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/banners/weekly_bonuses_header_BG.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/banners/weekly_bonuses_header_BG.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 70656\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-11400\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70656,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b1ac64f13bc889a01a0ed4c49cbad572","sha1":"c03c4cacf770d49614f7ef235c1312e4a3638e26","sha256":"8457a314c59b6b527f8719b14b246ddf8f65fedeaadf2cfb193b55f361d06346","sha512":"8ed3c8eaffbfadbb9b72af48783023c9390800f09d38183b566be2ad2788c37ba944dffa338b4c019f48016561cd44a43906a91c97c0fa096e2d35a685f11de7","ssdeep":"1536:dGkeurQYvAej8gkAt94b6/cdNFeoJyTBiUvaiNbnUJ18FKr5:gk1Yej8E2bCYyJYUV8sq5","tlshash":"166301870b16f892103f8018e45b0fbdb13a7a56cc6273f6546dae19d6da7360e74788","first_seen":"2024-08-19T18:32:15.313611Z","last_seen":"2026-06-06T17:37:45.183012Z","times_seen":88,"resource_available":false,"data":null}},"time_used":1024,"timings":{"blocked":936,"dns":0,"connect":0,"send":0,"wait":70,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/as.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/as.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 728\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2d8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 252370\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BzLhJWZeW7Mlwacj3G9VmXUkF1HT7rThA%2F2JRuCLJRwjf9nigRbMG4w4y2Ly3WIsMyRvc4RiaN36LAYTml5eJqL8RAXV1zNoug%3D%3D\"}]}\r\ncf-ray: 974793a1dca70b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"4cc1cb6b1a5cf323facdb769a1799c49","sha1":"218365c8f6b31cf06bf6830056562be87c63ed97","sha256":"313ece360e1c9aa1047c25db4eda8508cc4788ba7578e597c5090a0777f417fd","sha512":"ef78db9d92791d662d62d7cd7f385c3e8dd41cfc04fc751346f52e0a0f4e275468f4428d653786008d7397a77daae56fc0724727ac081dd9ccadbeead37785df","ssdeep":"","tlshash":"6a0160b8879c9623da4ce1fc0b5983e8c8a01e6091214246a7c89e7a9a1238420e4f48","first_seen":"2025-03-08T14:29:59.881682Z","last_seen":"2026-05-24T00:49:22.737097Z","times_seen":112,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":131,"dns":45,"connect":14,"send":0,"wait":11,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/hr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/hr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 658\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-292\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 383239\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vcs8yUta77dR8R6VpyL8N5%2BLKE9vcP5LZ5g7sZxEF9xPgjebm3NDEE7Wqq6a31gvpsJ0aMvdBxTRBpKl%2BcRKiFcMEQyQX2A5Hg%3D%3D\"}]}\r\ncf-ray: 974793a24cde0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":658,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a9abfe38cccfd68e4bfbd495f78eca15","sha1":"854e9cb26f467b3922dc030d6f749744b337c618","sha256":"18695760a173dd7bce391c7bf2a82c838c2a9dc509df82c1952a0cfdeaa95028","sha512":"314bfd66beb1651cff72e7bf9f68b236b520f02570a761d3682925a8bb115b1245ba5521e36c5bd18c763db6c0f323ee8a21f5de68e21e689dec8e266c0885f1","ssdeep":"","tlshash":"3b01839cb269ecbaa436161248fa2301cc427c843909873092c9ba16ec03b0bf188a84","first_seen":"2025-03-08T14:29:59.779945Z","last_seen":"2026-07-24T22:01:00.667174Z","times_seen":134,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/cu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 720\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2d0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 867681\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FKOk6gVj79a%2Fq13x0CIAlRL1m2b5SZ1ih53groXcOpMAQ8Tzh9mi04yLb58jS44ICHlaV64x7IVDiUnYPlHg5ufO2xLlLY850A%3D%3D\"}]}\r\ncf-ray: 974793a24ce00b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":720,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"e9d2d590a39ddafa972e1cc277641626","sha1":"25d86086b4cb3b94e514d05f0fc5038f570bf623","sha256":"4071c53a37f21708291ff5430b6bf08d95c0137d74ee47f86d506a991bbf7ec1","sha512":"ac4834b4a420909a6527c89e113f6dfa3270473f733e9dddc4b241e27c7690f474cdb6b44aca8444cfd8cf7d014ecb01a30a12c0ac817761579ddfce73806bc9","ssdeep":"","tlshash":"be0199f78a0ca8104d6311e4ee376488c4d0456fd301c6878ccf603ee22362ad6fd5a5","first_seen":"2025-03-08T14:29:59.79104Z","last_seen":"2026-05-24T00:49:23.221085Z","times_seen":112,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/lu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/lu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 644\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-284\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1882257\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Kd2h4j9xZJzjbiJ0YyNpnqcW5Za8TyqIjZ5nSlw0bygnTYEEJ5fkP%2FYrHTszwdRUCyzUvX0Cxsb6POJmw65aZv40skaRWkG4Q%3D%3D\"}]}\r\ncf-ray: 974793a90f470b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"59929b247207aabeb4a40f54bf8b4f67","sha1":"c6cd1cdc8f6c37290b1148a48ce15934039c994c","sha256":"5cb871f0471e07010900f1629ce7894ce6fc44c7122831b2186f07ac26e06ec4","sha512":"a2637bc3bfda9535d3a049829e5c24233915f0b4f62ed5184b3b11efa37ac1daf4f815a728ad07248d72fcf7a00a5b5474ace71c1785487fb326a7198d981887","ssdeep":"","tlshash":"9cf0622635c50c2ee4bd890c4a0f18b68c844bec9e226b1287b5cf3feb4f24741cad42","first_seen":"2025-03-08T14:29:59.785467Z","last_seen":"2026-06-04T12:58:41.781494Z","times_seen":128,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/pn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 802\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-322\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1801594\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MpI8SmMz%2FmkxVQlqXWEIIGucea6u4ilV0MEaD4oFzv12cf9NYpdODI68mbrGHe0WqXAN1xIua4oSNhE3c1VMKdQk4YvjcO5boQ%3D%3D\"}]}\r\ncf-ray: 974793ab88650b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":802,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"b59d251529b578be7f2fdd5e6e61a946","sha1":"d8e6d973e9f9002841afd466d8bed357003f62b4","sha256":"d7a618b9c113213f1ea2d2857830142b0f6f0a19e4e02a6bd8f4d750377d13fb","sha512":"b28586d21be8f91979c530677dd79d208ba3ee2e53c5dd59ded0e8048c96540ea892c3a905ba34eb9993d055e91d6cc5a4c3bfa47572d028c369c00fedfbd378","ssdeep":"","tlshash":"0f0175c1b2a3ec094ce105e1d3bc849d5a9016944c6aa3ab7196c96ad74a264f1f0f12","first_seen":"2025-03-08T14:30:00.008648Z","last_seen":"2026-05-24T00:49:23.389496Z","times_seen":113,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.kentcasin355.com/api/game/last?per_page=30\u0026lang=en\u0026pr=kent\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:15:41 GMT","end":"Mon, 17 Nov 2025 12:15:40 GMT"},"fingerprint":{"sha1":"5A:21:78:73:C1:44:39:14:ED:89:01:53:36:B3:22:CD:5D:DF:67:CA","sha256":"79:D3:CE:5B:49:98:7E:53:E0:CB:AB:20:5F:B3:F9:AD:68:D1:32:26:53:54:04:32:5E:A5:B3:7B:05:B3:CF:A1"}}},"request":{"raw":"OPTIONS /api/game/last?per_page=30\u0026lang=en\u0026pr=kent\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://kentcasin355.com/\r\nOrigin: https://kentcasin355.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nAccess-Control-Allow-Origin: *\r\nVary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Max-Age: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":74,"dns":1,"connect":32,"send":0,"wait":41,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"api.kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/levels/4.png","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/levels/4.png HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 13918\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-365e\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13918,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"e6e02284267f65df2ebcdac3d454f3c6","sha1":"90a12e7beee3c121491e7f51266d10efa65f1cbc","sha256":"a0d379506526653dd0e1b4e40d36357da3c398a5346028dd49265f4c0e9e6918","sha512":"ab9061c4e3c0f66a391d546092d90e93c650219044c62e19c53a62b3c033cd0a09b20e33aaf28a89edc3f0cbc0366b4f3f1aaef353f5d69a8a03fde8a322b8ff","ssdeep":"384:s2w/Vkf2laPaHHELH74Vd4o/y/ZUi1M7Zv/7XVejWx+UPIz:2/Vkf2sPaELgdda/NU7Xsyx9g","tlshash":"e852cf4143b0d2e1c280ff09a0d87bdb0926be779f9d51d6aa045151eb4b09ee29b7fc","first_seen":"2025-08-05T17:20:37.190986Z","last_seen":"2026-05-24T00:49:23.560971Z","times_seen":74,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":440,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/kz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/kz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 624\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-270\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697707\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HY5%2Ft8KOrOOp%2FyU6%2BEw6Dc6Qdcx7MJdFJE4totkPYdedBpL%2BV4rC%2B1V%2B4%2FDYnEUSZgRl6PpIm%2B4nw4fjXPJXM5nmIc5u9LSc%2FQ%3D%3D\"}]}\r\ncf-ray: 974793a84f000b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"2c734f9ca649e3ded421dc37ec595399","sha1":"14b2ca66a1e2f2b5afd2c29b2289a847fe364070","sha256":"842a7ea3b5527a4a5d342e7e0f894b4adc03d7b4b3bbfb47dce159bceeb99650","sha512":"91c60b3a059e3f7ed9addf6530156caba657add7f5e60d26295a50e371505704110fecb9abe326d94372526d0724fea7e97966d13be7ecae2e19da321877fec0","ssdeep":"","tlshash":"35f062987c102cb9bda45d2a807f50289c783674a59273072b55fe3a71c3a0143bcbc2","first_seen":"2025-03-08T14:29:59.798512Z","last_seen":"2026-05-24T00:49:22.6789Z","times_seen":120,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/pt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 693\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2b5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1530605\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hsc%2FkWpcUmTkceZvwGgW4xEWeYjQ3ol2WOFnZ1nw1kYtkpaHxExshiS3Cj3yp6qOszp5FDb4DAFnuiPGpuuKEpG9NimXuoNr2A%3D%3D\"}]}\r\ncf-ray: 974793abc8820b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":693,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"9bca09fe4effe4008a34aa9932689ff6","sha1":"87be1c98aff0339a08df8d23fe34e48d69a900e9","sha256":"d255e921fe776f79a53f4f52738cdceb32c02909b85edbedafce7888d3ac5d5d","sha512":"f22979084da5b7ffc3db031302578c8c9647d4a762acdf6558c1ad5d0aaf1482926edcc51df6656bbf05f4ed6193833352f52025ea60122fa1f52dcf9eb87cdf","ssdeep":"","tlshash":"5201f4b655e4b978dc7a29b09985928a1d1d0db4f43a74e55c5950513a8e486034029a","first_seen":"2025-07-02T10:58:58.153725Z","last_seen":"2026-07-25T23:43:19.254902Z","times_seen":194,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/wf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/wf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 551\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-227\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1746824\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=faEhXbavUbNC6snYai3OqcnaTPwD64%2FRNvkrKA67QppuWECp%2FOJkCbaV7ByjOHllHaQGwHp5NQfnne8X0zBesFjOUkHhP4e6Zw%3D%3D\"}]}\r\ncf-ray: 974793ae69a90b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a555e26d48da7308303ceabcb1b18476","sha1":"8a05ddbc57f6c12dddff24f2c63fd3390d0c4025","sha256":"1a284d803387b2818ddd2ac916a19dbb3550cade0d45a6863b23aad7b596e586","sha512":"2fd9135e323d02d7dedb84f1aeb2ffc00fc8226fb76c6eaea35ef3a021e472bf077206c62cb2398993157878b388d785a0882b637b2de7f37dd9b14b73bdb6eb","ssdeep":"","tlshash":"b7f02080c8905eead6054832135f5613fe75527b5706207701296e3a91b3365623d602","first_seen":"2025-03-08T14:30:00.012251Z","last_seen":"2026-05-24T00:49:23.70097Z","times_seen":113,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/widget/ESt1iDtMoi","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:32.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /widget/ESt1iDtMoi HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 Aug 2025 02:14:32 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6197\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"68a5820a-1835\"\r\nexpires: Wed, 20 Aug 2025 14:31:12 GMT\r\nlast-modified: Wed, 20 Aug 2025 08:06:34 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-08-25T01:58:01+00:00\r\nx-node: m9-up-gc11\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18073,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18073), with no line terminators","md5":"bb67ace13289d0a81d036d9fef5831a5","sha1":"899370b37be05ac62acc0eaea3be85094ac53de0","sha256":"f86b7ffc0af355910158533d9fbf988232bd7656e53450579a53ffffe6d029c8","sha512":"050d81dd86043d98d3974bd5ddb63c8aa6bab6464ea5ca7045d77b01fdbc383d0780736a98e86f87e4000012de4a406749c741ddfd0d29719e1c6a01ff6a42b7","ssdeep":"384:boUJJkQymrml40+rANbl0q09TmF0q6QlEeJBz8U08waxceb4:6lviAfJMKv8UDxceb4","tlshash":"04822b6e7959b93743b208b5a16f6209b33549ebd404c920a405e94c7db8edf813fef8","first_seen":"2025-08-20T12:20:50.31739Z","last_seen":"2026-01-03T17:18:00.984344Z","times_seen":187,"resource_available":true,"data":null}},"time_used":736,"timings":{"blocked":329,"dns":140,"connect":66,"send":0,"wait":68,"receive":1,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/footer/payments/litecoin.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/footer/payments/litecoin.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-12a5\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4773,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"93edb733903adf6957e1e50757d1dbfa","sha1":"684943d3832a33a7bee11defa4db5cf07f69ac29","sha256":"9e01176bab3a1d0560eadcd93ac75b3e7e1ac3298bcd32006e102c8f486a10f9","sha512":"6daa6b99f3352e6a214db80af8d4016c56b4404ab783a26cf818bf2f7a236b38bfd165de4903eeff7bf3ff43b4f16d4ae42c5126c24fd79248c03807c0984293","ssdeep":"96:CgxAH/Tjy0GAV7ukw7NvZh1oamyP7qENbMWR3Xz+bXTeF:CX/60xV7Zw7Nhhi2DhKXKF","tlshash":"dda193ca37e464ecf488cbf64b57a0d92102a1ff55458a1cf7dc5e64aa5081c8c276d7","first_seen":"2025-06-22T12:57:21.198549Z","last_seen":"2026-05-24T00:49:22.645Z","times_seen":219,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":587,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/at.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/at.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 613\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-265\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1803586\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FNsKDyahAsHsprrzOihq4yYezlUd1h1CegBzuK22SVdF56u6POBcp4KmMwsJMpEgen2gXMBMyextoNtLAAautwwqUbrlJZ4InQ%3D%3D\"}]}\r\ncf-ray: 974793a1ac7f0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":613,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"cd1e3cb21a2697169a16cf81c8f87320","sha1":"9891d65a587c94028b8764ab2098152e6ac6e253","sha256":"cc32c1626d6f65cdc8a92d21fd13726123f20334b0f708517b3363431ba66991","sha512":"74b0a457f62e02e0da3d0a615421c54b2d75c05b67332f1cff2312fa0ba5e0c7bd80cab8359831f878af89dd2e8262619141f03c945403ffb5b435ae22b77849","ssdeep":"","tlshash":"a5f0029e9129aca489be622389736e80d4a16292753cb949053a7138254163f52d1902","first_seen":"2025-03-08T14:30:00.020826Z","last_seen":"2026-07-22T00:37:09.232811Z","times_seen":132,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/lr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/lr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 734\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2de\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1103762\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ie2ug%2FZkH82eVzLPmYSu2EkDPQlQ6nkvUsRAEF2gKN%2BdKxOEJWnLabK8RfEJ1WNKQGkGLXg9Jrf2TltX41ZMZaRIKm8CTGypGg%3D%3D\"}]}\r\ncf-ray: 974793a8ef300b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":734,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8a256fddcedd178d1112d47b9eb3ed3f","sha1":"b0063763a85131a554390418e5ae04afd0c56f63","sha256":"cf5750e87b19e0584c45db12f949b7348f470eac218249be245eed055d6ddbe7","sha512":"89f8f9c5cc71dd30af984dea81a5edf83e36c658a5be20d296b8a0e2a51b25df33aa101819efb18c0c7ded0114efeb80503ec65b5cae4d83d9c65581c18aa96b","ssdeep":"","tlshash":"2f0199a42f01fc76743f7130cc3764b29d263e6775aa040428de45f09ed9369a026823","first_seen":"2025-03-08T14:29:59.884759Z","last_seen":"2026-05-24T00:49:22.601963Z","times_seen":114,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ml.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ml.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 514\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-202\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1112178\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2BLQkbdqXKi9IPLssNR50avwHJf02lUoG%2F6XEtm2tI6cJLJd3LuDlG5Bu1mzEKjkUXfEwDRJ3EN2V%2Fw65reU%2F%2ByZkcL%2FhyA66g%3D%3D\"}]}\r\ncf-ray: 974793a94f630b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":514,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"d4684a292f6be7c03c5c8a182a1c6799","sha1":"1faff8cba23b9e23b072433cc0cdbb4d3ea412cf","sha256":"99afbe6d36160b95c1393aa2dab2741c6303075cca87e6be79534de851bdbaee","sha512":"d0c3e3af920438d6b22f8948b2c6bf5d9935a09c7674982a96f501149454c4e1e22ab0e6ca42f0503cdb1d8151600a12f0e1e373f9517e284067f20b23786462","ssdeep":"","tlshash":"89f00ef8949ceebccd70633995b79518a250c6184e7a68923492cb34f333004f36e39d","first_seen":"2025-03-08T14:29:59.985773Z","last_seen":"2026-05-24T00:49:23.366282Z","times_seen":116,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/zm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/zm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 688\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2b0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1975725\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0YpGC9gwbNDMvN4ENfeQ50k3MyY1l%2BWGd7SMiI5Idq4sArij3XHKHlDpvvIIEl7KmDKL8QEVl2UZVi27EaL%2BrqWaDxkGCXiGpw%3D%3D\"}]}\r\ncf-ray: 974793ae69ae0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":688,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"4c74a4699a5db48c932e5e8626ab45c0","sha1":"24b1c16919e1eaea149580f8bbb1c71cc54c2997","sha256":"7676ff4728809598bf9ac9763a1c5146c469f472e3f51efc531635675f047684","sha512":"618b9d4ba66c11d1037f727c9744f83314e67b51aba6ad15bf43b9154c0a05dcce2e23cb63b84623052d64d041a3061adbf7cd4069b5cde66e0ce642cf0ef62d","ssdeep":"","tlshash":"310149f7ed734c3d52c815f46e3801655881a52d26317acf940758d050d8f0400dde56","first_seen":"2025-03-08T14:30:00.059247Z","last_seen":"2026-05-24T00:49:22.692238Z","times_seen":114,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/download.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/download.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-10c\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":268,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"621bdf8aa40c0a561292c8e28dfa7404","sha1":"c67ce0df2fc4728decc5145059144952a88b712e","sha256":"4a2d122e0adae5e054c761aee881bacafb5a03a4641eb17cc4347631ce7b0224","sha512":"bb81e76dc4495cc6078da99cfe05b9c7e295be4c17438bf96b0be1cc9d7418e7f33e0381c8d30ab6fbc7527eec03525e947cf96f4d93abfe8249d07f6748882f","ssdeep":"","tlshash":"a6d02be7b0289e58f148430a12b8786a04f590fff81802e5f6423ad3f0d41c26e934f9","first_seen":"2025-08-05T17:20:37.223596Z","last_seen":"2026-05-24T00:49:23.304348Z","times_seen":74,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":221,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/tournaments/sec-tourn_desc-9.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/tournaments/sec-tourn_desc-9.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 72234\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-11a2a\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72234,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3439a5ace91626587f112d518a59ddb7","sha1":"c0786f98172b9d1033b6c0574e8407d506d7bdbb","sha256":"10b76905e4b42d4aa65f5ec832eca27e42e176585677eeaebecadf999730c5cd","sha512":"ca4c5cd8f82ed37d2ae3e3b1cbcaf2246fa34766966631482db9197fe3a6d1ae67573b8dd8ebed195f386e75bb5d7dfbf416286b6cd52c2def3831e260676ec2","ssdeep":"1536:a1AAsUV9mmlvDuBhnD7GxQ6H6fZCPkyCZ70LL6oeoLpsQrqq9zO:SUsDuBVCxHF+BoLTzK","tlshash":"4b63024fad5bb5ec86982bc5d22096361bf9309594f31150b700ec5c6fec595a0aeacc","first_seen":"2025-07-08T21:30:00.350395Z","last_seen":"2026-05-24T00:49:23.095447Z","times_seen":73,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":479,"dns":0,"connect":0,"send":0,"wait":70,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/az.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/az.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 673\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2a1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1966594\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KYU5itfcKI8%2BNfDJYG6XkiomF06jihF0K%2FBAbv%2F7YnjtfBzeRs6bOACsInFhPsb7S3WP%2BoSl%2F17%2Bg0LKCYtEks9i2DJxRl5ubg%3D%3D\"}]}\r\ncf-ray: 974793a1ac800b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":673,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"529bfc2d4faa7e8fe08b371fd6c8e218","sha1":"fc74721a98c8f2bc6e3d4b31be7f7bc139e636ed","sha256":"5b5e3c96a81fa5687b766ecbc0d6b2651bdaa02959cf0dbb81eaef677774fac2","sha512":"0baed67c7c8363ef81362e2b367d85d16233f9be64c55791292243188f7254af73ae20cca0d4b52222bffd951dd43774e3cf415430c63733374ba994bfcb5984","ssdeep":"","tlshash":"e2018383e3c30c34f9548c8b2ac1f1d1ea441d71d43632d79481b0ec2814ca48bc8801","first_seen":"2025-03-08T14:30:00.048086Z","last_seen":"2026-05-24T00:49:23.355976Z","times_seen":116,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ca.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ca.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 606\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-25e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1879915\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibHklSsoBkB7CGmen7POroGPVfH3e7mMHIqFlmms8tmkO5JBSTqgnjYOf1BBu9Zi0Lla5oIfOPYud5MsKM5utvpfc%2F0NcvdaXg%3D%3D\"}]}\r\ncf-ray: 974793a1ecb00b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":606,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"5b490048faa5531ffb8f588f73651c65","sha1":"6cf3a771eb1d23cfce02f4a350153ff0c902e202","sha256":"898f651f4b6c0ee4ff82576bc233dc6272f48093cc49f3ac571a127df7e3e484","sha512":"84a269b5d1984076975cef46e33a217fca2ea93811e99dd57b0c8a82691d8b6bcc6abd3e1d028ecd43b13fbbed737210b924e9d2da2078c98c2820c2413d7c78","ssdeep":"","tlshash":"ccf04742b3205f34cc9a0934b534a862d75b8475877c54931b91ba336417811b450d5b","first_seen":"2025-03-08T14:29:59.922162Z","last_seen":"2026-07-22T00:37:09.362536Z","times_seen":152,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/gr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 713\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2c9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1944725\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IP0rJaSSBYIwurE4PFAqNZDiARu%2FI95lEyGyjZ0I7JA7kicbGqy5Hq9%2FVOhIoV2OadpUSwcYWBEF2ZWKx%2FrkTn9QwuN5wgyr%2Fg%3D%3D\"}]}\r\ncf-ray: 974793a6fe7f0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":713,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"04ededcc9af41e54ef894dc62b68c8a5","sha1":"6fef82e851bd210673b0eff2a46db0d10606cfdf","sha256":"63558680fe17d9b16b994d043082203e6c981ba7e9d23f3b8bb6e553ee6ec1de","sha512":"f9e956a8f818f6ddd17a48aa8d1c6bf3ee62ecc4efd498707f4930d843a07a9eb81554ead5e9e492c325b5bb14fd00c2592c85c578bafda753fc7124380cc96a","ssdeep":"","tlshash":"8a01e48323ab2d004436375fa00b0ea28d608e2bc8001ecac9a3ca4822b006086f36da","first_seen":"2025-03-08T14:29:59.792568Z","last_seen":"2026-07-24T22:01:00.689666Z","times_seen":148,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ie.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ie.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 693\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2b5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2518069\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fAJqRtFcY0ZvEA2DibcQ%2BdCf0Ct0fwFkldW8jKUdbImcSGMzKUe%2FxOuAe8XjuNnmety7W4vs%2BgBCruqwdKMm0UWtwbIuXJ440g%3D%3D\"}]}\r\ncf-ray: 974793a81ee40b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":693,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"6f87a0d893b41ff80e317395113d2344","sha1":"d76cb25b624a56294ad1826e688539f4d854c3c1","sha256":"83bb64ac77eb529b67147558e5a2086f260fe372bb1b11288a0fb99906636259","sha512":"74699e767d2b93e1f12a98f158de27bba673903ea3241b771dfd2332ab1d9e0b6b0cb34899085063c09db59b1f7e61bb25c3b3bbfc946879961f784cfb58ecb3","ssdeep":"","tlshash":"91018881987959fdc33c62267339254fb873686cc21a07303560525baf56255f1f4482","first_seen":"2025-03-08T14:29:59.875649Z","last_seen":"2026-07-22T00:37:09.214107Z","times_seen":130,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/kp.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/kp.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 725\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2d5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1464947\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e8%2FyhEkAVoZKhlvYAvPUjbMl4KUr1kJJAZ1wW1B%2BCnaP7pgZNhMJWVTvkvlLiy3LKbeM04DfjghVfpC0u4F0zi12mEYkTpjMlw%3D%3D\"}]}\r\ncf-ray: 974793a86f070b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":725,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"60cc528b84669e4da3d6de15b31a104e","sha1":"8134c03baffa824ea597426bf83f10106f5315bb","sha256":"21387650a3f74672cbb268a9f8956c09587df58fd4860dfab4d353556de73139","sha512":"d60537a37b15934f10da9479c3e8f1b05031000e3eb00586a7795788cd218e7fcbc17e6dfe00aca9258a737b03e3d8d3fe4219e165a5e02c121881b486c33b8f","ssdeep":"","tlshash":"6f0194182f10887bcb59674a9f7be418d23f456bb0bb821f884c8a59f94520840122b2","first_seen":"2025-07-02T10:58:57.895336Z","last_seen":"2026-05-24T00:49:22.576209Z","times_seen":106,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gb.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/gb.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 815\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-32f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 510271\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WISV23apPythIdXcQSAjWHcsZxia1NbXJZEgw7rUUn%2FDW3s0Gu4zupQIcbOq57OgjVwYMVK10qzBTCtwvKKb%2BbF98J5nA8ZVUw%3D%3D\"}]}\r\ncf-ray: 974793ae09830b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":815,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"30e0f23c02fc1ac47ee00d5a6ecb2348","sha1":"8b752c78f78ea5d6c4de64cd788c95df9259c557","sha256":"67719906451088b26b713aec46910b10911ad6bab165f3d149dbd2a47bc3bed6","sha512":"4abf2f683f7b790b4cc22e9c53f7c7fc5c282052845b9524637f335cdb77c3ce3e2f925004cd61eb341d00b3bd6e53e6e4ee944a133a51065999b8555f90e0c0","ssdeep":"","tlshash":"cb01752e0f580e7b5c496562492b17c02f88f97fe53df38300605e0d37a365ae0e45b1","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-07-24T22:01:00.707403Z","times_seen":221,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/recent.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/recent.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-30d\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":781,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1395ed7cef479b43fd59f9cfb634e835","sha1":"8e88bbebe9fb76c00d11ae4aec6fef8fded0e758","sha256":"263af21d6bd432eaa93ea5c27080d30fb4739c4487e6455d8a0edda6b917952b","sha512":"4c58d578ff4908928400866aceb487f01fb0c48f7dbb664b8387eb708a11e0a62014bf1012a670c35195d615fb922388512c3cd9d617b4c6047a1a59f7fa897b","ssdeep":"","tlshash":"8c01f1fd719c10e8e1075fa0f932b025146a6c7e7fc902558056eae3b6105dc4016ef4","first_seen":"2025-08-05T17:20:37.504177Z","last_seen":"2026-05-24T00:49:23.062512Z","times_seen":74,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":458,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/games/ico/CloudPrincessHG.jpg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /games/ico/CloudPrincessHG.jpg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:38 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 73550\r\nLast-Modified: Fri, 27 Jun 2025 16:47:52 GMT\r\nConnection: keep-alive\r\nETag: \"685ecb38-11f4e\"\r\nExpires: Tue, 26 Aug 2025 02:14:38 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73550,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 432x324, components 3","md5":"975b3f6b9bcd44acf3b552de85f4aa03","sha1":"ecb6d408e7aa814b973b3e64dce4550bcde29f1f","sha256":"601a5809e03db6637148817b64687e57164acb8a1c7a09423d01e2416199a623","sha512":"ac0bfd583a0b7af60a52effc1065308662d400a66414512f7cedc6ecb2ad7d2a60a6e697dd427a72543205eb51d47298a32c79cc9a5370ad49d1c6bac4791f37","ssdeep":"1536:cx45rl8oTg6iHQPAp90tJGq/EuDSPkfZbXvbGowP1xN3h8tMc6:UAp8oTpiHOtJGqMuusBbXvbRox3tj","tlshash":"567302389ce64917f58b5ab29e0c3f561803ed26466645ffaaf86dc40e014d3e528f78","first_seen":"2025-06-22T12:57:20.97134Z","last_seen":"2025-11-17T11:06:56.079715Z","times_seen":112,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":268,"dns":0,"connect":0,"send":0,"wait":75,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kentcasin355.com/api/category?lang=en\u0026pr=kent","fqdn":"api.kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:15:41 GMT","end":"Mon, 17 Nov 2025 12:15:40 GMT"},"fingerprint":{"sha1":"5A:21:78:73:C1:44:39:14:ED:89:01:53:36:B3:22:CD:5D:DF:67:CA","sha256":"79:D3:CE:5B:49:98:7E:53:E0:CB:AB:20:5F:B3:F9:AD:68:D1:32:26:53:54:04:32:5E:A5:B3:7B:05:B3:CF:A1"}}},"request":{"raw":"OPTIONS /api/category?lang=en\u0026pr=kent HTTP/1.1\r\nHost: api.kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://kentcasin355.com/\r\nOrigin: https://kentcasin355.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nAccess-Control-Allow-Origin: *\r\nVary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Max-Age: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"api.kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/banners/welcomepack_desktop_en.png","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/banners/welcomepack_desktop_en.png HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 1835422\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-1c019e\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1835422,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3376 x 1000, 8-bit colormap, non-interlaced","md5":"842684b5a27606a0f922bccbcabc0331","sha1":"6a1363bdfe525d85d1b7b87930e4710703588012","sha256":"1ebb507ad4f8f6ae6486f59a1462006bb31fad3978fd288f49e3ea02366045c1","sha512":"8ded42ce41a212f97df688f87825150329cf1f67d985565f9a199e02f15680100dbfcb74c6e937dac15c90bbfcf571eca2d93496dbf054a372092a4776fe92fc","ssdeep":"24576:x8xU8y4Sa99Km2vzTjLILJlogMwgfmOc6UZ53T:xuy4Pm7TjLILvnM/fWX","tlshash":"3e25330db6842710eb646ee30e7eb5c17e9a7e4152aa4dc85148d4a3fa05bf30bdc768","first_seen":"2025-08-05T17:20:37.520841Z","last_seen":"2026-05-24T00:49:23.703521Z","times_seen":72,"resource_available":false,"data":null}},"time_used":726,"timings":{"blocked":461,"dns":0,"connect":0,"send":0,"wait":68,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bo.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/bo.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 663\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-297\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1746824\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K0sEbJFtIhvxUa0jaZVIaC0JSo0D13UwCQ7ummR%2FfLEX%2FRH1tT0P3yNEYEhfHf%2ByC1r220OR6SOhQrpEleh08DV7XO2z3XkWaw%3D%3D\"}]}\r\ncf-ray: 974793a1bc920b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":663,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"67c1fa89897722728dc4d1f97be5010a","sha1":"e79c9ab4cf0a69dcbb5479c8868432191b10e079","sha256":"bbdd86c0da02f09adb78861af7b1ff74624846abefdd2625a2ced944e052c5c1","sha512":"a61d9a800122271775f1f95f9ea81d9b72fd84aa1a7a4a169b3005c97fcb5c9c919c2a98959e0628da48faae94d49b3e2856db2142da0d4936d1c9d23e5de3c4","ssdeep":"","tlshash":"db0123844571494fd28fcf32d0cb08d29f2198999001d12d234619fc691ad24bfa29ab","first_seen":"2025-03-08T14:30:00.014597Z","last_seen":"2026-05-24T00:49:23.425962Z","times_seen":116,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/sh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 703\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2bf\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1975725\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dlrt0r6HKSHUZSLZRSy2qP09G%2BaFOoL1Kry%2BOSj5gl%2BhBHFqc%2FYzek5uvx%2Fp1VFGB5rVj%2BUxaj8LLi2PpflFuoQU37Okkf0dyg%3D%3D\"}]}\r\ncf-ray: 974793abd8930b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":703,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8e3739d94eac88a6e58b231254ab8535","sha1":"d34bf8cf0713f4f21ea4be46e3be730ce589eaf6","sha256":"2a9b1d0faa3aee4aea1fafaf7b74507b4336283a5082ff097d2564c49837f461","sha512":"9e4e432c42379819e3a49536fd7688bf4b573aacd6fa2bd052139ff0a90173967b9447371347af5b082963aa2e5a9ea94d652c406498b3a284a76e788788304a","ssdeep":"","tlshash":"b301159467599f315020098551fbf450f492cda9932f2645151fc51625522f47afe392","first_seen":"2025-07-02T10:58:58.125738Z","last_seen":"2026-05-24T00:49:22.568269Z","times_seen":109,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-25T02:14:31.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:31 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31221,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (29278)","md5":"a574b640baf2a3a47bd5b005acb0cea9","sha1":"8c71324e30d89f58cbcd7fccbbf8d25a89b47b4f","sha256":"e2d8af2f9d904286f1c1f7bda4f51644c122f2ec562c41bd13705db1c87bf5de","sha512":"d3a06009f1806efcbe6ac1a746b04915e2c3108af2220ea909df4163e2a16cff81eb58ed235b7a1bfa1be8c441b29d21b8a185a126d5ebc3528b034320697291","ssdeep":"768:tEkFomUz5n6nT3mEOYVGkyO5CK/sGN+k8a6aQHAgttuBEQxSuu6mqmcV+IFVdyb0:En6nT3mEOYVGkyO5CK/sGN+k8a6aQHZg","tlshash":"99e24d47fd2653851217d85b1885af27af33bd22803d0126e757211a7abb84ff39a7a0","first_seen":"2025-08-05T17:20:37.458553Z","last_seen":"2025-08-29T16:05:26.814161Z","times_seen":25,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":147,"dns":0,"connect":66,"send":0,"wait":67,"receive":1,"ssl":79},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ck.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ck.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 666\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-29a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697706\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hZj1qOG3aFbyjDUPwziR0DVKjQPDXwgSdSgYe%2BdX%2BXpmwvE5Va8zC11mF60BbgQoxMltqVCSXxF46dDvH7wkNxvXOPKmi5DfNQ%3D%3D\"}]}\r\ncf-ray: 974793a23cd60b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":666,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6d565c836e6dc581d3c2e5fad6f03448","sha1":"e6d99662fc2c51aecd179497e80b12ddddfc0da5","sha256":"50af200a57e8a496d287f83a17742a7c72837a2b8da949b3628ec157e12736d1","sha512":"d419dffb7299c9857e3fd4f499398b61f33e9c55b5be03035aecf8f4b713d330c06e5b27b7144f8fd33384ced8eb3af6ededf24b1234b0d32fab0c8290f8ceaf","ssdeep":"","tlshash":"7401c8cc4314ce21798c408ba00d443cd5fe05502691724dc42de131e24378dc3fc86f","first_seen":"2025-03-08T14:29:59.866562Z","last_seen":"2026-05-24T00:49:22.903352Z","times_seen":114,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/fi.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/fi.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 663\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-297\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1803587\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pR2Jcoe08Dt9SME%2F52SkWYBFgDamxuOJZexUVbSng82d4Ec5p9dCPq2UXIEls1GP8ZAcB3nVkoWqbQWG3tBrfKHakigrs%2BnQZQ%3D%3D\"}]}\r\ncf-ray: 974793a3ad730b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":663,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6349b09839520cddc48ff8230dc31e37","sha1":"e37504b5d6802a37cffb6eb1b6e7478c6eca69e7","sha256":"e66d0dedc2c4c07ba0fa2469787d3e2deb88007f541a82a989bab393d7f57982","sha512":"4d7aa28d8de1713afe7675313a372f43cdd31cab7a68cac20e57de893dab2b27ab2569b873baafc9cc27843e87a303e127ca1bbe4dec5024a8ad7f84b3afd019","ssdeep":"","tlshash":"630168d02fe40c18a7f2c911460de04899119f07c046cc0381d7c6fc062352e4e9e527","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-07-24T22:01:00.675485Z","times_seen":140,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/iq.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/iq.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 694\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2b6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 867681\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SqHdBjjFreerRq7t%2BDhPQYBdtibH8WE2K4WrFmrKme0ofyKv202gv60RZDPaTfdtLRdzqrjgiG%2FjfoBCBNliIfUUVLHxOAmnqA%3D%3D\"}]}\r\ncf-ray: 974793a7fede0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":694,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"3f98968f040388d79ac6e1305bf7ee67","sha1":"4319f7c31f0b112776c53bc7af33fac2fba524c5","sha256":"997f199bd64308dea460ff613be6c391ba6371edce90f0250f18e098e8b860d5","sha512":"add275bac75a6a33f1446fed29da21bea26d866119c7b7c4a123acf7523a27e312ae5ceb4f3b744f6bb142ec8545f4b78f3277465e35b97bee537c8da2724135","ssdeep":"","tlshash":"500144dc12418b2bdb46473279a1e60d652e6607612b52eb70d9494e5422a3114a42c0","first_seen":"2025-03-08T14:29:59.838327Z","last_seen":"2026-07-07T17:21:00.655845Z","times_seen":121,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/mc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 584\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-248\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1879365\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pfOGRgTi6ks4knf1qXr7AFAAkuWF5crLxidjG2eOwHJ3TVRkX3AuvmFWFm0W0IsKF1uqcbgXGTg3OE9PVVwt%2FKHEsV88JX8UcQ%3D%3D\"}]}\r\ncf-ray: 974793a9cf890b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":584,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"850e4d836e5793145457567a58019fea","sha1":"081c2b59454bdebcae08ec09a163a59c17f7aa9d","sha256":"eca5cb8f41c4521e96d60151d1499ba013eb944e7b706045324221e407ffaef0","sha512":"0f825be9a9209e688d12bb0eb8e51d68f8d30435798daa3bbdafe8cf541628fcee08aa9bdd75259b0e550be20eddb43a502b0759211bea9cce89fea17d9094e9","ssdeep":"","tlshash":"16f041f117344efca6be852ac40749a29857e4381f881e430c32a0e03da4f74e36d092","first_seen":"2025-03-08T14:29:59.800767Z","last_seen":"2026-06-04T12:58:41.710178Z","times_seen":120,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/games/ico/ZeusvsHadesGodsofWar.jpg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /games/ico/ZeusvsHadesGodsofWar.jpg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 96285\r\nLast-Modified: Fri, 27 Jun 2025 16:47:52 GMT\r\nConnection: keep-alive\r\nETag: \"685ecb38-1781d\"\r\nExpires: Tue, 26 Aug 2025 02:14:37 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96285,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"0a2785d289ac9908c3f0b08d3fa7d67e","sha1":"6524539a53795b5836c9150cba82929f42677b9f","sha256":"b0ed05a3e532af297c32f4ec93db8ccd15fa5cf1dfc37cbe5404e8350cfa3bd6","sha512":"bb2536a4e84f382542bb528793960d757721edffb28ecba68f306589cf7680ccdc2dad3cad5ccf3623b8b690853d70a4035d897481d815c02155946805c64ea7","ssdeep":"1536:sEspO5IIVaPErIhqJvUo0dsLE/hQkFN2wT3BSffkWIugFPD2onrxOrkWZ7PL2uE+:yc/xIhqdUdQkFNR1SffVgh2Y8Zj","tlshash":"11931226cb984ff871e341b5c7853d80ac6b823b363dcb272ed81694c8f4cc6b162661","first_seen":"2025-06-22T12:57:21.150939Z","last_seen":"2026-05-24T00:49:22.726915Z","times_seen":216,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ar.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ar.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 593\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-251\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1374291\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XkRMAXgxXWpaa0iA2uGyX2h36Cq10atE%2B0fBjOeuw%2FW2IM7dFBsOCrg5Uyb3%2BvWpk1btL5YO9zNkHs%2FJZdmnQonjRiDnjrFUxg%3D%3D\"}]}\r\ncf-ray: 974793a1ac7b0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":593,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"b93edbc0a8df85b6419e4c61a434eef9","sha1":"cc084502c02a558c8c7d64b9a4176573eacb1d3e","sha256":"04d982cd338db466b7714830fec0cb2ec4fa859c73bb7a9b73179a4135aeb92a","sha512":"86db732c123bc79bb221a4168061cf2465a320c6e201be8ac54021ce50dac499190c9018bbaf82c0551c938d0e200a3b9c403659772c463217ae1ff43477c45f","ssdeep":"","tlshash":"28f047dd43184e516f20d95f504dc846cad405a09c497121c2fcff9926b3e249db1203","first_seen":"2025-03-08T14:30:00.051328Z","last_seen":"2026-06-16T17:26:48.295818Z","times_seen":127,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/bt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 686\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2ae\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1879364\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zzf6B74HpMcRfIL9C9YZCWrOPfKz4BoM1aTgVG2LaJBQMKSu5Jpveh%2Bq8OER5gDpBO%2Bb0mcxJ75hVr9M1RWsCLFw4dNj5tsESw%3D%3D\"}]}\r\ncf-ray: 974793a1bc8e0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":686,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"c63a61276c26e59e90982e54ae14db04","sha1":"18b4a1b87e2c9650ce35a44cee4819c00c1af99f","sha256":"960d6c32192ef67b60dae5818ad103cb9a30d419ab33f286ad007c954deb3051","sha512":"a8ff5d6443306a5674dfd5b39cc6327c26c4e856a3e60a79c9b342d205c220112529087ade934f5692094ccbbb961a71d8e7d5e57aea22124a4c464e1f45aba8","ssdeep":"","tlshash":"32018884bd55845556e8ccd2c30f6c15611d63c4e53d862fd7078f3c2a2b42550dc316","first_seen":"2025-03-08T14:29:59.790169Z","last_seen":"2026-05-24T00:49:23.46596Z","times_seen":117,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/sv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 641\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-281\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1801593\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WmQDHP%2FHqA%2BUTg747w8nEWM2964nsDgt7SME%2B4iMaZHlW0umUA0d9f4SCTWAFNmPPKOgBJMa9GhlPiI8ymAiDfqEmFr2m6RqGg%3D%3D\"}]}\r\ncf-ray: 974793a27cfd0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":641,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"f361e21d4e24a2ce70b1e72c4433e560","sha1":"793f2498f09c4124c7e06b96915fe17ea67e3132","sha256":"9c0043557de0c5125473cd01244f0b21bcc73e0c14f271033c451a1516477b63","sha512":"d7be0e9033e99a59398f6372d6493549d552d15607e4a22702d89f0691b42fa2a7bbb755ca53dc16d45a2fa70f41c7341094a78d61e0920d967b61d53fcb941f","ssdeep":"","tlshash":"d4f023bf1911a6aee82e4f0815298a9d54cb05a08211d8258b66c339f63675a6df2219","first_seen":"2025-03-08T14:30:00.010869Z","last_seen":"2026-05-24T00:49:23.25957Z","times_seen":121,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ni.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ni.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 638\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-27e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1966595\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KCYbQ10hPry2aHkZq%2F%2B89JqKanpqAhlEy449uUm2vW4N0c8o9wzTMfGfnryPtzI2T0XlquCBKKQa1BaIFHrDPz1wpLe55Ng3dw%3D%3D\"}]}\r\ncf-ray: 974793aa8fea0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":638,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"7e376b397165e4b3f7d9ceb3db57fe4b","sha1":"5213ae591354f8635e591d74b33627b6d2995b52","sha256":"846eae803240d5b1ff47872a6b297d48279c4a8ec9ee8edc8d8fc9b4b0793263","sha512":"32a62ad8a0937ebb02c72f9d50169c88c7b39fb5b4a0e680a08fd7d67baa86444ce3057387f4a5c1d56aa5be47478ee684885ca10e7828ad82f7aba11bf32fdd","ssdeep":"","tlshash":"fcf0b7ea73407e7818295b0287fac9b5d364b6a8874c984be01f6d06ae06564fc24847","first_seen":"2025-03-08T14:30:00.05006Z","last_seen":"2026-05-24T00:49:22.681441Z","times_seen":116,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/rs.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/rs.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 786\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-312\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1966596\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SmQ%2FiSfKe8MYjFsmwbG4J4ryCjuyA29m5pS0J2c2vYUmAOlFMD9uO9Sr95XnuUbeay%2BLDaru2Zad38tqQZQyaAbHUvs009kDLg%3D%3D\"}]}\r\ncf-ray: 974793ac78c70b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":786,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a0a141e99dbed7626c18b5b802303b80","sha1":"f92c69d821e62c2e667c7a189bb1ea301006393b","sha256":"373c0224c40b02fb523186a6bc4bcbc09768937de85a9691d7d3c8432bae2ace","sha512":"3aba8d9dab9e3f9b5b50b245b7caf550a3e2aee742c5fc9351067620252d206a99e8ae50d0e0ba2ae75811b5fd5edd5687bb32d010d55aafc0572c8afceed95d","ssdeep":"","tlshash":"3f0175e5e6b855d1f450d2a3812b2b682a0327170edad799d9a876a0515409cb1e4741","first_seen":"2025-03-08T14:30:00.045027Z","last_seen":"2026-06-06T22:34:56.619172Z","times_seen":120,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/sounds/notification.mp3","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:38.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Mon, 25 Aug 2025 02:14:39 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"68a5820a-16b0\"\r\nexpires: Mon, 22 Sep 2025 18:50:22 GMT\r\nlast-modified: Wed, 20 Aug 2025 08:06:34 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-08-23T18:50:22+00:00\r\nx-node: m9-up-gc69\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-07-28T04:56:45.463772Z","times_seen":16642,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/logo.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:32.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/logo.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-55e\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1374,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e9f4ed21539acd13c474dc980a5595f","sha1":"b8e12510f7bce5e6e1cfa11f20c69dc746da7f4d","sha256":"eabb425ab245fa661f48fcbcce101112a4e3d21355ea1b0b5a32dbcd78f5d576","sha512":"24a0597710b8b0c13d03b59800a70da810993cd37db7ac2782b073268de7be96912d3e833016df4f927908d1386c224140dd21d713891f15010c46c703709051","ssdeep":"","tlshash":"5421dce567ed5fe0ca608ba5d97cb0b5712fb4fa2780c2ca5bd04d5061b54cd884cec4","first_seen":"2025-08-05T17:20:37.146266Z","last_seen":"2026-07-02T22:58:16.593534Z","times_seen":81,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ba.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ba.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 734\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2de\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1647832\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KTs0kgpq1ajaosQujNBjRGbqDweyzo51DPWHz6UM1iX5GToA5Rb18GihOfoaoSOJ%2Bcio97BsNnND5uDu4YAoRkZjcy0BaaNc%2BA%3D%3D\"}]}\r\ncf-ray: 974793a1bc960b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":734,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"5e1318caf1394e8ddd7b1a9bcb28fe16","sha1":"10f49c5eb3431dbc2c113511c2652b66e5d95c32","sha256":"fbc74d7a855bcb4b20af7d2e39c0fc556b18e19bd4a4ed8fa3166bc23c34620a","sha512":"da354d9ff72130c87381dbb0b7e7919855abfed37326e6fb50846f93981f03548786c2830558ab8af236160b4282d073b01bf7244efe839b07d74c819c495101","ssdeep":"","tlshash":"370183c69b26ce17fb544c81a74f262659108c358e33d211820abd202a3544ee1b3796","first_seen":"2025-03-08T14:29:59.998909Z","last_seen":"2026-05-24T00:49:23.286864Z","times_seen":114,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pe.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/pe.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 545\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-221\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697707\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VG3%2F%2FJFL6iadKS17gh2ed0g%2FYilz%2BprzTT8LhYDwd2fYKtHH%2BZuMZQA3NnKhFAhf1H96apzYre9D4IZaFxSsbAHmHMf0Kl7m%2BQ%3D%3D\"}]}\r\ncf-ray: 974793ab58460b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":545,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"409637ba81a828b0db864d4827671201","sha1":"4d5d5b461844c5e04b8876189347d782c80ec7f3","sha256":"8d7c36788298b41ab53bf75e44436763c1a9cf94fe799392e2705330ee108334","sha512":"b3a3acac9dc94eb8c2828370159e17956a8fd372ce4f506ceb2806f576b533aa471f5a127f523025d49bde1aaea87f96f40089bb8041444705d1979d09bc860c","ssdeep":"","tlshash":"82f02665dbd0909dcc9e50aa60d35c24b154b72d545e870f3e30552d379b109b144493","first_seen":"2025-03-08T14:30:00.057685Z","last_seen":"2026-06-06T22:34:56.604884Z","times_seen":124,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/mf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 643\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-283\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697708\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n0rt3vb8P3zgBgnDGCqE8lLg1SePX8%2FnUyIXq%2BlMdyLlVcz6MODEDtXSGxT0x8F9L%2BpM%2Fo1aw9%2Bq%2BmNqh%2Ble49Db6LSf4Ofr0Q%3D%3D\"}]}\r\ncf-ray: 974793ac28aa0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":643,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"b0e56166bcfbb508c27bb5644d28e682","sha1":"1e341e58301426977090680443fe73a1fe4cc6f6","sha256":"d7d6fc0bbfb6ab0f62b9f84bcef35d852c67f663cbd40955e595bbcf2519d314","sha512":"f5f883b84deb97624b5d916cc3f852eb1b1135a8d981c3a1d006fd8c0704deabaa2e8a174666cfc132cde903584a83d6a83edba7e2026ce59eceddab8ddae834","ssdeep":"","tlshash":"fef068651541dd7ccecb5991a3e79d1062e6d253471217149c32b41f6d5d3050d3774d","first_seen":"2025-07-02T10:58:58.141069Z","last_seen":"2026-07-25T23:43:19.253369Z","times_seen":233,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/categories/slots.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/categories/slots.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-194\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":404,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0f0221b3b1167d4c8c77539b4f55cfc6","sha1":"5efd109f778c3fb9ebe0bcd1f8b94de348cce651","sha256":"5f8b129d584c3b016f320a62381ad637a3b3933fb53fae47de0863dcf4fcdf8e","sha512":"094842b35c36f19abd76cf0d2125b01d989b7fcc453e901b13251d847492c3088e4b5993d30dc43fc99d2ae7eca43c4cf00ff643ef2f058c0270f41418da960a","ssdeep":"","tlshash":"d1e068f4926c46acb04f073b8f67878ca71ef4eae4464106b1cc263a3301092d9079fc","first_seen":"2025-06-22T12:57:21.043958Z","last_seen":"2026-05-24T00:49:22.885173Z","times_seen":138,"resource_available":false,"data":null}},"time_used":778,"timings":{"blocked":711,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/mulish-latin-400-normal.16e241995ddafc55.woff2","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /mulish-latin-400-normal.16e241995ddafc55.woff2 HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/styles.297578458c20fb04.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 13308\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-33fc\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13308,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 13308, version 1.0","md5":"4a684bb9f8ac87840ebf9ecd11ac6231","sha1":"33e5298d295711a280e246ef054185113e096b30","sha256":"f86eb1d613257841fb2fc63c9330319fb84c7bc8d0f73d45f85533eb1659d4e3","sha512":"ca98a378863c5f54521d7aa9edce454a4329e15a2c8a98458738953b7eb68d68ff5378ee5b5c076dbf1a4e95c73c4c30b7a0c741027693e51eeec6081102cebf","ssdeep":"384:zIKfmwb7W3j/hZ0q0YefLhpBFJ6QT7ZeToluvj8K:zIKvbST10DdjX6QTFeYuvD","tlshash":"e752c073b64deadcc8d48a7593b9a022bec0526685892efc55376c433f0fea11581c7a","first_seen":"2025-06-03T04:36:48.16898Z","last_seen":"2026-07-22T11:20:04.523977Z","times_seen":217,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":129,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/kw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/kw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 726\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2d6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1529833\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EBt4MGcW1bNbayqYDSKNmwWXbzLDx9gwyrYZaBaNNCUk7hNJjZJH220LLBVv9zRT%2BOF8XuCPSIPy%2B6awR83QnFPpGvIwhLIuCQ%3D%3D\"}]}\r\ncf-ray: 974793a88f0f0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":726,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"c428b2b15a0cbe14f0593b7c22565235","sha1":"c9b0c9bce6302b1b157ee359b437cec427ac2489","sha256":"162923fb87c9b762e3d4355e1abf7a90030fc783012f4edbbb28374f42f78635","sha512":"ecd0b0cb9aaa1a92cea2ceb20f70ca9e905aafc0dc04ad3458352d059b6524bced6ef8a210e6a9ac7c7b599943e1f1d7fca64194e5d245848af41ebb63247144","ssdeep":"","tlshash":"d60160570a59b1a8e728c2242829bd203e28c0b66611103423b450b98fa1fa142c91b7","first_seen":"2025-03-08T14:30:00.008049Z","last_seen":"2026-07-08T04:03:21.399191Z","times_seen":125,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/lb.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/lb.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 622\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-26e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1960202\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vfIX5823mZrZVbRylx6qCaxQQzmP4BPF22G5uG98P3WzGVkqHk07PimmmBwo9sKAYrqbXS0MdW23gOgY9TMgTW6saqjZ1rmE4g%3D%3D\"}]}\r\ncf-ray: 974793a8df2d0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":622,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"3510cc0d39d9136efb0d4261eec146a7","sha1":"6cd7b16e09148924ac196cbe0009ef6e701db424","sha256":"a7d42cc8e457a54bde2cacf75b4d3cf42cac55081c236af7644737e45ad191fb","sha512":"9b3a079a61744d0059db1cedceb36fcff760690eaf69a3e29e7fee6d8601184a97ab4119ce3d0aeefa89bc16248378f23c3b02e57012780825de142ed4dce90c","ssdeep":"","tlshash":"9ef062aea742cd3d5dcb10a8af22f400a6010fe00c70b544da21389d309b329a7cc102","first_seen":"2025-07-02T10:58:58.004803Z","last_seen":"2026-07-07T17:21:00.667439Z","times_seen":115,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/banners/shop_content.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/banners/shop_content.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/webp\r\nContent-Length: 34152\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-8568\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34152,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b6bbd5a33d2b3d384ef0e6c39a4f535b","sha1":"06ca8823eebf70ffa0beca2d81fbe8678b5f22b1","sha256":"ba40e5b52247556bc8b0b4a2bbc494ee7236c6effe9a66bd2770865cab9dbd6f","sha512":"c51157c1fb6aeb9740da0008621ca41b02ffda9c7e9eb370a74e265899594dd608f5ef3336dde127be409f499bc071c113ba05826e198db1cd355f88ba58d44f","ssdeep":"768:FxTcSDMf/bcXFXBM70+dK6bCM2NYZGz6xjNDsl7GjcKUI:LTcSfXy0AKUoO7DC7GjcS","tlshash":"2ae2f1a6cfc99dc33ba42c0dc1150aaf8c7bea47852e712c46507c36ba5840f7963a99","first_seen":"2024-08-19T18:32:15.320224Z","last_seen":"2026-05-24T00:49:22.590148Z","times_seen":83,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":294,"dns":0,"connect":0,"send":0,"wait":66,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/burger.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/burger.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-445\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1093,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7af4ec6d23eaafbf06cba74964e83e3","sha1":"7094deb37f5f24d7ee9faf3bf1d92453d873a710","sha256":"201378ac83438389107eaa92d5d9b11029b2ba49fc1bc397a03f8a1c2976c7f6","sha512":"42c773daa99ee022bd1bb60602ba9629065482833fa9551eddcfbc865669d248e8d63b9f331504df552038358ce6049d2535a9ada00a66cfe806da737d9519c6","ssdeep":"","tlshash":"fe116afff3de86a0ba0fc7757b121126385329b91466dacd69640880d852bbc49899c8","first_seen":"2025-08-05T17:20:37.164686Z","last_seen":"2026-05-24T00:49:23.044402Z","times_seen":73,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":260,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/levels/1.png","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/levels/1.png HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 7130\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-1bda\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7130,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"0447756be5e36f55bdcf57d771c30414","sha1":"92d2b6a34cbfde17376f091d5b532d2afffe84ce","sha256":"639fe4c3759f5212c92fdff9a78e6be9b77d3041841b4166c47f698d464ef0ea","sha512":"b0858be39f55d61e18910fbda4c9f66a28dee88c7683daf5eff0ac80971d237780e9c695c2c452fcb412e5516a376a2583e5479e87010805f16ad9eb1f0d76a9","ssdeep":"192:NND5LRRe/4JJRg8U8Gwegv8FTBFAOdPgijAy4:z/w/ug8U8GwexFTfAOdoy4","tlshash":"a3e19eaeba12c11aeb7c08051b9b576e8a28e03df45c5a91153af1cea37e3441943272","first_seen":"2025-08-05T17:20:37.530177Z","last_seen":"2026-05-24T00:49:23.026087Z","times_seen":74,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/sn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 572\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-23c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1103763\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=khm9WWlSXP359SFck8gPHeH3NSmbJjhboL8Xpt9n2bqC8aoEIhQE3836GJ9rh0XOKE76MNxdMFIJL95weDG%2Fn%2Fi%2BmQ1N0RBxdg%3D%3D\"}]}\r\ncf-ray: 974793ac78c60b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"1212de0254b5ea1c0aadc2c5bb44902c","sha1":"39ed04890273765e06067c48f6b3568d58226863","sha256":"f0e54d1f7c7f22e339ea6d7a4c4d9e6c6dd9135d314191b28a67e5c910c2a140","sha512":"eb2b25e79eb55604e291069676cebaa4bd9a47149c8f5a83b00ecde7ba476048f555227fe281bf678e8cf5922b5cd28d7ac9109f248eee7c74997e6a5d529853","ssdeep":"","tlshash":"c3f026d25d514c148cf15237e65b85416b548dbdc0e3d831306c90b2fd061495ecf1d9","first_seen":"2025-03-08T14:30:00.016538Z","last_seen":"2026-05-24T00:49:23.67541Z","times_seen":117,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/bonuses/firstdeposit.png","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/bonuses/firstdeposit.png HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 4160744\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-3f7ce8\"\r\nExpires: Tue, 26 Aug 2025 02:14:37 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4160744,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1976 x 2208, 8-bit/color RGBA, non-interlaced","md5":"1c3a0817539a81e5f6d6cd8b92aca185","sha1":"8d32463e53b4e5f3aee386ed853737042160232b","sha256":"5a547e2dd7ec9a3d25df4256bc3f57dcc1a245f4589873abb8393865c011925f","sha512":"6b03dd698212fb1fd3ba00bc449ca17a2020ad4d0b499127ab27491f02e6306eb4c474cb685eafbe1a7fc3aff32771e79b14fb56a7414711aa9654e173db78d9","ssdeep":"24576:+7ixtgQBPZIlE2bt8U6zTy31YD9yQcTFC7EPvhcsaRQ2oh:eiDgQBKlE2qU6zTyF0yQF7Mv1a6Zh","tlshash":"4c25331a8a6cc847c3cbd64a3cdc0722ae547e47e33760b47d9ae561128498d3b687df","first_seen":"2025-08-13T10:56:46.836173Z","last_seen":"2026-05-24T00:49:22.751535Z","times_seen":31,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":350,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kentcasin355.com/api/games?lang=en\u0026pr=kent\u0026device=1|2\u0026page=1\u0026category=30\u0026per_page=48","fqdn":"api.kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:15:41 GMT","end":"Mon, 17 Nov 2025 12:15:40 GMT"},"fingerprint":{"sha1":"5A:21:78:73:C1:44:39:14:ED:89:01:53:36:B3:22:CD:5D:DF:67:CA","sha256":"79:D3:CE:5B:49:98:7E:53:E0:CB:AB:20:5F:B3:F9:AD:68:D1:32:26:53:54:04:32:5E:A5:B3:7B:05:B3:CF:A1"}}},"request":{"raw":"GET /api/games?lang=en\u0026pr=kent\u0026device=1|2\u0026page=1\u0026category=30\u0026per_page=48 HTTP/1.1\r\nHost: api.kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://kentcasin355.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11583,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3cfe52b2f4dfea957133a95a96191ad5","sha1":"08986aa3a1a04f51cb0bcfb051812055668f431b","sha256":"4dc82b546960bcae66136174c15ab8d278b0bb468423f385b542d70e851a9907","sha512":"93ca5ba72ddef656816fe0639d3ac38390f772b1b8020c33e1af5f9d6fd3fe32c02224c9f5f6d6e6ee7d7c556edd81245f654be7d39922cb2ca7c2cc6c4386a6","ssdeep":"48:YPcI9/Xbqe4A5MSoYtLCQve5r6Jeej2PmfBI+3HJaunioYaYFW9ORVNwIQTqFLtq:qcIZMSBrvqr6JPyPmBBpPnSFW9ajQd","tlshash":"a8323aba04280cfecf1726a91fe3be9e509d40c68acddf6414dacd4c49edaf6440a576","first_seen":"2025-08-25T02:15:23.846603Z","last_seen":"2025-08-25T02:15:23.846603Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"api.kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/br.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/br.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 727\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2d7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1882829\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ePibQTsB59OIu8gK9P3S2CGWnO4506tC28Psf0ZNHZfqrupt7sb%2Bi5mMjyhYJPWGXaYpb5A7H9iLDcKWgBX7TWp1c6wst61NQw%3D%3D\"}]}\r\ncf-ray: 974793a1ac750b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":727,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a7dac4af7952a817507dd99472fd8eae","sha1":"14a56b2759fcc4b34d0af3632818ec71cac308bd","sha256":"91c4bf76a3adae8495d6157084a3417ccf119c794eb2cb0a3a71177dd4723363","sha512":"e534fef34d2033a9bfb46b753791013e2a2c6a74e835c745e5abf865d328658cc97ae73af482fc0cdcbc76083766b267b72578ceeb5c72b4184229304362230c","ssdeep":"","tlshash":"920194e45a44084acc244328d4ba9af0cc2344d44cef67888313f6f1a77916c94ca4c2","first_seen":"2025-07-02T10:58:57.913541Z","last_seen":"2026-07-28T06:01:00.68014Z","times_seen":256,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/tournaments.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/tournaments.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-6a3\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1699,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e15edb0047f98d1b64ce4a4d4a79c670","sha1":"9fffc6cf696913da48da33d1ab1703c4d9785e34","sha256":"5e8e6239d9dae59cf44a70227be537098b03dc422cad8aed17b24decf32b0c45","sha512":"15e8ff6bd2aabb1248d7eecf2085b37cf721942bd404f74461c1fc23a712e3869e72cb8f4464268b7d06595ea0d78e6bf01f2b4507263381786f78fdac14b2b0","ssdeep":"","tlshash":"803194ff4710f9c8f187cbbade132d21316968bd5d8282ca2570e6e0f830351c959c88","first_seen":"2025-06-22T12:57:21.026936Z","last_seen":"2026-05-24T00:49:23.309422Z","times_seen":137,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":445,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ee.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ee.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 647\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-287\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1803586\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2BS4lawJEiD%2B4kcq%2FNXy8CCPzmQ90JVLgMF9mtMrSmbvIhFWElFOxBBh%2FbUq78%2Fyr8HcKCZCse5qNcSRPqx4VRisDZ%2FHaUN9kA%3D%3D\"}]}\r\ncf-ray: 974793a32d390b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":647,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"dcdb80d1efe049edd162c4648e546017","sha1":"da1cda955ab83371b783e23e525470ba70ab3ab5","sha256":"b49d79a2a973a2b378ed5c5e02711202dd7cfc9e5df821d1309b4cd76a38e7bb","sha512":"5abc975e28f2d7a45dabae605952ab68c534de41b8df407eb40a32054661911ee9ea3f6ce9075ffb4df83a4a484a33c45252f9cd181ab6e8ad464ef6bdb9fcce","ssdeep":"","tlshash":"faf0b7faa3c79d8c95021131d1f4f05595019d2a47737515c76cfb3d037668198eddca","first_seen":"2025-07-02T10:58:58.198137Z","last_seen":"2026-07-24T22:01:00.681515Z","times_seen":127,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ge.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ge.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 701\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2bd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1901454\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i0akkQOkUzONx87DAX0I6Cit99LmC1qVNnMZb35SHPKmNSECCX0iKiQiHps7P2Fp0IgobSjib87lWMhG6V2%2BLAL2O1YbzUBY4w%3D%3D\"}]}\r\ncf-ray: 974793a62e3a0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":701,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"e3ebb76cfca19ada25c2d24c9606b891","sha1":"11fb5ac82e9a988dc602e1f41105d68591aac7df","sha256":"6706e356e059f9cb35260d6a786f3d00921b9f56f94dacb9972c168e167e5c79","sha512":"838a07357000c4b5fde06cdbc8dab05b03e6b057a7cdd1e0daaf13e34a9535cffc12df7f7488b90780e816a214ffa9cf2530c2666fd9f9510992d3d48de24b26","ssdeep":"","tlshash":"070144f67f42f47984611595e8435a99e4e202329e9594126b70bf33b43d4a85584f02","first_seen":"2025-03-08T14:29:59.924357Z","last_seen":"2026-05-24T00:49:23.081858Z","times_seen":115,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/it.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/it.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 493\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-1ed\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1881479\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2FUa1GOdcV2E4SHdOoLIRbVlhmC%2FrcN%2BYUtwrhT6Z8EMSeyVe3zeOFAu4NTMVja09epXjMh%2FHPkx%2FmyVEnx5l%2F04PVZpGQf4%2FQ%3D%3D\"}]}\r\ncf-ray: 974793a82ee90b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":493,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"148df276bfadaa8a19e3f278eca0f63a","sha1":"bc3f876a6d64f320ff63b06cfadf06208547d668","sha256":"228d778a62302a0c909041ff3a902ecf4b5ba93c339fc665a16ab90016e32d21","sha512":"a9ed751bc0467b3daf8e853ae75d89d6f7db2875a3f4652719cf9c323a2b9aedac09e2642d7f5b8ece93c37ca8996bc6ff5cff0269e1312fc524fe594078e3dd","ssdeep":"","tlshash":"18f00e93c9632c1c8eac01faf42055ce50013418d0496007b4ccbee19329309ed3ee88","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-07-24T22:01:00.703309Z","times_seen":187,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/mu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 696\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2b8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1947730\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YJZfQ30oblLhJ16ZLg%2FEaYioDp1SCcprnT5M93a6c8bcGT8hgOFZSVUKW3BZX68nafx%2F8zNXDfLt3qy%2FDOMD%2FDpgGvGbf7OLpQ%3D%3D\"}]}\r\ncf-ray: 974793a99f790b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":696,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"473e8e286bae969fab488dd62c2367c1","sha1":"1bf6fca74cb21aa48294d0c0f6539eb1a6811b4a","sha256":"1f3a620a69dcaf1c4e8c5b99f6e031a6fb52b97bcf147857409a53874bb720a6","sha512":"cbf27be3ed629f20b72821d320c327c12c05082fbe2e0f89373fd7da95aa9d4e6b51e95e8c43984951af1e4fb3b4233a5c8374bd2dcd569479456ca18fe8afaa","ssdeep":"","tlshash":"560144f212db28f9810082a4448e2cb31d747b96fc64d8e36676401726880482c50d14","first_seen":"2025-03-08T14:30:00.061537Z","last_seen":"2026-05-24T00:49:23.616411Z","times_seen":114,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/footer/payments/interact.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/footer/payments/interact.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-55a9\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21929,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57e627c8fe520cf7fe6b7ba25697fe55","sha1":"4cfa9683305eee2075b9d4ffcee4e9575dda5838","sha256":"667d2b41d58cb58ea47f10ee14786069ee1625f861606772bd25bc980801642a","sha512":"865b8ad40bde7fc463caeabdd8470aff1794d15ca447fbb551d2ff8c71b5e572c764431482383735b52118849196d40fda3c6203b8bc0f52d67685cc4e9c6fb0","ssdeep":"384:faSlKW7ESNjUd4qT9v6KM2FlaD9+6cKUV3ecXko:fh7zNYdkKh+9At5ND","tlshash":"29a283e9173493dc98c7994fff32ed94531f64fab9a681c0896fdb58949b8c0fa06804","first_seen":"2025-03-08T14:29:59.761442Z","last_seen":"2026-05-24T00:49:23.45943Z","times_seen":220,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":568,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/bz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 664\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-298\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1975724\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FvgvYkLKxJGBqFSQGKgYEen5jVH%2FdsHI4sKORojrW7mgaR7uR6K%2FbrOb9ElJJK8zRxBH%2FXbXYo0QL9toe%2FRycEEj17MaLBng3Q%3D%3D\"}]}\r\ncf-ray: 974793a1bc890b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":664,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"58a70a5cc96c0543ea25aba4675b087e","sha1":"4ed05445a6e8e5d239b288299a967c71162b9e93","sha256":"0a7f1b61acff932215365f326bbfa4aad43287196b21c03ddb61e0cc7986029d","sha512":"98c2ccbfd0e0f2a899ab75b43710970a0fd9535b09d6787a1454e5d2772d1d50f650b153ab18807565ae0364942359a3157dfd7697b49ec5e12a22a55622347c","ssdeep":"","tlshash":"aa0183cd6a310ddada804631f13b664e9908c37abb26620d025996248e1060e0bc072b","first_seen":"2025-03-08T14:29:59.774095Z","last_seen":"2026-05-24T00:49:23.016892Z","times_seen":115,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cd.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/cd.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 766\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2fe\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2518068\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5jUHrkaJpWqnqUCqZ6SVFYGdzWM2s7AtRRDP6G%2Bz%2FgYcTMx33g5pCYKX2%2FI%2Bpg2aVvZ0yZyuOC%2FxAZN63%2BO1yRrHYZUulgwuKA%3D%3D\"}]}\r\ncf-ray: 974793a22ccd0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":766,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"4962d9bf7b1b287e1878b7605b8d14d1","sha1":"62b84068fa0cb418a2fd9bd30c5063f0bf11f433","sha256":"b3cdaee22c655de9be5ba931a01f22b49fbad3091d3463e5c3e0c72239dce99f","sha512":"73d9d5b7a1ff8ef3611b76f77f34fb878864bfd59da15fc2cf11e969b5704b7d0171150756542d3036c1667229b1c04c2acfe4905d4e20e4c2b03176ed84cdd4","ssdeep":"","tlshash":"d5016595663d7c46da118123ce1bc9bdf0251e74d43fca81ce117bbbd2360c944e168d","first_seen":"2025-03-08T14:30:00.042681Z","last_seen":"2026-05-24T00:49:22.668391Z","times_seen":116,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/hu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/hu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 560\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-230\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1712358\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MAl6lpJG2CtfJtKtmGRkNZOTA4jy%2F%2BSc79rcL2klw6mYyTx8As6zd11Ih%2BD20%2FG2p5UlCVuvIK1VkYEZFL9HKJ2Un7c9TzSvhg%3D%3D\"}]}\r\ncf-ray: 974793a7aec00b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8432f3eb8c717c7bd7919120a994b37b","sha1":"2b556db494b4763b1344e2544bc418ffcad9e85d","sha256":"4b01784ef93df1a5a6109ac34d9ca8c7a14316f1a1fc8c12e0fe40e8abae93dc","sha512":"b14662b419fb3601b8923c3315efc05e5982add0deeed56aaa013e49c6b261703cd39ce9e221f5fa14f18c1bc3796251ed98affe7de7e0f0da4810d6ffde512c","ssdeep":"","tlshash":"56f096e4d4a3d777c0ab283504da401ced0187642b8c525303f249067345290a44123b","first_seen":"2025-03-08T14:29:59.97686Z","last_seen":"2026-07-24T22:01:00.728485Z","times_seen":152,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ki.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ki.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 766\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2fe\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1801594\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tgHXE5%2FASybHE7dyD4prqv0f6Q1LCXdAAfko4n0CyOMl9P00xp3YNdxaBjTy%2BKahNcOopCJdQBSjI91plrHy%2BmAX54UQJ5dfaw%3D%3D\"}]}\r\ncf-ray: 974793a86f060b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":766,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"bf331644ec689dcf4fb94fc6624ac4f1","sha1":"5a95ecff939294b3dd3902d063152a51e3e3fcdd","sha256":"4f7a378a09a137ee594e5fd9b4af545a5e7ec0843bfba2b75208cdc24dc8623c","sha512":"cc935d491cfa01722be96f657517c2d56ef3324475bad053db4587d269dba96554c9b4098c8a4cbc48ce85810ab0e975207e9f893985ea7b3866350d083aa8b9","ssdeep":"","tlshash":"5201b5d983329a88fdb60d13fba7c40190a00c0e57319a3e0bdf91bddb3151e83c020a","first_seen":"2025-07-02T10:58:58.151898Z","last_seen":"2026-05-24T00:49:22.922136Z","times_seen":109,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/md.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/md.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 612\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-264\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1901453\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8aZiWgsl82aVyDTOVZSYLbrbmNbDE0oN70lkMaiJwQuStQVUbnvilBKywjPtU%2BNkkQJNcic9DhKMw%2FZUoEpd%2FOvfCDVOQBsbHg%3D%3D\"}]}\r\ncf-ray: 974793a9cf880b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"9defc5a8d4e4af4ac075319a4e5e6554","sha1":"f9643e68eb20b76d98bbd4b82818cb2665b58279","sha256":"8fb7c9addb7a0ed1ec1f47916e922b639e4c87c2e2677207b07d885fdbcbcdd8","sha512":"545d079b510ae2a70c890672391ef5df7b4ae1fdc76ddc100ab246cb90b554b86c045b7e47cb61794bcd4462c4fa44640aa96e5049711e22e6aa8c7f0341e291","ssdeep":"","tlshash":"4df0b7ff0261bc28c8e801630d3f54a287b1ac51a052940ff0b24dee4f8000f02dbe06","first_seen":"2025-03-08T14:29:59.886695Z","last_seen":"2026-05-24T00:49:23.581078Z","times_seen":114,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/na.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/na.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 749\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2ed\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1628135\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q64sldYqSPcox7raS1dHGczh007Ougu7fso%2F%2Fc0JAk20NHFnS%2BviaH1l6NTk%2BL8d8%2BNhUYAmSrtLCjdKAx900E%2FeXbKhh2oQeg%3D%3D\"}]}\r\ncf-ray: 974793aa1fc10b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":749,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"c08c944edff4fcf889c48e370dc70638","sha1":"9c79c532343de995069544ffc0efb11d345c884a","sha256":"94a9ac19f016ea6e388d3f27861fbaeefb9cf8b249c78d11e07b175c2397623a","sha512":"6893f1707cd4806103853fd6cd9461f183c5cf60cdce6797e7b95156c766689e6508772127e0592861bba2bda12da5b332c739c0fd29376f550a3ec0917d7705","ssdeep":"","tlshash":"340165b252d8fc25e7042c14e4594cc582b321134ea515a89b8edcba2a12bf258d99f1","first_seen":"2025-03-08T14:29:59.849521Z","last_seen":"2026-05-24T00:49:23.319078Z","times_seen":114,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/sg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 649\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-289\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1883661\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iMiKloDwo0j9noXVapB7YEY5TB1BvVaou%2BNQxrqjblAxtTsEIIbZAc9Frz6sjcymDQGjX4wSuxMH5f48ahd3kX9awl6%2FYJUDLQ%3D%3D\"}]}\r\ncf-ray: 974793ac78cb0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"439f8ee13a2dbb11abe1abc0a2d93af3","sha1":"26f526c37b16b4dc0f4dadbc7b1f4734e7ed2c20","sha256":"1fcdaa16e601a650fc905d0ddf1f5696d0d95ba2ebbb58e8f066b627553f6175","sha512":"f4abffda58f6d001459609c346afa45138aa36497033bfd593d1c9d20f29f800a17c262d82be68e9a2a1b410755b40058f03db9afc4db997c7716c3b2b585e9b","ssdeep":"","tlshash":"d4f023820f4cbb2ef52c42615a719c58ceea13d5954aa445d911d2782b05e5835de4c0","first_seen":"2025-03-08T14:29:59.857104Z","last_seen":"2026-07-22T00:37:09.33893Z","times_seen":129,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.kentcasin355.com/api/translations/en?pr=kent","fqdn":"api.kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:32.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:15:41 GMT","end":"Mon, 17 Nov 2025 12:15:40 GMT"},"fingerprint":{"sha1":"5A:21:78:73:C1:44:39:14:ED:89:01:53:36:B3:22:CD:5D:DF:67:CA","sha256":"79:D3:CE:5B:49:98:7E:53:E0:CB:AB:20:5F:B3:F9:AD:68:D1:32:26:53:54:04:32:5E:A5:B3:7B:05:B3:CF:A1"}}},"request":{"raw":"OPTIONS /api/translations/en?pr=kent HTTP/1.1\r\nHost: api.kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: skip\r\nReferer: https://kentcasin355.com/\r\nOrigin: https://kentcasin355.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nAccess-Control-Allow-Origin: *\r\nVary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Headers: skip\r\nAccess-Control-Max-Age: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":110,"dns":37,"connect":31,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"api.kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bq.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/bq.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 750\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2ee\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1947728\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YvXB5CcZt9mJtQTrNiIobSiiGBVOZjGLeALFeGheY7rwccA%2Bi0XoJ51i5Tc9GEPEw7tRfp8BZOBO7AT7Yih9E7zLNrw69jC7Cw%3D%3D\"}]}\r\ncf-ray: 974793a1bc940b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":750,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"3ee90f6910664bf8bcd55dbc49962a50","sha1":"344cbd653a532155d958a1c4b107723ec3eacfbd","sha256":"626a57ac73bad3455be645ddc4e77c15c88307fe71acde893f8adc334921c57b","sha512":"f2ff4fe37538857749f29c4109dc0dc73af8e4fb5aa09cb4b1f9b0ea44bd295eaad66468a8a56554dd38fe70522311289b1f96a71643f1daa52b2f953398ffd1","ssdeep":"","tlshash":"460165e8bb36acf51d0e37a4d34bd118b51236066d30580a94c0eff6965f58321f03e2","first_seen":"2025-03-08T14:30:00.054855Z","last_seen":"2026-05-24T00:49:23.517254Z","times_seen":114,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/cr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 685\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2ad\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2015230\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fvp4m2FuA24pS4gxxDYi%2FC8afDdB8sFYXzhP9ed5dsCPKnAAZT6ZLftw43xlGADBflPyRVgpo7huG2dtJBUp3UpjqhpUCenDmA%3D%3D\"}]}\r\ncf-ray: 974793a23cd80b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":685,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"914d7efdb10a8a4c35ab89621efde769","sha1":"994ec24a2d978ead8319a701baeedd02e8e8fd9e","sha256":"08fa774cf7103e3658b2ff73c974a9f83643af72a3257b894be5e5ef6bf049b3","sha512":"bdfed12c4d9b2e01b413f4e4f8de0aec6c2f83301fe5dbedaa82eb2de9a9560d7164e8c7ca0a2c782ec4658b225728e002d60431272ed7c80755cddb90343cf0","ssdeep":"","tlshash":"9401d8ac1ed605a9df1fe73146910ed20c2e79304d98c247082f5634c4a37310138523","first_seen":"2025-03-08T14:30:00.023573Z","last_seen":"2026-05-24T00:49:22.761412Z","times_seen":115,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/tr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 618\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-26a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2245539\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2BRyhoIXw%2BrahPgZ0qaOWrn9Rp7sc%2FrU%2Bbc5KWsvB%2Fj%2F7XBZpIjCZ5wEgztc2TP%2FdUg22XZ0zdVKJWhJcBr3MNNq1nhSkl3ieQ%3D%3D\"}]}\r\ncf-ray: 974793ad99510b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":618,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"e55fd833ae51ade88ae45a34d940a2aa","sha1":"c6c2fe7e57bdc322c9f4e57209ef162ca041a725","sha256":"76874aa87ba90e4e98871eac3e2597590680590cf0ba7ca35c6edc94e2e28197","sha512":"09c30e65cb1acb7d3e3f1c3b61247078be1565b2826d145280188ca4573e207926e284bbec2e7fd3275f1951eb9ef694612eb1170d818dccdbcc8d7d38f71a22","ssdeep":"","tlshash":"38f002af06de2c9cec1d466988a86572b744100e3c95e857ef1cf406431bea812e1189","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-07-24T22:01:00.72938Z","times_seen":190,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/categories/new.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/categories/new.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-244\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":580,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc24f925ce9f71141fd58a502bfbc9e8","sha1":"e22d7ba61603fdd9fa5128e2dda4c772aa341bc1","sha256":"d6e297afb36f8e26488ea2ddeeaa4a63fe69c0b65629bea22570be336b471061","sha512":"3d6925fd4876e62a5382d7645aa9343521935cff65c95fee33a677922b7baa7cde21bfd7caa412c9d6eb3a9c4b7119f9195eede3d382293a6fcd9511fa7fb1e1","ssdeep":"","tlshash":"01f0e1e1cb39e4c8e086493edf557ad8632720de59456989f264eb1ed1c6ac2d005494","first_seen":"2025-06-22T12:57:21.14658Z","last_seen":"2026-05-24T00:49:22.985802Z","times_seen":138,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":318,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/games/ico/SweetBonanza1000.jpg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /games/ico/SweetBonanza1000.jpg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 70693\r\nLast-Modified: Fri, 27 Jun 2025 16:47:52 GMT\r\nConnection: keep-alive\r\nETag: \"685ecb38-11425\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70693,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 432x324, components 3","md5":"e29f9407805414d20a3088fc2b387bd9","sha1":"f64b58c19b833b73b324b4a2f832ede129f21386","sha256":"22e36b7a910d0a2f6fbfe7138c165cb460f4d081ce0b1f45ca4d91e9779b7a66","sha512":"bece47d1074c6b483c1c3c7c296eb87b5d0f1cb04bb35aab66808a9d39e6311a41ecfe86bbddf3ffa4cc5e670c48a0d2ae5d0f61bc9bacaa0360418d83d71663","ssdeep":"1536:rxG4n93Nuf0+YplM2Z9PmPIDAL1JjRxvWArIKcDMfXi06xBdyX:VRm0+YpAT1JjTRrInkXi1/w","tlshash":"f263029cc286d4cc52ba1dd83eabff74a292694b4709bd595065473c28cf48939fcf90","first_seen":"2025-08-16T01:15:05.827099Z","last_seen":"2026-05-24T00:49:23.052041Z","times_seen":17,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":445,"dns":0,"connect":0,"send":0,"wait":70,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/rw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/rw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 633\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-279\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2150273\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SpD%2BJcl1rmIF9JvmilQ1im%2BK4Z8btw0QFrjathc9K%2BhxLSK%2BML4YLlcnYXikzqVLKSt9B%2F3RoaNx%2FNMxR9JXyCOsNI33HFbfrg%3D%3D\"}]}\r\ncf-ray: 974793abd88f0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"9dca0f7117adbade3d58992a06fd2958","sha1":"3fa50629e233ca53b33e8376853aac41f828dd26","sha256":"528d7df037c17b11bc9d745a8a06752d741099255cfe1aa77621e712ef7200f5","sha512":"f25e83cd1003abef90c234239e5ab25e8a4f9382ace7f43e745f5f0e6f4a68139ebe5186125d967e31aa4ebc611f032fc5c639f30ecb28110e1d505e44e9b0ca","ssdeep":"","tlshash":"73f068e1fef49dd22dcd835101166714ce2fe252e21e935ac3054d0d470913945a66b9","first_seen":"2025-03-08T14:30:00.00943Z","last_seen":"2026-05-24T00:49:23.132315Z","times_seen":115,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/uz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/uz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 678\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2a6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1890072\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MU7MSaf6ZShD4UFlUwTaNdEoSELtu%2BgFY2cAD1NVNKx4HA0N%2BmVmWwmpIbFw4Os6GpmQ7dZi9yckfTgojt1JwvZQwFqvDD4bBg%3D%3D\"}]}\r\ncf-ray: 974793ae09880b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":678,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"00b634e7cb182a11d2c93b27064b6819","sha1":"c7e4d87cca73a214327c0bfa7c43a767cb4d29e8","sha256":"e977a426026bfeff92a4367cb990171b31914da3592f85a3f0d0bc69a61b395f","sha512":"9655408d3ed3b2d69177331968d340b1ebb7988ba91ee2e01e33cafad5cb5d0a6f30667a0c8bc612251ee84c733c42574e229b2c5716b0703425da029d4d7b7d","ssdeep":"","tlshash":"9f01887118b03c1696fe5452875978d0f0b8b134493a4b8045014a33564f01cd0bdc29","first_seen":"2025-07-02T10:58:58.34257Z","last_seen":"2026-05-29T05:47:58.960361Z","times_seen":118,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/js/bundle.js?rand=1755689377","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /js/bundle.js?rand=1755689377 HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 Aug 2025 02:14:37 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 284129\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"68a58209-455e1\"\r\nlast-modified: Wed, 20 Aug 2025 08:06:33 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-08-24T11:30:19+00:00\r\nx-node: m9-up-gc98\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1204814,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65508), with no line terminators","md5":"3060b2c726fb94106cafe785d8a12dec","sha1":"1f7d48a86a2ce9abf8746d0477926c906effb25b","sha256":"f52047d0e1a18dfdb8a2640d500e76010d117098522804e62573c9f8d8679d08","sha512":"145c84ec661fe812a0f2cf4c43e462438af719e41e433f77eb7fc29a5668bb5a2548437084bd1f4294bec0f917d161c648e5f805168bf3519747ee99704654aa","ssdeep":"24576:BVSwS96xbB0ljHeY8yuWoBm+QsVduhEyuD1eb4d5oVIUfWuAbP36IHg:zSG0lj+Y8yuWoB7QaQFu5eb4d5ouUfWG","tlshash":"8b254ac5b1c0f4a502d355e6643b2009f23a285e7809b064fbbccddbea5659e6273f39","first_seen":"2025-08-20T15:19:29.067858Z","last_seen":"2025-09-01T11:30:14.332835Z","times_seen":156,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":358,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/tournaments/small-tourn_desc-9.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/tournaments/small-tourn_desc-9.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 34252\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-85cc\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df800e97a9ac880772b9cf886e173d0c","sha1":"42b632917e3a52c5e43dfdc90e0a1ce5c47708a1","sha256":"48d56eaa758edad8e976e0e84738a623a658d11e2f03070086f38862313e9aca","sha512":"bea5a92323cb296285e6c24c383231e427e873aabb1ad56e9bf1cacfdb888ffff876f29278c7ec5df127527a2b4bdf7ef2d0fe5b529c5405ec0c06a710a54017","ssdeep":"768:IB/txEcVbdyVFDkcwF9y/7wH8ZDoE8Z4Y1MRt81JLXMjUY3X:w/tmbjDqc9oEq1MEkUK","tlshash":"b2f2f23929c75a55da04afe7b1199d11d78100249ca7ba23c8a29dee0c8cfad7ea1374","first_seen":"2025-08-05T17:20:37.152299Z","last_seen":"2026-05-24T00:49:23.306869Z","times_seen":73,"resource_available":false,"data":null}},"time_used":655,"timings":{"blocked":572,"dns":0,"connect":0,"send":0,"wait":72,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/mk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 782\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-30e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1746825\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=65%2BJLFtNhZOntiCS5EkSRzg0qoUzRZ9wp7g4AHqYHBxgs1hUuQa39h8cohRPp6XqpOk96vwjatwARFWtrBGnwSYzd30F%2FbyeKg%3D%3D\"}]}\r\ncf-ray: 974793a90f4b0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":782,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"12f0757fb76187a72f4908cccf4f19f2","sha1":"e78fa9cb3c235d81d07cff7ec0e98584e245713e","sha256":"5338a1e1f0dd319af1c6ff9e5c2bbc5fbf35a108c7ac4caab891212ba2e58cfb","sha512":"7d256bd86bf253e756c91ff5af5f443db77dc7c435e6d053fbcfacd97f1834f32c94ff6d2e6baf5ee32360a14c40b3b1eada4494adb3c36b81f2613a95335c4a","ssdeep":"","tlshash":"510175f787501c369a3d5b391c7e461b59f066fb88614a4f869c054e392de18f3d43d1","first_seen":"2025-03-08T14:29:59.907295Z","last_seen":"2026-05-24T00:49:23.555848Z","times_seen":117,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/nu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/nu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 912\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-390\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 289679\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CvzqBzUJdpg64wzEBZebrz4MyIFanJ34QOPQ0pGAnWTnd5N05n5FOzehGb382g61GZLTR6hFpj2gHADzPMyBwbqdvipjmpviSA%3D%3D\"}]}\r\ncf-ray: 974793aae8130b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":912,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"d906cd726f786a9f32487e8b4a12518a","sha1":"f202a8446e730c5eeb8a615826be2f1452168c56","sha256":"da1e94dadd163143b4d3c8c3a24e9bfd7db7f2c176a9d0a0400f7cb0c49df3b5","sha512":"eb408a8fb0c88ea8889c5dc9e44b88eaf6313d663c16e578128e63a0b05cafa24dd7b0ec32887bba9a73a0ef87007183e9b41c44a8eeeeaadf3ec5f5baf97a22","ssdeep":"","tlshash":"7d11849e57c04819c5621ae5733a6d35ef3621cd31d880c969007ce03ea9a504822641","first_seen":"2025-03-08T14:29:59.863175Z","last_seen":"2026-05-24T00:49:23.185658Z","times_seen":114,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/sc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 715\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2cb\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1960203\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NTms%2F9SXOqI3Zuh%2F3HnBUWfLvfIWn73UPb59OuLSWaYztc1gbsAuhrwl8enSzchLP5NU%2B675lWVINkuk7mgQDwDGo26PAbBJSQ%3D%3D\"}]}\r\ncf-ray: 974793ac78c80b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":715,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"479521bbbadc3e357ebc80261c5d644a","sha1":"0f9d4d27e7642197315b9feda3cd967be9fe6aa1","sha256":"4e19c8e031c630224ffeba58154995619e29f670bbebf8a8030633ff831aa1fb","sha512":"79d6e5b2718a955a303d4d53460c6cdf5f7815744ec9b7482d96b9656d3ad5a8d31e2f70e995ce0f6ef47c7f462e8e609817c7a8c09f24c75b5ebbf0e78c5fd1","ssdeep":"","tlshash":"fd0194a66f36dc5815f0c63c2b9f2c088834da3d9a9fa007082bc151706fd07ca95701","first_seen":"2025-03-08T14:29:59.901228Z","last_seen":"2026-05-24T00:49:22.769492Z","times_seen":114,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/to.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/to.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 576\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-240\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1947730\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bK8b0Nni9zQbiiTAVZp0B4oUUD0CwnNN9jf%2FfUku3evBfHuNvflZOS2O0Orip%2ByntYjL0zftk2%2FQR3UmJBqFpc%2BxnX0nEKE%2FRg%3D%3D\"}]}\r\ncf-ray: 974793ad994d0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":576,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"4ee85794739d7a8ab88adef7ec62d779","sha1":"286f402b0e202939e68c4e6daad2b93958b40fd9","sha256":"d3af8fc12a056ed602a222ae02435c2b541c596d2db60b75f2767cc5ff62db93","sha512":"49bf64a9efb7d3c1898a0d25978c680e0f6befb081499155fa6eb1bb73762978aaf4aa57b95518a11aa993adb74a1739aacc87b9e8ba0d050e092b3af637e166","ssdeep":"","tlshash":"39f020d2bd4db81dfe804139d18641e8b19b23c89e2892b6b0861f21758b9208242325","first_seen":"2025-03-08T14:30:00.062217Z","last_seen":"2026-05-24T00:49:23.605266Z","times_seen":114,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/va.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/va.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 641\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-281\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 531520\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PuX1qJU4usdsZKQgRb1ztoweVXLmGM5LiYSmqH9xyWH3YRl0pG7H5Fu43hR%2FJR60FgGgTOn0TQiTHTJFuRJguXe1rOVpWHeeJg%3D%3D\"}]}\r\ncf-ray: 974793ae098a0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":641,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6ffe95d6079df9719b21a5076f621f47","sha1":"a5cf7ea371b969068fd0a160d8e2ca29d089cc60","sha256":"057cdbac57a3f267b30d841920f24dcf9f7682937bf0c9a925d40afc52dddcd1","sha512":"a9d520e4b36124f88ca9d16f916ee18d80b31dc70da99d32a0aa63d30a2965f9b4eb6dca927fa4a4df8eb66deed44798f75ba27f2ab58f90db08b38d3ca1a347","ssdeep":"","tlshash":"59f02dd23132858cb82de8948a0873d8d6b2859a496a301b237d6f7686212782bc055e","first_seen":"2025-07-02T10:58:57.924045Z","last_seen":"2026-05-24T00:49:23.453978Z","times_seen":113,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/aw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/aw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 696\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2b8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697706\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GH41IHS%2FZUTpBi%2F1EpON87Sac3DNOhkrMSiboudnbqSTPmTqyN8wnSKu65vIwekTL7MJpu4IgHMqtwPyLaOCh6ADyOOHoT95uw%3D%3D\"}]}\r\ncf-ray: 974793a1ac7d0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":696,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"5603207e245b5e831588452e3dc44720","sha1":"139af4049676b19e852e9e2a7a9a1da25ab2f9c4","sha256":"950419af090c343ed6ca24e4e204d6c97275775667df84f4ce613b27805ad179","sha512":"86dba0386a0056bc97a496706e172429a1bcf8020cac656fec524d49add4f4a491607cd400498161922353275f3b6bb629bbdfef72edb51e470a315ab2365651","ssdeep":"","tlshash":"e40144eb82904c78cadb3207522f55359484550b6f51978a5115ec352d153244eea2e9","first_seen":"2025-03-08T14:30:00.022944Z","last_seen":"2026-05-24T00:49:22.604556Z","times_seen":113,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/switzer-800-italic.3fc2784777cdb0b5.woff2","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /switzer-800-italic.3fc2784777cdb0b5.woff2 HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/styles.297578458c20fb04.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 15692\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-3d4c\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15692,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 15692, version 1.0","md5":"3ca84a88bd33a1f39a88890b0f1e155b","sha1":"eaf8cc9a3f1232fabdfaeb4ac706ce3cfac16d05","sha256":"5da87a7ef2468e98836df183bf22f098fb3c49caa1f7c2df6a06d0442f3b276a","sha512":"b6ad61246762814fd9d759eae4ccaf648870f47d2bd8fbc94a03857dd2ee3040e6a768785fddfd07a7a507ee4e99172a4bd552b88528824eaee104decba39e95","ssdeep":"384:Rc5hOm+fViGSvqwGUPbvhgaagaku8tw/xNARTa9V:RcQfA5SwGbaagHXttRTa9V","tlshash":"9c62e18cdb5032d649a73ddd1be19962887d241b33e03bdacc6fe7358aa259248702e4","first_seen":"2024-07-01T06:02:19Z","last_seen":"2026-07-27T09:38:50.643726Z","times_seen":102,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":198,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/check.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/check.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-226\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":550,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d18fe43f1673acf8ae09c85b9a605bb4","sha1":"5c6303a238cb94797fe94ef14a0bfa2c8af32820","sha256":"96aebf0a51eb876e6044dd22fec20d6edd798f924e3dd401227288b2ef07eae7","sha512":"9e66ba7bc5035fbe2f05c1f77a9c71157d7b72e03f7971df6afbf44bfb2e11498ac082a966e5f40834d19c03a5a04e73c023ab93bcb4b4e08332d4e1b22532a5","ssdeep":"","tlshash":"7af0ebb5821dc4ca9047ca30ca760c9468774cfe8ace10d4e6900c603c801a4c801a6e","first_seen":"2025-06-22T12:57:21.091925Z","last_seen":"2026-05-24T00:49:23.398471Z","times_seen":71,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":196,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ai.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ai.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 706\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2c2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1781709\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ULHKMmW%2FAkJjVJL60xvRlOViziF%2BdxfOv5YSIr6LehlG0j0VkiImvWFs9B7QHHCHjpJVQp8aNKo1%2BXY9xwM8m4xT65OsekrDWw%3D%3D\"}]}\r\ncf-ray: 974793a1ac780b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":706,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"b7ff28b3a313fd00693514aa1558eb07","sha1":"e276dbbeda5b4a308329bcbe59bb58f17585a9f4","sha256":"3321510da36dca22e2928a2bc01c66dfb02feb33ca617505fcf602f1f78e6062","sha512":"34f1f43ee7730b2e576ca27754ce22eef36bda7620c43ecdd8c76af4010a0cfb70ad1f702eaf187c26b5dfe55105add6f0fa62e7125310d3d71c26a2c28acab0","ssdeep":"","tlshash":"dc0110cf06562cbf592cd22559e24c82ab7f0cced888662cf41bc98126055ca5795337","first_seen":"2025-07-02T10:58:58.257417Z","last_seen":"2026-05-24T00:49:23.282448Z","times_seen":109,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/aq.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/aq.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 577\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-241\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 252370\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=osFnp99kHHbybu9Tqsj%2FPxP%2FDF0aCnRK3RxjjtmvLCBnGwY4x1Jn7j3eEMga%2Bu44dsKbbLuCUCxbsqOWjqxpswIjOabZ%2Bw9WtQ%3D%3D\"}]}\r\ncf-ray: 974793a1ac790b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":577,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6fcdf7a9fa2f96f0f3a7ee6841b85526","sha1":"62a8ad9df506c5e48e02c72f1cf12a64c06fc0d8","sha256":"cebc8d7ea7b85c73dcdcbeb7c6e7f3355db9f4bdee4a9d8e4e769039145e5e22","sha512":"7836dab7fbc722d54a024aebeb597a4e22edceb58d5fa4dc18f248014642d8791957a988eb4a67842ee009e6f8c79bad3423bcf6c3c7b465f8497353d33e7d26","ssdeep":"","tlshash":"22f041b09258b878b39f4bd90923584af4a60de1720bb82790d75f78162db9282a0127","first_seen":"2025-03-08T14:29:59.891181Z","last_seen":"2026-05-24T00:49:22.653424Z","times_seen":110,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/km.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/km.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 791\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-317\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 355007\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RJtCCvgp8924XrDFJaFQhpet%2FeX%2Fs%2B24IdtLlk2n5VnBpckmssFTbtdl0M1x0SRshG9nUT9IEtqvRClXWBWeGYJ9qe69BtQMmw%3D%3D\"}]}\r\ncf-ray: 974793a22ccc0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":791,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"273c0c1e7718c2e838200b0f895653b4","sha1":"84c09fe321eccf749aad6616f4f394298f07829d","sha256":"703047038f7214a470e24fa1b67f98282c8d0f7355913635ab15388fd44e6f35","sha512":"dfd5ac0064be1d69d292e1293b22e21e3fc27a7cdf72ff1d43ff973251bacf8baf6cdfb3609b85f18ea3259db3b4026afa563436e1d7c4c4bfb43738f98b1d47","ssdeep":"","tlshash":"0a0175fd7795553c4b230a52d3424b65cd1a809c4928c717461d8e753a0254d7bb58a6","first_seen":"2025-03-08T14:29:59.76297Z","last_seen":"2026-05-24T00:49:22.856179Z","times_seen":120,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ke.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ke.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 870\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-366\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1781708\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X25ZCXsj3Pb81hzsVkibZ7V2bCV4fKNsUhR8doGL9FeRC5q%2FuS3WDM2oVUgKPGp8CgQkaSghAMK9FuBZOSf80WAqK2morxTFTA%3D%3D\"}]}\r\ncf-ray: 974793a86f050b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":870,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"1f4351cf8b66f753c18f4ea290dea4a1","sha1":"fca866297cec0a9fb2050a6c61487f2792bdcd11","sha256":"2c44f2ad45efa064d00130881feaaa17d9060510b29b05ff49671de3f88bad7f","sha512":"2830ee2deb945060f0d342a3e20bd4ac26ad45ba43e1027f2dd56121f12efb95265790a19309e576c0930c8447a1a4892ca73e63db99cfd7746a3f27485db9f9","ssdeep":"","tlshash":"9a11e60bf7b73c3abac51191bb8d04485549322153120328c60feef28b6ba683d2d376","first_seen":"2025-03-08T14:29:59.973714Z","last_seen":"2026-05-24T00:49:23.182948Z","times_seen":122,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.kentcasin355.com/api/games?lang=en\u0026pr=kent\u0026device=1|2\u0026page=1\u0026category=43\u0026per_page=48","fqdn":"api.kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:15:41 GMT","end":"Mon, 17 Nov 2025 12:15:40 GMT"},"fingerprint":{"sha1":"5A:21:78:73:C1:44:39:14:ED:89:01:53:36:B3:22:CD:5D:DF:67:CA","sha256":"79:D3:CE:5B:49:98:7E:53:E0:CB:AB:20:5F:B3:F9:AD:68:D1:32:26:53:54:04:32:5E:A5:B3:7B:05:B3:CF:A1"}}},"request":{"raw":"GET /api/games?lang=en\u0026pr=kent\u0026device=1|2\u0026page=1\u0026category=43\u0026per_page=48 HTTP/1.1\r\nHost: api.kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://kentcasin355.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9113,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"80658305b722745477c71c40ead3a72d","sha1":"6261b0a05893658a0e274e9a265de5c83ade7d5d","sha256":"f4430a00bdd27212cd3b4bbe2b80aa7f3ac129f76af602098daa201434540706","sha512":"4c01920bc976a20be131ba46daa536be47a601420ebf48dcd6e1f9979bae8c424ea465a25a8b9efbdcc243888ea2cbadd17e193b49b7ba3872de353db1d3a5b3","ssdeep":"48:YVM/LAlvEE/gQT4pTkiM/84CTUY8Roc6pftCXEDTNouw7f8VVBxA23/f:NGafME4yt8RocAfmEXN27fmBzX","tlshash":"e012296b4b282cbe8b0b14f41fb33e4a919e0186d7d5ff640589ce9c85edaf2541b436","first_seen":"2025-06-22T12:57:20.944037Z","last_seen":"2025-09-08T02:19:05.833081Z","times_seen":57,"resource_available":false,"data":null}},"time_used":1367,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"api.kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/bw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 596\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-254\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697706\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qSxOXW%2FzEloJ%2Bbfb872g6exrEI80cOXXYWCKFmpM6oihGjzLdl%2F56ZPHeDHTjWiCzvK3PXLwpl%2B6BeK5VwoQA0fyIRn5Shf5fQ%3D%3D\"}]}\r\ncf-ray: 974793a1bc980b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":596,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a869eaa3c9babe762262e6fbd57b31d0","sha1":"500f78726f6aaf9e1fcad1a70bd80f36f797b28c","sha256":"14c0097b3d84e74edc421898b04669ceb44964a7ea46acc04e1c09d3c0bbee46","sha512":"2880f9818ffda83c4788c1306631d9e61af6a6644707d8367b179d033300e2b364651bd740762c64aaac86825aa30c33e2a4dc5a46bc5c916301b20a375cad44","ssdeep":"","tlshash":"b5f047bbf7df78b6db21a4398caa4b51cc525729e160244bc35c9834674c6d434d124a","first_seen":"2025-03-08T14:29:59.824818Z","last_seen":"2026-05-24T00:49:22.776867Z","times_seen":114,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/cl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 670\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-29e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1971055\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9yB4o4DBXf0sz9%2BNGfnYrvt%2BGd9G1uVvPB76zUt9y644NYzVi%2FAq3N06w%2BBZ2bFdSZiSSZ6DzmwJbC7vcd6ZJiAs1ZWO%2FEKtrw%3D%3D\"}]}\r\ncf-ray: 974793a20cbc0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":670,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a25c207e18a9ac345e167697f15a2241","sha1":"9945c86174cec5d74cf919dafdcc6fd5042d7b58","sha256":"ee8bc569ee32a20063293c57faefcb9f7e0f9f50dbf981dce38e11c821548aa3","sha512":"78ea9c7c288412ef591b8f694caaac5469473c0148db60d088fa555f3076c283eec3cde0e1c2d75c18b1c310f9f590ebce069cee22684fc0b7f5132958ade2bf","ssdeep":"","tlshash":"390183c817e86c2fd7a2c27601a5d284ab10037c1390cc5b4b50daaf2fd223824c1cd6","first_seen":"2025-07-02T10:58:58.29452Z","last_seen":"2026-06-06T22:34:56.624778Z","times_seen":118,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gd.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/gd.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 738\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2e2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1876612\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RMRNMMABIgOl4y27UPK489bCJ3gzFcJkb2SxCRTN8Y2aXoSUp5cR3peYcfHAv4ir7BsWOylm0qGtbYutMxgOT9JCuYcy5rSp4g%3D%3D\"}]}\r\ncf-ray: 974793a6fe830b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":738,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"dcd01af2a9e2bab78119769eb77815ab","sha1":"c5984c0504219b01fa41c1ed87ca2eb224b49a1e","sha256":"6226081e9539ba1da4d61f5485c097c127e61c1559bb03e2848fe81a35d80810","sha512":"baa4240087cd67208e0c7206bb0e0f7c22db6f177fec6743aa63be99939abde017bc291a063f7313c752ced77b6be37887672c68d12eb3c033a9e0f1f982209b","ssdeep":"","tlshash":"270165690a70ec04e98c793d1836fb9d787253ddb182681d260206397d7e38619f08d4","first_seen":"2025-03-08T14:29:59.982486Z","last_seen":"2026-05-24T00:49:23.482978Z","times_seen":115,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/mn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 583\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-247\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1781708\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N2guS3ES3%2BfSVu7NDRo42MfQR%2Fi6RRUNAoSMauiq6biMNr3deOMQayPDolTJ1k1jvsNclPKCqAHvok7uA73L%2BVCmgxviguQ4fQ%3D%3D\"}]}\r\ncf-ray: 974793a9cf8b0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"462ca9d46ceb37ef9e07f0b5f2550027","sha1":"e18a094be291f5b80fd2ed302c524dcb60009a71","sha256":"d1aa5e676b2ea608f37142b1dbfa48a17e42ce33c8869b156248e16f98a69874","sha512":"1d45dcd530619d1b758fa6eee41ee843649db2e24c185fe4ea29350f12898b4cc589428b555f83f3153e7d205942b00302f03bddbd52221fbcf55679c6c0c0da","ssdeep":"","tlshash":"3bf096cdc2fa4cead8085cb2840b4d357231269de0905863f89688361d813107b73e23","first_seen":"2025-03-08T14:30:00.065386Z","last_seen":"2026-05-24T00:49:23.142057Z","times_seen":118,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ne.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ne.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 614\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-266\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1801594\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rsHMIkPufwJKdVmwbjOl7rm6IK%2ByQhk6vJkQtWT2fAbkvO8JhWdvGDlb5wIwhPP%2B6n%2BxnFru5Gdm8hj21XW0tJ9jvIOAQgfgnQ%3D%3D\"}]}\r\ncf-ray: 974793aabff80b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":614,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"ebf243de633c303f6503b15aef8189a8","sha1":"48c823d3fcb2c87e0716af40546a4d2363a61a55","sha256":"126668646604f568532ed36bd23d3d9cdd52b090ab46ad4a46c4adda35303f82","sha512":"cf0bdd2aceef7366d9c27bdd0421f1706fa97775801552a85382232af2257f05645b57e1a5e5d94d33d117d027c8a613042bc032557660270f42bcf404138c4e","ssdeep":"","tlshash":"dff062e62ac4823ecbce219963899e026a2e2249e9f1e80d821038f00fdbb130690210","first_seen":"2025-03-08T14:30:00.025641Z","last_seen":"2026-05-24T00:49:23.037998Z","times_seen":117,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/footer/payments/visa.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/footer/payments/visa.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-4d5\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1237,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb44a62c392a656466cc4292c9b01c85","sha1":"da5416404e086527d249121a0e02b121b6282d23","sha256":"f596ff685b00268e18c8a108f8775fbb10d4cc568fa8fbbd162e944df9300ac9","sha512":"75f411e468604379c0959ff8108d22ac3cb94597e6a82cead9e87396d53e8318e036156502513522451ea464b3d3b6bb51c0060e87d2c4c72455ee414577dd4c","ssdeep":"","tlshash":"e521e0c9b5b846bc889d479ae72a714428eb60bd78118e44f34cdcf09a72a9da448450","first_seen":"2025-06-22T12:57:21.080048Z","last_seen":"2026-05-24T00:49:22.674969Z","times_seen":218,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":518,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/dz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/dz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 731\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2db\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1901455\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iWgfTyhQizWPRxuQZdK%2BN0ONjXO%2BVlzqyw2q6%2FLwzUdkJAIYMdUvLbIpdmmRpegwr2O94ClO1Deci3T3VrT2DDMsztXwKtyyzA%3D%3D\"}]}\r\ncf-ray: 974793a1cca40b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":731,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"275ce9eb3efbfad8f27d6a9f7d6fb458","sha1":"85e4f2f13ca2d2fc6f8e075b7f317ee7e521a409","sha256":"cda0f340d2df4021f6c686d4d068256c4a004dcd16cf835edb03ddfaafbca370","sha512":"23c2fc5ab0c7ef0fad356217ae21707c426ed26a48c8aa4c5d199964740772e004e9d7f53743451540f6f5258273fd9e148ddb57f605da130ddd130414fd5edd","ssdeep":"","tlshash":"3601d86b7ac2cca008129d4182e8e74fba3c0148ce6f2d7c01c5c6cbad043aa1e708cd","first_seen":"2025-03-08T14:29:59.767766Z","last_seen":"2026-07-07T17:21:00.663698Z","times_seen":122,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":136,"dns":38,"connect":14,"send":0,"wait":14,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/dm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/dm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 783\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-30f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1876611\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lixl69jRmykXFK209ThGO0O5swXoZ03ObyCL16bH5d5GvPswVYGCnj7FTHOLV7MVjmuDTvc6t3S2uR4bS0sk7%2B3pxtTcjhrLDw%3D%3D\"}]}\r\ncf-ray: 974793a26cf30b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":783,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"abddc86d0f1ebadf14a928e083e6a635","sha1":"3521f3d3b1fc5cd924aa29f654c73b7f2b8c6526","sha256":"95f36e04b3e6278e53e502006819a889b8a23e02a0cff863cc302f908f929d08","sha512":"3c8049098c1e5a7fb8d7763308bb666e229092d8d062858b300e4fd59a3307a48bc04821a87193fef8ff4605534a38cbe7ca34a8798352c97674c03a87752ba3","ssdeep":"","tlshash":"3501c528eb94dbd2d8b60ab4826fa86d7e74050e023c239abff2293801072482489053","first_seen":"2025-03-08T14:29:59.93855Z","last_seen":"2026-05-24T00:49:23.030781Z","times_seen":115,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/vi.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/vi.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 856\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-358\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1112178\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5iLj%2FHPlYrotmAr11xus2HXidzy0svTGcxxc%2BzKf3umHS3UIqXwSmioEae092sixXKy5fL14FhEiAX%2FXMshtaIYYdX2BR4w7Kw%3D%3D\"}]}\r\ncf-ray: 974793ae59a80b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":856,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"0c1a7e5c19a70b79b4664ef757d095f3","sha1":"9ec8b641b41b7f961c19572fdee9b622daa92d4b","sha256":"75870d0a239c03c78cb9b8c7787d3eee35145aa742012f16622b16cfd3c889da","sha512":"a987ee5bf59e3d5df510af8f80fc3f099eaa2254a0805ed193bc1b59fadc99c3410858a7e62b29ed06a7036c849ebb1bf8e97ea7114e39b1a5415c732f0ca8f1","ssdeep":"","tlshash":"23118a5002144ec1a4151327a18e67ed75537eb5c46bcc4bbf8d48b9552d6190e4ffc5","first_seen":"2025-03-08T14:29:59.910058Z","last_seen":"2026-05-24T00:49:22.871248Z","times_seen":112,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/footer/payments/ethereum.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/footer/payments/ethereum.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-1c2c\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7212,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3fe499243090a7dc549b24c1b9429f7f","sha1":"3b2d21f6225ca42bdc073c72232d1a993b293b1b","sha256":"161524c2c8f622ae04f7cc826368f931e489fe7a990b68db701aa81dc8159f71","sha512":"cfa25450d0f995b67327ad5e9a1c6a516bb421a2b026257aa7e22ef9d96b166bf24db0e3a8c7a44b9c8bbfe2f16840b9a94f7fd3623786112d969c234775c5c6","ssdeep":"192:Ax6geMbCgSrnuVk5RnK7GdYZMlQXVNlLlN:x9gqumTdYSlyP","tlshash":"d3e1c7dd1f3107cce884d2fb6f2694d9318ac9fea5488885d3ba8d3aa4d14b44d5acc3","first_seen":"2025-06-22T12:57:21.20873Z","last_seen":"2026-05-24T00:49:23.070595Z","times_seen":219,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/nl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/nl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 530\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-212\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1449280\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bp6D7P0O2kOSfJAQcXcciJEIrrUXwtZVBWUBuG8h1iwA7Gyy67Pe1YwNAfxHKtiziILRq4tHCqAuJPO7H1Q%2FYQLFT8sDrN%2Be6A%3D%3D\"}]}\r\ncf-ray: 974793aa3fd30b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":530,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"f6b101b499829be26540d5a79bc3cad2","sha1":"6cb928828072be64ce51bb86a608ecd070089576","sha256":"5c9dd2327a2cb034716f46a211813f6d1bd9917d4c10c57f06b0386fdde532c4","sha512":"f256fc35de6ceb6b7371db8552abc9632ca70cf9e5ba4987670aea3a54cafed6853411860366b6005bd0487e23b102c265af93b26f4acd666d9ea401670d1649","ssdeep":"","tlshash":"1df020ff86635c34eb3b256c8e98d062e1631eccbb14093aa58afcb80b0d42883d0305","first_seen":"2025-03-08T14:29:59.887622Z","last_seen":"2026-07-24T22:01:00.668191Z","times_seen":163,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/banners/crypto-bonus.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/banners/crypto-bonus.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/webp\r\nContent-Length: 26860\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-68ec\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26860,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d15e7574bc05bb86f75fdebcd33e44de","sha1":"d5b5ebab2625659e0f6631cd0a8232beedd223d7","sha256":"efee8b3791d4dabc6b2afe05cb848bc8fe5f7498886c426cd334eb0f8d5ee501","sha512":"48d6bc43be2d6a202d62845ecddd084b3f96fb21d88a8d44eebea3f57a30da442e70a2cd889459de265d44fe219f3f16035cb42385e938eceee4e2a301813ef2","ssdeep":"768:lrxVm1J9sABzc0W0CZpUrYAP6tuV4CGwvn9K0NsoWqcgc4y:BG1D3Bs00pmYHtugw/GFgc4y","tlshash":"f8c2f1928d32aa51152ef323a1fd5bab438dd4c64fc52e72bf2271c91ac9984d1c87a0","first_seen":"2025-07-08T21:30:00.375851Z","last_seen":"2026-05-24T00:49:23.371612Z","times_seen":82,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":87,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/dj.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/dj.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 637\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-27d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1100078\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tRshe8S8m8Cy9tHZrvbH%2FNrV61jjpwOIZWzMjiNwg0cBG%2Bk3YZkVKja239snKmE56Dq73pVdFJwIoQLeOWUWgYISNubTPZooEg%3D%3D\"}]}\r\ncf-ray: 974793a26cf00b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":637,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"e5ab10539d070e2b094e6dd9459a0049","sha1":"455c3f51a7f0f3b2220304df3d7a12608b8595f0","sha256":"2abd1265e700b3d3503f7b89f8d69c0041a51326d21b1ecf0d308e380e1c47ef","sha512":"4c0e60f47cf99635ff3e738bc6b713b8873d320413b135f4b4341070095dfecca5ce54c655db4c4891d73b2141d0256782067d32a39768614f3d1c28173a6241","ssdeep":"","tlshash":"bcf0bdc34797ad115fff06269d4ff84049c747edf70533cd9241cc200d186057610192","first_seen":"2025-03-08T14:29:59.830614Z","last_seen":"2026-05-24T00:49:23.358587Z","times_seen":114,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mo.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/mo.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 556\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-22c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1876612\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JpJFmB4f1zpR4KTgrabBFF4L35ISW1oYRJTfOZBXpfHEhD7aOCR5mP1khCiZApXYIAV7qiONd%2FNcucBoRbXU142WHjx3g1JUGw%3D%3D\"}]}\r\ncf-ray: 974793a90f4a0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":556,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6e9189bf2f5299a1649d51db8f9e535d","sha1":"b434fd848fa1831d2806904f1dea83d27bdb2f97","sha256":"b4ea1cfb40570b8b531ed3d2493bc20044b67e0fc8e329b9ac7ef570a9162396","sha512":"c82934aceb4827f439ff91076bb656aa5d89a1cf531fe707a8b4a158b6f65b57535ee9585011572d0d305a4cecf7202b540835eac8c2ac40609def10aad245df","ssdeep":"","tlshash":"fbf0269f012c4cdd8f51132f91576981711ea40f9185386b8136c521f797c84ae601db","first_seen":"2025-03-08T14:29:59.954742Z","last_seen":"2026-05-24T00:49:22.978631Z","times_seen":114,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/wins/wins_bg.png","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/wins/wins_bg.png HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 1196\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-4ac\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1196,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"abacd14e77b29a462ce16c98c0fae5a9","sha1":"6b0c782a9908a2bcfd349f4b904b68507dc8c5ea","sha256":"59e78f21293bf5ef8f91ac06f407cff00b62207d4bf4746d6fc10cc00d27fcb5","sha512":"12ec716b931e32427d91e47cca4cb0935f7775db1702596d54b96b33980a104d331c252a6540cf19ae42e5f00a03866b20bfdc7f4d1e344519e7f7cef3af837f","ssdeep":"","tlshash":"3021d77d6882a1fa11b0a580c67a313aa0bdd87e85848bf05dd926064dc1e1bc5ab5ca","first_seen":"2025-07-08T21:30:00.277933Z","last_seen":"2026-07-27T09:38:50.512852Z","times_seen":89,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":459,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/is.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/is.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 751\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2ef\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2015231\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gaWROeplCsdJ2JpkxqlCIRXwYuOfeTSe15mOzQgoqThI9Y3tHqnuxpWb7EMKNkQLglPT68y0YOTmBUeqGVH1SUChYv3nCavPHw%3D%3D\"}]}\r\ncf-ray: 974793a7aec30b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"66fea438872d90a09c45f31026641372","sha1":"bd510bc64ee50a63a2833f36fa5eb54587780637","sha256":"a2bd1aeef8f5c683bb35cc2174a85a04111427b6c099df4da6f3b9d0b6faa1ba","sha512":"70f036b1a35046c8412a0aa7c4de62b4844a7b467e74d9609a7ff5afd7bc9b6e417481883eba4fe00c24ed625acde0cc1fc0b6629a79c5f8b319541d7744be3f","ssdeep":"","tlshash":"b50165b782fa6be9e9d852704dcbc9a88b115111e7b041075741a6b165b02389e0d0a4","first_seen":"2025-03-08T14:29:59.784148Z","last_seen":"2026-06-21T09:40:51.227866Z","times_seen":129,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/mg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 648\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-288\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1960202\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kS3WRpRENis4yIx%2BmFm6wuJLQ%2FJtdffpBcvFFn16Ve94If7XcfePk9oYSvWsdjCrM38jm8hEErlYULVzAZvy4YW1vjz025tfog%3D%3D\"}]}\r\ncf-ray: 974793a92f580b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":648,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"45910bf358d1e48e26f433e72ccc3111","sha1":"77f7ff7d8dff1c22e622e6e67d34763449bffefe","sha256":"a568851a71a4cd520091c2b735317bb34a477fecc94160236acc133a7c524d9d","sha512":"4b3f64997ff3e041808b0c4988a10be260acf0c5997f45db6aa8cbe445156ffcd25f7ce3559786e76ad4b6d7c8600c35fe0c0ed7021b79adca0a6826cd46f623","ssdeep":"","tlshash":"3af023b7e9854c60d68fa13f6b4fa804593ebb214605db03684fd88242ca85355a4624","first_seen":"2025-03-08T14:30:00.03248Z","last_seen":"2026-05-24T00:49:23.725216Z","times_seen":117,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/mw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 583\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-247\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1100079\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F7i4%2B0oMVdblzIvuJ9ZTFfOubwRY%2BWdpIpUyHzDAAUZyOxmG6FjFFC4PrMnxNL3U5uY7xHn4qDCOMnKQBLfRL7ABMZg8irL%2Bug%3D%3D\"}]}\r\ncf-ray: 974793a92f590b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"d483804cf775c595a39b53340748cfad","sha1":"635140c41b49633acb7b7515bf12cc2c6912f02a","sha256":"594ad29e0d04b19ca73b2455a822e63c5da10cf413d443ee395e537f303d677b","sha512":"5ddfa4e58373b2723275a2bfeb99dfbf36c2f06d1a22783089b7c8f9645048a63fbf297007cdd8c36b99a42702c1439036925f2e9783c3bbd6a3e6f1dce25f29","ssdeep":"","tlshash":"5af0418deda7cc9fcd080aa191d91adf8278c616450ed2187e2083b2bce00a904d0702","first_seen":"2025-03-08T14:30:00.056443Z","last_seen":"2026-05-24T00:49:23.108204Z","times_seen":114,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ch.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ch.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 436\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-1b4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1450842\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UMGCabeK2TuP1RmHoMyZqMGFJYAlvzY%2B2pQpWpZUaFGsQ%2Baml1ykknBsBeCh78ZROMy7qMyhXdAI5Y3916Wy5M6m7NmuI73O3Q%3D%3D\"}]}\r\ncf-ray: 974793ad59310b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"afd665c33ac05882af4c783156e3479d","sha1":"878e117f4aa4c79be941a54fcb4493d153ffc2f0","sha256":"de81b77025abf19b1b320b8795bf34ec6d850b18a7cfa69642ccdc67d2276f71","sha512":"acbb2a672e9d2fd5e8ba3865015d7baa1c2d14c74cb8516b44f31a0f145b7e25f25fa6da634dcaa3479e9ae0076af33f67f50aaee69799f7cd9ffc860fa4a5fa","ssdeep":"","tlshash":"e5e0a3f21d1dac78d86e14f7426bbcfc8948ca3004a85617a9716729641745c5e90d11","first_seen":"2025-03-08T14:30:00.033209Z","last_seen":"2026-07-22T00:37:09.317133Z","times_seen":136,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/zw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/zw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 844\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-34c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1112178\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FunZRkgDElm3ZNRT3g34UjM3ZD44mkUpOOgFC5%2FNpFV4C7t1lZQM%2BEVBphzCeWRAQWeFnpv%2F9%2BBZg%2Fc1CDzgk88f8PjvHiFyiA%3D%3D\"}]}\r\ncf-ray: 974793ae79af0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"ffff7387c2e38f9abc1876c5cda5116d","sha1":"e22dcb556e950e7a5adceb20027e516fd64aefab","sha256":"8a10ec9b1f437b0c76125f07b2f9fba1fa760f92323a9c095e3cefd01ac6e4d0","sha512":"ea5bf92ba14903412bee5f2c368d011277e6bf3dcd999e54f6f9c33655db77aaf782ca88795146bfa3c4e2c92ead0b9cdd1dcfaa9004a551ed99d89e6cfad4cf","ssdeep":"","tlshash":"110186df5a452c86c74430f8d549036d5b2c83126e2357369a069b626f6986d1cc7791","first_seen":"2025-03-08T14:30:00.005489Z","last_seen":"2026-05-24T00:49:23.439382Z","times_seen":122,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/games/ico/LandOfTheFreeNL.jpg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /games/ico/LandOfTheFreeNL.jpg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:38 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 61394\r\nLast-Modified: Fri, 27 Jun 2025 16:47:52 GMT\r\nConnection: keep-alive\r\nETag: \"685ecb38-efd2\"\r\nExpires: Tue, 26 Aug 2025 02:14:38 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61394,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"691b7022eac4479020fffaef9baf5919","sha1":"34a9b4fe57455041eff59595fb78ce6b054b00d3","sha256":"2ff8f9b73e52d9d47379b7309934393decfb6a8c323f2d467bc8011b9194b9e7","sha512":"13ea8dca6f1a2c14d6fdbdd4c352acc46ffb3d71d5ed99ca0babdc40b1aa6f7896a0c59c64370e906666787f3c08bf311e8f619042b33e7370c2b9c2a6982dae","ssdeep":"1536:ttmEjjerKdhfkuJFgF71UWcKh1PcSmJD1r2/U:tBjjeudhfkuJWDUWcuvB/U","tlshash":"6f5302cea3806193f569cf24ed10eeb6aeead030b483767e0084344a93f2551fa5df56","first_seen":"2025-03-20T14:16:21.599845Z","last_seen":"2025-12-05T03:04:32.688721Z","times_seen":114,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":267,"dns":0,"connect":0,"send":0,"wait":76,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/levels/5.png","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/levels/5.png HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 14862\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-3a0e\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14862,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"4d1e214558865f17792f7add72a2e71b","sha1":"3d0d5475056b9bd710f0f03351f33a138ae74ea0","sha256":"47fbdf2dd506651557550ea81fcdb27ea666f5f2b784b1ef0e2cf04000096450","sha512":"44e6e4a41ec128e8e4eb6e669f27b657cf1645c60cf2cbbed9aea7668d458f90d052e624bbc14465762890a86e8a9ee58c13fd794cf34614e847d3712d60d034","ssdeep":"384:EqhMbnVD0d779WZkQzLHVE2+RRSxy98OB8GCZKFOkwkn:pMrVAd7798kQz0R8xyyidk5kwkn","tlshash":"2962cf93757c48966b758f6baf358d090d9202abd78541bd48a02cc6cfbbf163ac2c64","first_seen":"2025-08-05T17:20:37.327306Z","last_seen":"2026-05-24T00:49:23.538408Z","times_seen":73,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":444,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kentcasin355.com/api/tournaments/kent?lang=en\u0026pr=kent\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:15:41 GMT","end":"Mon, 17 Nov 2025 12:15:40 GMT"},"fingerprint":{"sha1":"5A:21:78:73:C1:44:39:14:ED:89:01:53:36:B3:22:CD:5D:DF:67:CA","sha256":"79:D3:CE:5B:49:98:7E:53:E0:CB:AB:20:5F:B3:F9:AD:68:D1:32:26:53:54:04:32:5E:A5:B3:7B:05:B3:CF:A1"}}},"request":{"raw":"GET /api/tournaments/kent?lang=en\u0026pr=kent\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://kentcasin355.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6242,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7b1c092560f391819b80072cbb4c766c","sha1":"cef60ae7e28d6ddcc20b39293ce5740a93fa2e6d","sha256":"8d000f6ed25f49f6675bd91f4c91e5bcb511c550cdf0c1c4c9fa65c631cd73b1","sha512":"fc08f9a0057e9273c42d290205c4b9243cb47c5efef945172772e7381f8e0800d5317fb90f6a0488390a15398cec94e156ea7ad3c5a9ce2d3c08e9483e8fb003","ssdeep":"192:GjwY3axT7oPtWuCtZYEaQKtIjZYxaQmvm:EwY3axnoJCtZYEaQ7ZYxaQV","tlshash":"80d168b547a814beaa9be9687b8bf3f065767049c3c0c498f9fdc92c044453e4572474","first_seen":"2025-08-25T02:15:23.902534Z","last_seen":"2025-08-29T16:05:26.881999Z","times_seen":15,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"api.kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/games/ico/FireInTheHole3NL.jpg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /games/ico/FireInTheHole3NL.jpg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 72251\r\nLast-Modified: Tue, 08 Jul 2025 11:25:12 GMT\r\nConnection: keep-alive\r\nETag: \"686d0018-11a3b\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72251,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"480e63994cfade2ac2765153870c7979","sha1":"d988ad62186bd89174ef3b68bcd16bd02f4812e7","sha256":"8fba0749d944e3ae15d783c931df600c8a6da87f9d37597bb9728a3ad05fef54","sha512":"51efa7a325fe7187f9c14f04a69c62abba9815bbc455081bbb8636884ed1c6faead05b0cfc54118a80261230035066e9d5cf898d0d67dbed6acd6918733c53bd","ssdeep":"1536:Y5gU93NDapkNqpQyA9GlCOgImSFnIjt6U+Nz2reWJt3YzBtZpLQC8VT:kDapCyA9GlCIFnIgOeWJJYzBtZyC8J","tlshash":"376312c659e996823358c1bd80be0e2fc3835f389799da33be601dd4db9a035c91b853","first_seen":"2025-08-05T17:20:37.047623Z","last_seen":"2026-06-12T00:18:49.608992Z","times_seen":103,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":479,"dns":0,"connect":0,"send":0,"wait":72,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/de.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/de.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 576\r\ncf-ray: 974793a69e650b61-OSL\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-240\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1881709\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ca46zaShQTy0L%2FH%2BE8ACWusIwU9hl89tm8mfAaXEjII0HrW8tCyggZNdCfFx%2BbQ8kzmAwVcKUOEohsx%2Bc97%2FpJgJnOhemcFVw9dLU1i8VSOZREtTF4L8wTRfcZXPpw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1076\u0026min_rtt=410\u0026rtt_var=301\u0026sent=279\u0026recv=144\u0026lost=0\u0026retrans=0\u0026sent_bytes=89280\u0026recv_bytes=7513\u0026delivery_rate=20299065\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=55fad1da16cca10b\u0026ts=880\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":576,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"9aa471ca2b386a0d0dbaf8d21fdb6ced","sha1":"34c0e0f001be61f855cee71cd9a20d4a16386837","sha256":"c3a022b7cd3a077dfc06f14ae2b75b6bcd1565e4e0ccfa292b7300729f256a4f","sha512":"42e934e102f6b05fe083322a43443dc9844b8bb901df3adab433aefd3e711955a669a58b3d3ee93f1b6d10a6f2580fc3839c2d5bbe763dc245a844d468564abc","ssdeep":"","tlshash":"e5f0476782cab58955d10420c4b80904bbd97725b94d51385a07f76635993c941057d9","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-07-24T22:01:00.7006Z","times_seen":195,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ms.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ms.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 757\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2f5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1966595\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XyetSduzjMdc24RegHKop8o%2B3RVp6FNv4pg6DwocNAaPsDt6A4tQtXpMuKUdWnLpnaseWRD4h%2FIKBdnBOwOWk4cG9SHdM6JXbA%3D%3D\"}]}\r\ncf-ray: 974793a9efa30b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":757,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"ff29cc71b25036442e392b9257a37a2a","sha1":"c57bf6d0c911f459b3b12a255cf1f007304eeb4e","sha256":"086b968d438e5b2b39ccf847c7a11c8b7fe2c92a2cf68ab4e3a4c95965cad708","sha512":"b00f08645d1204441b87ec5731bc43a0535afb4662d1df35d8be182373b22904b485c85b3dd5a7d6ab4390a51665a60e0e080b4cae373b10c7f1615c52b89574","ssdeep":"","tlshash":"5101bae2535b08f74fece0020056860ccb53dcd31c38c88d90e7166e275645006e724a","first_seen":"2025-03-08T14:29:59.945116Z","last_seen":"2026-05-24T00:49:22.610641Z","times_seen":114,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/sl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 587\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-24b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1112178\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TK526uuu7xocuaauc3YXsjJ0wnv689daJuKGkbplYdEGALKzI9T8%2FEdaRtWoIjJoj32UCAqgLw07zwkwFdNDU38t6ZZ%2B%2B466JA%3D%3D\"}]}\r\ncf-ray: 974793ac78c90b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":587,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"88aff2b8d045f41e88c665d47c38ef2a","sha1":"5389d3c6f2366f97f327415c9053addea6ae6775","sha256":"9fe45473d9cc2a9267273b9d3e0ab0d8bbc2da3f82db95aa7ea58fd10b40f77b","sha512":"14a10e9f61bed65e966927a5d364f0fcfacfcaacce79abb9646caede7ed100a5e81b9812da7b2f817530e3d06a52d2566ceceda45bbaae30ed207f460784335d","ssdeep":"","tlshash":"81f047b0e5523931ed542d83c3f7ccc5231474441d75c7044dd7f08b5550669cdd0ba1","first_seen":"2025-03-08T14:29:59.840239Z","last_seen":"2026-05-24T00:49:23.599564Z","times_seen":113,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/th.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/th.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 579\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-243\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1803588\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3rW6WOZeU6vmKbSV6y2QA%2F63tukkC1F%2FnIO87RQaGhvfpr3%2Fyqy20kjgjZe1nkfYGyESEA9I57pj4N8phkHX5K5Xh3KiMLF4rQ%3D%3D\"}]}\r\ncf-ray: 974793ad79430b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"ce9baa1865b1a2195cea41859dca3786","sha1":"c1d58d6c1bae88e315a95d2c5226ff9f27260f09","sha256":"7b8ea7870731cdb67e32407e4a258ac92a8d91af7f750d3f38eddb6ddb3fd287","sha512":"eebc573a6748e596fce75f20e6edd334100fc86353a3a8cae007435b3865a81e130aa455518d69d4d8d58dc4c5f9f3972e0e773ce7c76eb40d9c689a6a5ed818","ssdeep":"","tlshash":"abf0e179a438df5c9c7a2612e438ace2ef9384aa4d294844c590cc7d2740f2ae59c840","first_seen":"2025-03-08T14:29:59.969441Z","last_seen":"2026-07-24T22:01:00.691081Z","times_seen":167,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/tt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 578\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-242\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2518069\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1EQJeSi8eZ6v8VEpUzGz%2FBREvlMEAgxDOQ%2BlgaKA844kUQB7HehWd2Jr3yqisQVTo%2BgtBIJvHIeryrq1bT6zvSXkm9Xn9oWyCQ%3D%3D\"}]}\r\ncf-ray: 974793ad994f0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":578,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"b11ec74a65a222049ff0645be4448cd3","sha1":"c142a874656b7b01b5eedf57cab6cb4b487c8f32","sha256":"d05b00ae8539a82d3cdea2a8c3092dea937eb3660da277ebbcae0a983d3a57ed","sha512":"77b885aca567a334f22e2c30f03e8f216af1d0a6785a0fc705e4451db0ce39fda6af0d0644d413e6581e79d296cdda58589e57a7c2cbbff300fb22070fe9775f","ssdeep":"","tlshash":"1bf041e16a029b9490a91f75c00c057894952602e92870cd0f1d595d223b58da4b920e","first_seen":"2025-03-08T14:29:59.957702Z","last_seen":"2026-05-24T00:49:23.654816Z","times_seen":115,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/banners/cashback_header_BG.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/banners/cashback_header_BG.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/webp\r\nContent-Length: 70656\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-11400\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70656,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ea2bab14cdc7a8da8157ddbfb06f69e6","sha1":"cc4951afab03db7626124c1da456f10c071461d3","sha256":"857e10aaf89bd4e6f06f9350593339664cf8fe86f413ff1babe1431faeafbac9","sha512":"5d7e577d46b0478a4494d4998a45f3a3a25b6d839f00e8fd4d1387acbaedb33c26fc08c43a3a81b4d6afb1a47207e52a7ab0a96e60e15b2903166146dd395b4c","ssdeep":"1536:nJer27WZAsmkLLdonNYVQEethsNR0mnqmi30ZxU+wFtq8usKSlmgY5p:nJerTZFEYVtekL0nHEvUJUzsKUbY5p","tlshash":"a26302e2e94412b0d9e75f581017c49e0a15cca76e7f1a7ed2569bc3833b410a2c1efe","first_seen":"2024-08-19T18:32:15.314384Z","last_seen":"2026-06-06T17:37:45.08Z","times_seen":84,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/tournaments/sec-tourn_desc-10.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/tournaments/sec-tourn_desc-10.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 34180\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-8584\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34180,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d148e38b32c8956b437c7b38efa82627","sha1":"03d36211d51ec61a01224fd80bda867d1641b254","sha256":"142f86e18bd8325a72713e7147db6c9afa37467f1d36d84c251cbac2ccffef43","sha512":"a580f55a13d6a5ea49ee4fe7a6121b125aee170d47945e58afe595e351f45bda82ca72a113af57a44ae4b7331ae49d336c8e8601545b85d2046068f16c44b98e","ssdeep":"768:xM1oct4PlyyW0SLI/FoBQjs2ajh1SIvLMY/QuEk0N28wd7Pd:GfYyynSLUFoOad1SkLMFbns8i7Pd","tlshash":"f2e2f1b598b9d62095cc6cba5eb04ecbe34b21a483b3307e4e0d6c9116f5c19d4b2ecc","first_seen":"2025-07-08T21:30:00.331026Z","last_seen":"2026-05-24T00:49:22.734253Z","times_seen":74,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":481,"dns":0,"connect":0,"send":0,"wait":73,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agstatic.com/wlc/flags/1x1/by.svg","fqdn":"agstatic.com","domain":"agstatic.com","tld":"com"},"ip":{"addr":"54.240.174.26","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.agstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 25 Mar 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:22:43:3E:BA:C9:EE:89:8A:DA:E5:F1:6E:A5:1A:CE:62:7D:8C:8A","sha256":"A8:15:5C:3D:F0:FB:92:90:3A:8D:33:6C:77:5D:61:01:E8:D0:25:40:55:13:A1:47:54:B6:2A:66:2C:61:44:8C"}}},"request":{"raw":"GET /wlc/flags/1x1/by.svg HTTP/1.1\r\nHost: agstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 8989\r\ndate: Sun, 24 Aug 2025 22:03:32 GMT\r\nlast-modified: Tue, 26 Dec 2023 14:45:27 GMT\r\netag: \"5630d40247dcd1d52003a5d87d134edf\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: TdkKfx3D4yeLDXAOpWVQSCFceFOXptNXQHolsblbRUggBuR0s_mU2A==\r\nage: 15063\r\ncache-control: public; max-age=604800\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8989,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5630d40247dcd1d52003a5d87d134edf","sha1":"60a26cf80fa1485029d1e89956c7f6a06ceaf05d","sha256":"3a64902f39b8bac7c042cadcd2ace69975498cc6254f60f31829ebbfe31c2ef5","sha512":"340837baa5054fba81f0587d3f413e073c201503ef4db98515acf14ecc7520f5725956b64a00da6bb63981ef99c77a48007408fc308f8633c587080428f8fb1b","ssdeep":"96:3QzTBkyD+7EPNtLjLS3t0JFzXxwh+VKfljJA/X6xZNDZqPFuKVkirhg5K/Tmx7Pz:gzNvOC2jsXYfoR890uMrIy0/3","tlshash":"ef026a63823a54f697c00b59e71eb8907c5042db8bafd44e6c780e5d8a06c5cf66e5f3","first_seen":"2025-08-25T02:15:23.911323Z","last_seen":"2025-12-04T15:41:45.362439Z","times_seen":14,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bi.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/bi.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 735\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2df\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1975724\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uv7froaKhOvQyOyn3lZa0kzTEp2GkPt49EUlbxq4uFlu%2Bmhy5aKeCYUBs7sSaGUpbFPAOCvSJsk0Wc%2Bs6tFxB0F8Af7TtVJrhA%3D%3D\"}]}\r\ncf-ray: 974793a1dca80b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":735,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"7f8520b1ad1cd1e6403fdade929f744b","sha1":"427485609218fad359c3530c6c672558f78acee5","sha256":"422f21a7cc734ae6e446608d3391410f226dfa48d11fc80a68fa1c513ce06e46","sha512":"b601acc9384568aeb062de015653305b51726e9e37b09d494b1a432fcd7726fa97cd6f89d659033e7376ef3713516b48b95a52d4b2e556ed1cb81648cef2d2d5","ssdeep":"","tlshash":"480194f993f4ca1a0dfb56acc761a36aef709a582e42e80f09051cf45a1271b14f6712","first_seen":"2025-03-08T14:29:59.936606Z","last_seen":"2026-05-24T00:49:23.237964Z","times_seen":114,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/cz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 679\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2a7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1879914\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xLiKfc7OfFxVsYLZO6aCepzJ4TpzWhFgFJdZFJeyLBdJuHLCWeE8%2BgQN25hGi1CusYzE1Z13tg3%2FeX00hpfB%2FCvqnczoCtbiSQ%3D%3D\"}]}\r\ncf-ray: 974793a25ce80b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"56aee2baecbf568c71ab7cf456b43a0b","sha1":"6f8489ec1c0cb4892abc11ebbf1f7497f3744780","sha256":"3d7aa0a519525209ff4d3f2c4372f69109d134dbf331065950aaf543753a8fcb","sha512":"edc90f90d0822aec5166a038cb853e87c1179f0ed1fdeaf02e7ec024009bf2aa334e3a9255d0db0066c48776dff956a63a4c5fcebfb1b5e3f4a4353b41a39803","ssdeep":"","tlshash":"5001236adb309ed28a1f45233fd32958ddbf5fc5981a1856ea0d8431b15105731d86ca","first_seen":"2025-03-08T14:30:00.043502Z","last_seen":"2026-07-24T22:01:00.7223Z","times_seen":150,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/jo.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/jo.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 708\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2c4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 13759\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3HuQJm7QpGP7VLym0UIJkiF2SL7ldK02SwhHP3waXW%2FkxuKMKSEZFXZOFa79GhOYZPWOpywPhrRkocDmT0Id0u3gHqvekRJYtQ%3D%3D\"}]}\r\ncf-ray: 974793a84efe0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":708,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"71f9bf10c6107d62e2c17ef73f46bb7d","sha1":"40cb8b1f136f3c00ebe968b51c4a8f1ce12082ae","sha256":"bbaba727357a371b4334f5997e1e6a7c868cc3a794899fdbbfb42ddb83ab3472","sha512":"377c8092d40e6e4bd8fc2f24d2233d0a1d9ffcfec1a1d885b95266023d946985b467e4e025eb65115ae3dccdb929efbe9924c3b15a5f4354abe462833e190280","ssdeep":"","tlshash":"7f0144e723084ee8fcae1975439f98b4c62258189b28170f196a4519ed934027b641b4","first_seen":"2025-03-08T14:29:59.812769Z","last_seen":"2026-07-07T17:21:00.650135Z","times_seen":121,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/mt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 560\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-230\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1879915\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2Bj1a7sNaF1h6TCzq02zEZBvAps8cfIREsT0aymit%2FLame1JxKBefcDpvRr7W%2B8FSAu9I9lONOawKnXczcE%2FffUyYPql5QiBHw%3D%3D\"}]}\r\ncf-ray: 974793a94f650b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"ceba21aff293c574bce76dee9cb23280","sha1":"1a8931aba52c7ffa1603c6918136ad69dec596b1","sha256":"e9ecd347c1c8311b871b2e0cb0c1d13633e228a6a06baf9a61ee1f7f344d475f","sha512":"bef9dffd66f1e17e466f7859495f7d2a8bc485fd47240efbce54273d64cebe83984bf602db29ba3b1c0a99d7a593581ebf91c375b0f4a2f9340b80d00e82626d","ssdeep":"","tlshash":"12f026d515899e63e8e9837e14935882fd51806863f44c7f7751ee044b9503454345d4","first_seen":"2025-03-08T14:29:59.868036Z","last_seen":"2026-05-24T00:49:22.717682Z","times_seen":118,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ru.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ru.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 560\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-230\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1945058\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HS4MUBjK3H411dqN2h5E%2B%2FegAHcgoY0WsK%2Bjwkp7uFKn63Ijmrguoj%2Bf9xxgytWZG%2BWTaRzhUNjIJwaKjmNPJuqZQden73RzlQ%3D%3D\"}]}\r\ncf-ray: 974793abd88d0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":560,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"cf2ccd7570934b878109d4e7c81b93ca","sha1":"485d6eb55b6a49a42e2608f17c88e56283a9db82","sha256":"b6a4d151b0be57dc0af9965bdac80825aece4bc47c077989d0134a0d37c5dfc8","sha512":"56fe2dfeae16e69afd40fd19fe68e00b7af9a9128dd6149d7b4d4b8362a5f7fadde260fb87c031921090ac665b3763c8acba2a19a95b7e97ef06d5e8dafc61fa","ssdeep":"","tlshash":"0af026abda35dd88df2a43f2855c415bc866566449275b9258000793149d609d279863","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-07-24T22:01:00.704133Z","times_seen":167,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/banners/Back.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/banners/Back.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 28088\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-6db8\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28088,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3583eac2ded8ea57bd34caa1522d13f0","sha1":"1f45e41c224cfe6a97eb54f7fce4db9b62f8f4f8","sha256":"be1cc5c3f34e5c2e5a1b39eb8bbf3f1c73f1940ea6a66f889ecaaa95838bde32","sha512":"765c131393bf9b8964e8d45fdcf5be82db7a1403484d31ab7a38dc38320c8f6f7890edcfbe11bc539467adc372f7ededb60d343204b2be429a43621505a4df48","ssdeep":"768:5pnrVFIuWQNZmqrnRuP5D7RvFeUONoLH5O8ZKXvlIUfQ:LnrVm9qlGDtdO+O8Afa","tlshash":"f9c2f2f651a6b7c8c50100ab42fccc28b018c75c59824cd74633f4b9619c672d66faef","first_seen":"2025-07-08T21:30:00.353694Z","last_seen":"2026-06-06T17:37:45.198454Z","times_seen":83,"resource_available":false,"data":null}},"time_used":967,"timings":{"blocked":883,"dns":0,"connect":0,"send":0,"wait":77,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/uy.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/uy.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 802\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-322\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1876613\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k4Hf30G95Tl0jVR6rbs0Nh%2BwQwHWMZBnpiSqOg1IcbB6mp0vjTZXFW2LqQhjUbUZ7S4EgeuaTM7C0OHQhvtiGJ903CsXD8q8rA%3D%3D\"}]}\r\ncf-ray: 974793ae09860b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":802,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"cc8db6a5c6bdc7b907e8396384d85b0f","sha1":"cd4c5e4c0f3b7c0bd805f8ba655f72ccc8daf2b2","sha256":"730607fe9b214e58492879aada23a87f6847c6428ade18b7adbea62dc18a0d06","sha512":"81abd9cc6a17a6e225c9acaee196288d482803b27989c90b611962329706514e9352b2639c90f6835a36834a699691b2ef052c72580111fa46e0ab397f1f2151","ssdeep":"","tlshash":"64017a53153234bd4c372ebda7bafd94d81c5439d676401385935ed749c098c7c94763","first_seen":"2025-07-02T10:58:58.228572Z","last_seen":"2026-05-24T00:49:23.151288Z","times_seen":111,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/switzer-700.31bf83bcbf020d67.woff2","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /switzer-700.31bf83bcbf020d67.woff2 HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:37 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 19432\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-4be8\"\r\nExpires: Tue, 26 Aug 2025 02:14:37 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19432,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 19432, version 1.0","md5":"8463cdb9a06b7047c6e2e7eda0fd0627","sha1":"bea3f13f55c080e15e50312a5d5cecf29b08f801","sha256":"7aecbe035c1e311eabe7cac089f565c917558c365f809d5a9684881782370e1f","sha512":"cc46e30571e453431269f6ab06097c96601fcf4f700af69ab6416bc632b86d8fd756f7bc6c8710c05686b62371ec87b3a5ecb5dc5fdffe5010ec0603ec678b08","ssdeep":"384:sKMcqtSsJOPJmS0eepoRtwLHtJYvmW6Oa/0SXFao+HwvEeSzglljMt0ge0dvyO/:Qcqte4MKoRtwz2b6Oa/0MaxwvjSz+Itt","tlshash":"5a92d0e0228328f9f0640541768ed0fdcf61ed1964f227585046b2999b773deb7399e8","first_seen":"2023-06-05T13:27:27Z","last_seen":"2026-07-27T09:38:50.514768Z","times_seen":477,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ae.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ae.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 677\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2a5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1961912\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zqYXcs%2BqieH6B3voG1tSGiJcAgcNRKyBS78bZP8PotrAr6xG87uy7VeYslyv%2FlJRsST%2BBTANYl9VJJJ26KM1At0KyNaUR5LLdQ%3D%3D\"}]}\r\ncf-ray: 974793ada9570b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":677,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"7bab0e63507cf79cd3443bebeb0c1c09","sha1":"4559e89950dcf02e8953d0d9d91417bcee8d1aa8","sha256":"22924cd7c4d7a88bffc68da8c8ce80fb0a20a7a55c0a89501549f5ddcacf2754","sha512":"26c540a478537ad4c46d3a119ff2377eeb6fe479355bbb218c7aee138a3fa3f5f5bd4b6ace53c23389f646238f59445b42aab77819489416b37ac209f8c2f81b","ssdeep":"","tlshash":"6a0123e52d784c581787272a1ae40216fc97022813c7fa39c92eeca24636f37b35b95d","first_seen":"2025-07-02T10:58:57.877508Z","last_seen":"2026-07-22T00:37:09.200805Z","times_seen":139,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/base/modal_bg_bottom.png","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/base/modal_bg_bottom.png HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/styles.297578458c20fb04.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 1842\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-732\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"10bd7eda47c8770c2fd83c0df0651e76","sha1":"6095babf9e18aaac7fa7e9cbca24502a307aae37","sha256":"6342495a235df2516e9a84ae7b84ad4c65935e0f1c0e1f75342fb11c432d7142","sha512":"82f273f6b3df05d2cb8f87c61c1efcfc5e4501fadfc0819cfa12c6a71080fd0cc7b6960e8b4c4ccd45ee1eaa0fb4e5446b6c28e87aab931331d3baa6b627a994","ssdeep":"","tlshash":"353119e70cce225c58b707a9b4528b010779d359ccc26d3296b7aa404d3de9a8012d1d","first_seen":"2025-07-08T21:30:00.264454Z","last_seen":"2026-07-27T09:38:50.649739Z","times_seen":43,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":343,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/me.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/me.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 692\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2b4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697707\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HbLVN6aLfATCXSB%2F%2BbOLJ9TGeF8sxirMLFtwRXIw4sXgNTtUX70VUHeOm%2FurUdrIBhwR9152OEu%2Bd6pSZas9o2GNot2mRJU53w%3D%3D\"}]}\r\ncf-ray: 974793a9cf8d0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":692,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"1d876adca3379302ad1100134b7e80c5","sha1":"debb8fb0f0fce56efd23c4d30e2888ddd6206fa8","sha256":"8f167e51f009dde44851673e17db5a0a225c3f29273ad3c3182993132599ebf4","sha512":"02dfac46430966f93f3bf622f5328e25d7adc45640bd5b656e6c2403e5bd82eb0bf4999eb7ce16f9fba10a9dd9fa79c3730033b2831b466020e8c26063564025","ssdeep":"","tlshash":"db018391ef0afd59c4a73373a8cec2088c0bf73188b01e4527b2dc7792c1290b5a806a","first_seen":"2025-07-02T10:58:57.896794Z","last_seen":"2026-05-24T00:49:23.035592Z","times_seen":111,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/mm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 709\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2c5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697707\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xMLJFY8kwLsPbwfTKcDLzazD7XzWmvlHYD0I3nYDFm9XN8pt61jvmKewPwN72hlEtDdF3UJbmxwf%2Fy%2FdMkMuOH33VXINnjcsTA%3D%3D\"}]}\r\ncf-ray: 974793aa1fba0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":709,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a378d814802587f85ede3b27cb1adc99","sha1":"823fe21ee09dbb19819f047661d39eb76aff75d7","sha256":"0f63c0840c85250aa36bfb74d7ac0a099c63582b88706b0a97336dede602ff5a","sha512":"3bdb143086d72e48e31dcdcb516b86295b7eab55565efd5c2a91a6f227ad558d96dfe992b33f8b54beeaa745da4f6461987b26bcab03d5723f4f5de65fa67dea","ssdeep":"","tlshash":"9401941467b9cc61c12105658a2ed81c1df527b54c268e96e614cce91288489b74583f","first_seen":"2025-03-08T14:29:59.898996Z","last_seen":"2026-05-24T00:49:22.744819Z","times_seen":116,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/nc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/nc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 775\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-307\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1562298\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ktqM73Ry7TnSwX1XJGOljSIghnXiLVTLHs1jrQmUlv7Uro%2BbENEArp6hsYeYFP0zI%2Bi0jsoOVJsiGenc2r0pWQGPdTSUuSQwqQ%3D%3D\"}]}\r\ncf-ray: 974793aa5fd60b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"dc06b662ceded4adc7a117f75b719137","sha1":"63b745757e7a41f2405e699c6359d1ca696f4715","sha256":"81a471e8c205ed2f43922d483433dc0a04bc9a7b8918f96218fbe41421bd6f14","sha512":"e5252ce4a96cb736a49e3ce427fdbfd2c21ed8522775106b797de3efb8511f172b8d736c49bf665f49a14087b6ef2ffbbab2fb403762926bdca96772d532ed17","ssdeep":"","tlshash":"4f0125a392d50d76bc1882a0c73bc681e6b61c36153de31a0e893178f3d9150595465a","first_seen":"2025-07-02T10:58:58.096069Z","last_seen":"2026-05-24T00:49:22.943447Z","times_seen":109,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/bonuses/cb_vert_gama-reg.png","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/bonuses/cb_vert_gama-reg.png HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:37 GMT\r\nContent-Type: image/png\r\nContent-Length: 4850580\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-4a0394\"\r\nExpires: Tue, 26 Aug 2025 02:14:37 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4850580,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3024 x 1632, 8-bit/color RGB, non-interlaced","md5":"90e04037664deef452c58a1abaf77776","sha1":"1522c374309b3012a288f7b9ff27b9d956e48673","sha256":"72646ea21dc336370da2d4b9e667d8fe60bc0a67f65f8b0b681677ed45b4657d","sha512":"55c27898aa6385d253d41052f17b7b25a6ab9e89c3170299f691379d3706228daaa3cad9b1010c00ac591bde53e598040383be9d70f81d8662c70803e81b11b9","ssdeep":"24576:HbuBNXXkmgSeRLt3ZE0eXckD6iBToeTrFWhxzviVltxkwrgk:EX0mg7RLxJeHLqeTRWhBvivt2wJ","tlshash":"322523a3c6fcff7758a3c614104899a0618f0486d6569be055ef620dd2ebee72b33b41","first_seen":"2025-08-13T10:56:46.729524Z","last_seen":"2026-05-24T00:49:22.929982Z","times_seen":30,"resource_available":false,"data":null}},"time_used":1050,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":980,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/banners/NSD_header_BG-1.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/banners/NSD_header_BG-1.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 70576\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-113b0\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70576,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"235bf94ee05b4ebfcaf5d69624c2a74c","sha1":"b9403fc4b701f3822481d17ef74cc68719780070","sha256":"edda1557ea1258dad07cda63d00a54064b8c16462f732b7659e9b1a711cc1ffb","sha512":"c887f2330a0ce0992f44fb2c4525e901c18a4d3e0e8883c247f0535c9ec5d9e9bc7a66d1e7ae69a6814b86ed49ca4d63982e00fa8b486d1632c1295ab9dc2312","ssdeep":"1536:diwrT53RfIVZ0IDPSzxEK/djV2AsFq/EmLBgt3sEuCPeX91Sysbq:d7RFuy7xEydgsE4BgBs+Py91Syse","tlshash":"c7630299e7e242ae443fe7c02989667dbd5903872bb4250f3de68443cb6973041fde48","first_seen":"2025-07-08T21:30:00.354523Z","last_seen":"2026-05-24T00:49:23.679644Z","times_seen":82,"resource_available":false,"data":null}},"time_used":670,"timings":{"blocked":570,"dns":0,"connect":0,"send":0,"wait":72,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kentcasin355.com/api/countries?pr=kent\u0026lang=en\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:15:41 GMT","end":"Mon, 17 Nov 2025 12:15:40 GMT"},"fingerprint":{"sha1":"5A:21:78:73:C1:44:39:14:ED:89:01:53:36:B3:22:CD:5D:DF:67:CA","sha256":"79:D3:CE:5B:49:98:7E:53:E0:CB:AB:20:5F:B3:F9:AD:68:D1:32:26:53:54:04:32:5E:A5:B3:7B:05:B3:CF:A1"}}},"request":{"raw":"OPTIONS /api/countries?pr=kent\u0026lang=en\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://kentcasin355.com/\r\nOrigin: https://kentcasin355.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nAccess-Control-Allow-Origin: *\r\nVary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Max-Age: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":209,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"api.kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/tf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 595\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-253\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1103762\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PNccWdK5LqdVxuL75%2FWI%2BRqs4OhUIPxia9B1WO%2F9F6TIGYCp25yGKlXumaO1MCIv5Zau0SgnyVYdw4osUuWIqyPKdmfZ7P5esg%3D%3D\"}]}\r\ncf-ray: 974793a59e160b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":595,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8a709873785c102604743aabde845813","sha1":"9185d3162d09a3e031748483953c2848752f9102","sha256":"648562c92103fbad0fa87eee574e6f151cf9a1f167824536707f6b6e74b568c1","sha512":"8b9e50d7bcbb69322d7ac2bc3b5bc06ea66e37d4d7cc17114efeea83194b0a36da21ddf520888b262c388cadd8efd1593217df72763322774c920a0fc27f5ecc","ssdeep":"","tlshash":"56f062bec2258d58e57c86b6df2209a09ba53ca403bb312aaa32c927174c9068481d96","first_seen":"2025-07-02T10:58:58.079229Z","last_seen":"2026-05-24T00:49:23.530979Z","times_seen":109,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ph.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ph.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 671\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-29f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1796246\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2BWsLZrN%2B%2FqdATGm%2F9KiH6KbWzZQEAPBzsJAUKawAtqD37MSrh3yuJgJfdFyUPYdaVMVETbIrMLGe6EUmgggYEtFvnd0KsWp4g%3D%3D\"}]}\r\ncf-ray: 974793ab88620b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":671,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"e7200873e4aa3c39facb829d059bea0c","sha1":"79f866395d6316f2f29a6b90cf349346ec726471","sha256":"982c777adc8ad593920c2a8a57231bec05198a6526fe3738f264f66ad1b904f4","sha512":"6ac359c6d8f1f98ce4e6dac24b1e1a8937697e6016442566f80395c9d96f25b8b780413db64d0233882972514d087557449679e9b4118ecd81434fe91e6d99c8","ssdeep":"","tlshash":"fc0123c6fb5705634f20a9f6a1578c133e79812c909e715adf635a228a15a44e6f8483","first_seen":"2025-03-08T14:29:59.926406Z","last_seen":"2026-07-06T20:32:11.979715Z","times_seen":129,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/so.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/so.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 742\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2e6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1141706\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2B3jI92IwfAPfyywlDdpISdvR7bCy0t%2FKjyqHbHNkadt6L5J%2B2wrNDijAT%2Bpdh6aqxCIR3Qr62R27WYooydfyP0CDmzRpKDvtw%3D%3D\"}]}\r\ncf-ray: 974793ac98d30b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":742,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"c6fc654bdaff2ea88752473fa086afa8","sha1":"2dad69ebc119987555477fa685ceb1321d5c4cb5","sha256":"4d1efc058833b76601bcb1e8cece2d94905675a5ba341ce4febf7fd9ac89c73d","sha512":"f23206544af671a0ab5a5c8a4f7af5e798f59dd5741cef8a5d42280ef21e43a79f8528264fbb105f045eaae1c55f010dce9fa5e7d9ae9da973b194a4fecaafec","ssdeep":"","tlshash":"450115ea61618809c97c2eb2f0d6e855717251224708fbce6528e69ad4c934c51f6552","first_seen":"2025-07-02T10:58:57.992998Z","last_seen":"2026-05-24T00:49:23.635102Z","times_seen":110,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/tg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 765\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2fd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1947730\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hS9E04cFEs0CLq%2BRoMCipatI9q9tu4cMTq7IAPdPRrl05ke1RQx1FPpqOJhi4KVoF6H8RYN%2FI4r7dEFqoEd28ZF3CCODhR%2FRZg%3D%3D\"}]}\r\ncf-ray: 974793ad79450b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":765,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"d63bf2d2f2323da918bcda3ee5761a36","sha1":"139d02b843cb86049f5e698559c8f930eea79940","sha256":"6b60a32260d36700eaabc77020ab280f990bbfae8900c11879ca6d3da15750da","sha512":"d01adf8fbe8e45c39ef1710224b7476571b392e36829b6de9a9515e502bd56ddacbeeccf8687d4db4e6c6be5743173979f032d3793e18fb282ca8e80d044dbc0","ssdeep":"","tlshash":"ab016ae35b913d64b6e18533c5465d316c5bdd568b53e30f2e4c84b01ebcf4d9c95104","first_seen":"2025-07-02T10:58:58.103543Z","last_seen":"2026-05-24T00:49:22.816473Z","times_seen":111,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/switzer-regular.03e7decc532f08a6.woff2","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:32.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /switzer-regular.03e7decc532f08a6.woff2 HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:32 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 16728\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-4158\"\r\nExpires: Tue, 26 Aug 2025 02:14:32 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16728,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 16728, version 1.0","md5":"e23161fd661d68acd57b789a9480e91c","sha1":"4ee6034ab8db8f6ae87f82ba2919574005dc91d2","sha256":"ddd9595560c35725e00d01667ce9bee519d245620e610844f0dd149df10b5d5f","sha512":"cfaa87e0974980fcb0e353db0a68deb3907846a6966e46fa21b2b637edd29071baf13825bb9ca2f10f457cd94baf3684d68b4c41af3a8353b14d21ea538f4e65","ssdeep":"384:6pTkKBpsb+Kkz953yu1mrwtzaYIAH6coLs9gLGwNnCPIRKRaaj9FG1ZU:6pTkKJ3yALtza/upE3nCgKaaJFG1ZU","tlshash":"1972b0295b80530fd91df5a270a4dfff61ae1ee4593ef8c23590b0b1284597a04b2db8","first_seen":"2023-06-01T13:52:06Z","last_seen":"2026-07-26T16:32:28.408276Z","times_seen":4509,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":127,"dns":1,"connect":66,"send":0,"wait":131,"receive":1,"ssl":71},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/be.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/be.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 544\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-220\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1884890\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3HvGr18UglWADktpve2ADHmallR6DK1s9JMXznm0yAkdCdGOnaGsnp32SfosSzbUTCkGp6xbWpcdnKPjOtErHV5HR7QpU3IZaA%3D%3D\"}]}\r\ncf-ray: 974793a1ac880b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"438f741be00f0a46e89b861528755118","sha1":"40b419ba748f66d84ea8626ba4803c64390b1635","sha256":"10901e922dbb7fffff9ad7a6ab5bca612525f7518e3dfd8334de30d74bfd28d3","sha512":"8929d21bb7d22994cc83e964409c070fee7d43950bd7971a7a886d0d2cb95470944e8362aab078cbc070c7c264a139c508010c0295a9e017961366e0cfbebd19","ssdeep":"","tlshash":"39f020ee57584aecbdc814776f1c0829db212b5b49aa3a3d8662cc760e4214e777a501","first_seen":"2025-03-08T14:29:59.882378Z","last_seen":"2026-07-14T06:38:22.650794Z","times_seen":130,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cy.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/cy.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 620\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-26c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1803586\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xpNGf8%2B%2FWJNdCLopAHVWyFJ4yKZ%2BAeCcSZFv1njCNEvStnRbpnwJJ6D%2FJ8THl1NOwT%2FoE684LA42zeTFINQgaTBsYvUUrKRkyQ%3D%3D\"}]}\r\ncf-ray: 974793a24ce50b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":620,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a79e75ffa3dc0a11443e44b4fab3fe4d","sha1":"f07148e2806ccc8fc71c86b602f69aedd7a1692a","sha256":"137c4b0aeb4c7aae65b2299e6a1b18d874d71d2aa984fef64df41f032439c990","sha512":"1c15211e940500daace61f17a680757d6589aa55e35e9ab98a7eefac521bf852bf11c70e81ea44a07d83a2bdcfeb2f46eb97c12b96854630036b687d89e81529","ssdeep":"","tlshash":"3ef062a319894d4490b0a75b42eac90339938920991eb509d9247e6811296c487c4ecc","first_seen":"2025-07-02T10:58:58.014456Z","last_seen":"2026-05-24T00:49:23.715825Z","times_seen":112,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/il.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/il.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 644\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-284\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1803587\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oXdIY7mN3Vjj1rJe6vs%2B5UsnPsui%2BzSa1rU6W%2Bl8JPCM9x5ynO%2BU%2FPw%2Ba4w%2FtsOsDYUCvnKVr83W42iECHqDNI1qWecSJ6wbqg%3D%3D\"}]}\r\ncf-ray: 974793a81ee70b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"0b3755af2667f255adaae9c5026106db","sha1":"0f5db50a0784eb637a7a38ec240b466e55eaaefc","sha256":"3b6f7c238a129011aa1ce64761c2dad751a2aacae31ce23aaeae1fc204b32a12","sha512":"396a757558b0f78bba27320f92795302df3a306a564e416e94832d55252784197063e0c6205d20634ee6a201f697c9a109768ffbdeb94edf0ce54560a070b8f3","ssdeep":"","tlshash":"bbf0c87592afe5a51ea50330a512e108007313e13c5b2707070607252332789d7b0103","first_seen":"2025-03-08T14:29:59.811653Z","last_seen":"2026-07-24T22:01:00.716721Z","times_seen":142,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/pm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1444\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-5a4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1546816\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bBVMC35QoVTQYqKjIugcGvS9%2Bs8roJ1gsPP5otto%2BWaYEnd18KsjQJybDIVnxvzNR8414RlnCn7nF1hJOa%2BU37eF1Sb4Wuj6IA%3D%3D\"}]}\r\ncf-ray: 974793ac38ad0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1444,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"5ee3c24356c6b4dda0c6b33536acee87","sha1":"2a7dd038c9a10e34b48b27c7e6d21c5937cbeb33","sha256":"3d092ed1e5cfef82b24e74b7bc67c7a1c4cdcbe20d2ccf8b60f3c3742c49a21f","sha512":"6bd3615d2933e11c9d6228caf8bf54fdead99a90ec4775179e480b5fc06f9acfe1fd4661c7ecfd0dd27e7b335ddf40386721c417aa10165eaeb7f9387752ded1","ssdeep":"","tlshash":"5c3119b4dd94fc20d3bac23b6d7794367d663b7e198394500e7bbc1a36ac9581105139","first_seen":"2025-03-08T14:29:59.778534Z","last_seen":"2026-05-24T00:49:23.414182Z","times_seen":114,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gs.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/gs.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 798\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-31e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1947730\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H4u%2BClkLGP97MJ6wkQbezUl6VD46RtyGDENisH1UxPUSBXCUHg9dp3lN2qb5zawUR%2B7b0VPj6qg9IWB8cNqXz5PI3nPGNE85NQ%3D%3D\"}]}\r\ncf-ray: 974793ace8ed0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":798,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"19354f9332d2fbf0d427fa08e8aa9d08","sha1":"d043ee9b0ae2205a0def262c21b39c78859a6750","sha256":"0ead79138884b04dc8bf5fe2f368d82aabdd7529d041e8451216fc538f2290cd","sha512":"66175719ce79284b0563f2291a66ab6deccff0171300f30db614178316a50fc351bfcf892723f28ba99a1f2b4a31e296b636c9b564836245d7afb7ef296e64e3","ssdeep":"","tlshash":"100175620f814e21c9143035dec616bfa46d994cb4f792c661f28827da013a8146c312","first_seen":"2025-03-08T14:30:00.04745Z","last_seen":"2026-05-24T00:49:22.560005Z","times_seen":114,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/info/info.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/info/info.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-382\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":898,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8c7ecd8eb43f97bc2fa7fc5cfdb0537","sha1":"babebace137a602e58ae56a50d39c17d7ac3d91d","sha256":"27294ec839cc164e338e5d4c41f4895ace888b6997bc3a9ea6bd69f9cad3b003","sha512":"d85230d1fc820aece06a92c5517e8a05c9b9c6b0745ae9d5035b73ffbf1a22a160cfc5eed15c65fc97dce90f5dc3bcbad12d8e86cf3ba03dafc6a0c1b4fcf854","ssdeep":"","tlshash":"971180f473ec8982194f4b79ce2169406e3b0af9f7c123e4baf0a554ab180e4885085b","first_seen":"2025-06-22T12:57:21.236701Z","last_seen":"2026-05-24T00:49:23.229467Z","times_seen":138,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":218,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/footer/payments/astroPay.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/footer/payments/astroPay.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-1778\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6008,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eae9755df32ce0b96800ec23a003ed5e","sha1":"8bd420f5818521092120270b13a81f6b37b90fde","sha256":"dcaba9df594f4878907d580418e7c05ccff8604f1ca5f0e5e8d19bf42e3f13ff","sha512":"1b5c4377bf83246b0d7317d5b5c6c220f565cd5925b14c3665d313577c504c931e45bceb991f34e9cb3922caf8b27cf4c5bcbc4969f459c94fc811fc85f28835","ssdeep":"96:AyqqHYHn7+X1/3PXnCq7do5h1ZBXJL2x4/sI5S/RFdeN2mjjM4KqL2VcmFCEc/KD:AuJX1vPn7dqzXJLBsWS/QFjM4h2imFC+","tlshash":"4bc1b6e6537892bc45cb9f5eef229851932fa0bab516c2c1ca6ddfa450c7c88f707810","first_seen":"2025-08-05T17:20:37.073455Z","last_seen":"2026-05-24T00:49:23.198523Z","times_seen":73,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":576,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/al.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/al.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 551\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-227\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697706\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QWtu%2BJE88TG7exbYCW4WfHpnNP7Mj93jFeZDKolykxib1kMFc7eznoScPaRQ7Qhe410W8w8qBFJQdIN8qZlpV8vC0ZR3EJJ0ow%3D%3D\"}]}\r\ncf-ray: 974793a1cc9e0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"0d918eb764ffabd2e3aece61840df662","sha1":"79e045b7e3e3277e82e74c2d8b1e9c4e77d1221c","sha256":"f6b0544bf9fe9bd153ec8fdb2823ada5bee06f7d409c3b9fb8cb55a57dd01f4a","sha512":"09d508e80a1d3978464d75588042650011110a1c7563c48587874904b36108529c8876d182ae32907e89b22fb551b600ac1dd0cba902d16f998c2c82dbd37a15","ssdeep":"","tlshash":"bff0c0b245a58ffdec25907620800f406c8089887221f3b4e65e5a3eae4b11969b5882","first_seen":"2025-03-08T14:30:00.036037Z","last_seen":"2026-05-24T00:49:23.612252Z","times_seen":118,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":134,"dns":48,"connect":2,"send":0,"wait":14,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/st.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/st.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 746\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2ea\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1546723\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mwU%2FtPjHO0y0RhB6FCMDP7Q4VQ2fAoniHItpACQGjgjl8jXsKmK8v1lYt2L94bjFnHoG5VbBk7%2F5u%2BVJxGQAsZghfDoNB8FJwQ%3D%3D\"}]}\r\ncf-ray: 974793ac78c30b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"3f8c73459bc37715a3ec4a6dd5b2d9a2","sha1":"58fdfbc2fa11a61e20a8f89ceeca9efb2ca8bac1","sha256":"a8fe63aa18d598852bd3556bc503120e1e31ab32199cd248dbaef3fcbd5c44b8","sha512":"6eac6eeec73b2c06b63be883f6c5982b4b5540807c5e291087a9a74e3edc9a06450400a2dc27f0b80afc42080508c8a57bd8d60f8e8e68f2867cdc4ae782fb84","ssdeep":"","tlshash":"240144ff46b69c26777a0432c70ed068c9548f99717bb0178143e67b023a216f6e359a","first_seen":"2025-03-08T14:29:59.927496Z","last_seen":"2026-05-24T00:49:23.434725Z","times_seen":114,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/sr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 749\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2ed\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697708\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qdySFcfjslUrq4rbPCyYmC66E1%2FzJJN%2Fvi0RlsWOO%2F2I0qeZ8zuEFOJ4Oha%2B%2FQ%2BjqGdnmFFdtA1riYyl5c7%2B3LkvwDZ%2BeC%2F0XA%3D%3D\"}]}\r\ncf-ray: 974793ace8f50b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":749,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"1e9d448227926d4c240a805f670b328a","sha1":"4b22c6c136f9c1aec5082326beab51e76a10e3f5","sha256":"5dbea7d34cba7d9a116b739afa6701201c054a28b1c5125fb49213e06822c434","sha512":"a78a02a88e56ba71b186c39564be253bfc40d603953bcccebd1534cf0d558af070950d31bb9a6b7865857c4a8b954ae1419a1d9ff65bc3954400ee4b03b0b4f2","ssdeep":"","tlshash":"800165873191c819906e0e1bc7b848c8fe7d7e4de43900576c7348fe0b1522519c6205","first_seen":"2025-03-08T14:29:59.771162Z","last_seen":"2026-05-24T00:49:22.897486Z","times_seen":120,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/js/c775408/locale-en-US-json.js","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:38.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /js/c775408/locale-en-US-json.js HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 Aug 2025 02:14:38 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3383\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"68a5820a-d37\"\r\nlast-modified: Wed, 20 Aug 2025 08:06:34 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-08-24T11:35:37+00:00\r\nx-node: m9-up-gc229\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10509,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10482), with no line terminators","md5":"2c212727a7bacb453945e1ab7025234a","sha1":"5ff39073a6077374bb26f1f31b2428b7c0c8bb6f","sha256":"b8f45519424c6fcd31acb1d568c259fcb7297e38246ab98529e31d5d1490dde4","sha512":"8226cbb571eb34c684a6ae6b13056a7b968eb12371a25ea0a05861265b4019b0ec1170d0a2dd4a42495765a2b9e7e6a3c65aa8e86b93ba2920af050de25a058b","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8Bi9FLeRJK:C7H7ObdFkOIphZ8w9FC7K","tlshash":"fd22d71ee7017f360fa613c3744f7b53b6a480e592646cb5d88c826953b9bca721778c","first_seen":"2025-08-07T16:51:42.115213Z","last_seen":"2025-10-09T00:19:26.491677Z","times_seen":878,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":127,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/script/widget/config/ESt1iDtMoi","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:32.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /script/widget/config/ESt1iDtMoi HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kentcasin355.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 Aug 2025 02:14:32 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1599\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Mon, 25 Aug 2025 02:09:27 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: STALE\r\nx-cached-since: 2025-08-25T00:09:27+00:00\r\nx-node: m9p-up-gc31\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4367,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"0ae4067aa5fbfdc40e11052e24e015f8","sha1":"0b2681af93df3454bbda397fc5f7ac3f8f8ff26e","sha256":"fbb03db9f84a93d261894091964e85d6b0022dc5bb3439543bc3cf7bffb4c933","sha512":"6491b2cebe31d72e2cea6d7f0a2d0c8aa9f38b2b52b10fa27cbf50e6bdcd96ef0938cdfb6faddad26a7b53dd6a5f60daac8c98b69b6234ad5c4b2635a68a0eeb","ssdeep":"96:/A+kTDtXXRV6ljkaByiwFamSEBIfD5CSCrp6hV:/APTDR6lticfD5D+pO","tlshash":"ad91eff398d91a6e1989b5c2e3777d8e30e82a52d744cb3bcd3e5a2fe506110234771a","first_seen":"2025-08-24T01:12:46.591679Z","last_seen":"2025-08-29T16:05:26.820165Z","times_seen":19,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":120,"dns":1,"connect":57,"send":0,"wait":59,"receive":55,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/banners/shop_header_BG.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/banners/shop_header_BG.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 69834\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-110ca\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69834,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0c21478aabb3d0c7575ac19bcf3f4f0b","sha1":"6ba93a1a5bd6602deb863b0bbb34c7f182613e3a","sha256":"4868f8733412967724f467064b3439cee76a5386661f2e2427e5896630079a66","sha512":"e2e5966824e51b5f3ce6d0ffdc336b2de5c3b796814ea869d48b2bde33eb003945113327edc2c208e6e899293afb3f4c27f6b0a43338309002addf0784d6227b","ssdeep":"1536:9/SYhE3O1Zwpgug94DkA3VqGcJXKfDx09xggUzBOa1n:9hfwpguU4w2V2mgUpB","tlshash":"97630269513b5fe15277deb95349d7008378b35e7ccf31dccc9b8a3b208198a20a91a7","first_seen":"2024-08-19T18:32:15.323041Z","last_seen":"2026-05-24T00:49:23.22543Z","times_seen":82,"resource_available":false,"data":null}},"time_used":1055,"timings":{"blocked":896,"dns":0,"connect":0,"send":0,"wait":95,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/au.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/au.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 648\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-288\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2058962\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MM%2BXDAGr0bWMvJC9cLs1tp3%2F1Eo6VrzfssSSaTweqOvNmwsipw7Znw07u5tlSVWpzEZzyFo8xK4PKvmr%2F7z87YmZUvahbANzUA%3D%3D\"}]}\r\ncf-ray: 974793a1ac7e0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":648,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"b5e06e2a6df9344e54cbcacb8a1c5370","sha1":"88973b661f3b61bd46ce3cebc294780aabe24747","sha256":"3f0ca58366fdebc74210392ad397a494f457de55b68b4c07c4658aa1abe9cdfe","sha512":"efa5560dfaa07e85f2149f02e2743895febe30c8803ff70f154acae7dea20b6fda66b761c422a90639e94416a5ac2f537f932de4097488ed4d96bf58cc1209fa","ssdeep":"","tlshash":"13f0c8c492630fb2ad9303040c0b1e14d84e134334a73892c7bc68322c36a44474001f","first_seen":"2025-03-08T14:29:59.762173Z","last_seen":"2026-07-26T18:03:35.080057Z","times_seen":150,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/by.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/by.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 621\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-26d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1801593\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YzzynSj3dzMoBY0q%2BGz30F7aHysxc2r5HSntMfIx6XRGRJA1pwxCaNVAmBDRA8%2F2BxVMUJayfR0dh6me6ZguTKjC50ZfwZ31oQ%3D%3D\"}]}\r\ncf-ray: 974793a1ac850b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":621,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"e9ac58c60fed8286867f2bbf5d6b3904","sha1":"3d1b30e543357075d0f8ca33f72d6b73bbe36176","sha256":"358a429c05fc5e92b2a7f293e1a7394d27612f6c2be8c8c7cb4d51598839bd88","sha512":"377c4f3ac9fc268401a4f573873374fe03cb3aaa3c8aaa147aba34486fada96a595e6d83b54177e4eeb94ce3af3003a232b12e850fb34416245b79cdeaac9551","ssdeep":"","tlshash":"32f062943258cf30cde2869b0a3bb844bf888237eb1501390e6ef95204a8a1c9a80103","first_seen":"2025-03-08T14:29:59.82864Z","last_seen":"2026-05-24T00:49:23.207507Z","times_seen":120,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/fr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/fr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 643\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-283\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1961911\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hMrViaEuOdZ746TU%2Fmj1oTKYxTEEn1XaPvcDD0Vj0v29%2BxE1vs7%2Baow2w5jItzBv8Ck%2FF9Pnz8pJu05uu3CrmXauQ90qD0qMUg%3D%3D\"}]}\r\ncf-ray: 974793a3cd830b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":643,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"b0e56166bcfbb508c27bb5644d28e682","sha1":"1e341e58301426977090680443fe73a1fe4cc6f6","sha256":"d7d6fc0bbfb6ab0f62b9f84bcef35d852c67f663cbd40955e595bbcf2519d314","sha512":"f5f883b84deb97624b5d916cc3f852eb1b1135a8d981c3a1d006fd8c0704deabaa2e8a174666cfc132cde903584a83d6a83edba7e2026ce59eceddab8ddae834","ssdeep":"","tlshash":"fef068651541dd7ccecb5991a3e79d1062e6d253471217149c32b41f6d5d3050d3774d","first_seen":"2025-07-02T10:58:58.141069Z","last_seen":"2026-07-25T23:43:19.253369Z","times_seen":233,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/gf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 679\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2a7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1947729\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xzbHNzcgKNEceR60VhhgErEyc1yOghzQkVsBI5gtIQWf4mBLGu%2Fkh0SKP4Ocufrue2tT2VcR32V2YsMEb3rWAKy6F5K4seQyKQ%3D%3D\"}]}\r\ncf-ray: 974793a41d9a0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"11ecb7f610c249173300aec86eb465d0","sha1":"c155330663e72b5db670baf28e3766ccb54f6fb2","sha256":"9330c21fe8b82f35b9a4bc99d4f464739bd670b373b68b4b118fc6d15ba3117d","sha512":"e2fd47f458eaa053963be1b68711308e2681cb20b9e61718568465d190f28784a7418e8dcdebb421016e2a973f58751430d11f40cacf37d87fb5f11c5c474ae6","ssdeep":"","tlshash":"98018875226d488efd048012411304df9c13083a9a1b533bdd5e57717f530905fe7010","first_seen":"2025-03-08T14:29:59.809416Z","last_seen":"2026-05-24T00:49:23.525959Z","times_seen":115,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/gh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 633\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-279\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1460549\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xsyIKMpMdJ6GxrcjJd2B1r%2FfO3%2BALpQu3aQpZo%2BmewmZ8OGQxfrU2rO70FtCBWVr%2BnCJQ5mMLjJpZ%2FmsHcXZEb0urV0Orab0VA%3D%3D\"}]}\r\ncf-ray: 974793a69e660b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"b6126737171f4a87163982611a59374b","sha1":"421fbfa46e901aab8054902d9d3d15eb6790a552","sha256":"a464b89c56a7e2c28a71cbdacc40fc9174362ebb2b57944b896f919de81e8c18","sha512":"5f7ea766d668a1cd5843137c45f43372bb442b1633f010b098b78b9dea6b3558e51f7098d54f9317c49664e8966b24aebdc4858628e68e335eb4a784ee46e672","ssdeep":"","tlshash":"6bf062f11f15fab9e2374c1186220280eb3ac5aae42bb79cd8b8df60272550812fc441","first_seen":"2025-07-02T10:58:57.893676Z","last_seen":"2026-07-25T23:43:19.256315Z","times_seen":151,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/tk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 585\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-249\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1745086\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o5o2%2F6Wc5MzN1dVK4AW0qbzEOIjHGfHdHowMDdkFpGm7e%2BRqG1jFsySPBhs9Bgigdwrl2jpEikpuYa6CJvEAajZQk8%2F78ZNy3A%3D%3D\"}]}\r\ncf-ray: 974793ad79460b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":585,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"1528aff1b35c1a07eee3bc085fafb85d","sha1":"a076e3d6f640f354f3429c5c6f416b47335c69a2","sha256":"7dcc495290dac28c983c21aba5af32c019da82ac2014b0846f2464efdaa15faa","sha512":"9b9d9074db4d8ea9958cc7d433f6a8dddbe53c1cbaf92fbd470d1429133008a77dc4a9a2358c7674cd9568fe0b3d07aa8568c53f8e71211a5c0b611c26bc7af1","ssdeep":"","tlshash":"32f0416186b1bc3fee1940735bb68d79a037029ab628d0960003943b9f1a5a010e2006","first_seen":"2025-03-08T14:29:59.913596Z","last_seen":"2026-05-24T00:49:23.650418Z","times_seen":114,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/banners/shop_mobile_bg-_1_-1.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/banners/shop_mobile_bg-_1_-1.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/webp\r\nContent-Length: 36656\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-8f30\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36656,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f03a4a527b34ebd74b4adc8c9e423094","sha1":"ca8624d5f55dc00f5e7bd2e12333cc4cb1cfc1fa","sha256":"67c9d22b705470e98950e10222e34f7984e60a676972bad066e9753c8e0d36ba","sha512":"019e00036717f4876bc545ac53307a04c7e4835c4402077e0e17e0be181ebdf5b9ccd4ebb89f2c4f40d240c7755100f6177ade4ec2e58765f7fceacd1a2df8f6","ssdeep":"768:z+PZaVpJN1PCdeBKSTwny/juBm86wXLEh+FPsCnMlq:zwZeT6dQwB1XLEeV","tlshash":"a8f2f1c5b78b16f52048aab55d37976ed2f82501bf00f6e8afad490f840b28b1cd9523","first_seen":"2024-08-19T18:32:15.319299Z","last_seen":"2026-06-06T17:37:45.149174Z","times_seen":85,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":73,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/um.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/um.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 890\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-37a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1529731\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FyHpr5Xv87zxZW74FwvTJf2fetNqRbDuW8EmNRxWgLluIRrGuzFGE%2FdtfzVMwp4p28p72v1mEJYrnzrMVoBaYynqascUzkTmzA%3D%3D\"}]}\r\ncf-ray: 974793ae09840b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":890,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"555c2f910aaf9eaf2fc1f819f6086617","sha1":"cf593b6ec1d2d81ba108c54308a36b6efb291cbf","sha256":"4d47f45af3fa53dcb923a02649229ab886d07544cc97ed5fcc3416fd85d3834e","sha512":"8493ad9a843c557eebae847b17b4bf2db7607ea7bf00b01d3e01e9e717b226d8e00b5838e4e84e6e83f74289b800535cc22eff62715886929e17fd5472c16785","ssdeep":"","tlshash":"c51196d1ebc87499ff1934c28263f23cc2209bd4977568622dc3e813167364edb05e9a","first_seen":"2025-07-02T10:58:57.988466Z","last_seen":"2026-07-28T08:27:13.790204Z","times_seen":521,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/mulish-latin-400-normal.16e241995ddafc55.woff2","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /mulish-latin-400-normal.16e241995ddafc55.woff2 HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 13308\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-33fc\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13308,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 13308, version 1.0","md5":"4a684bb9f8ac87840ebf9ecd11ac6231","sha1":"33e5298d295711a280e246ef054185113e096b30","sha256":"f86eb1d613257841fb2fc63c9330319fb84c7bc8d0f73d45f85533eb1659d4e3","sha512":"ca98a378863c5f54521d7aa9edce454a4329e15a2c8a98458738953b7eb68d68ff5378ee5b5c076dbf1a4e95c73c4c30b7a0c741027693e51eeec6081102cebf","ssdeep":"384:zIKfmwb7W3j/hZ0q0YefLhpBFJ6QT7ZeToluvj8K:zIKvbST10DdjX6QTFeYuvD","tlshash":"e752c073b64deadcc8d48a7593b9a022bec0526685892efc55376c433f0fea11581c7a","first_seen":"2025-06-03T04:36:48.16898Z","last_seen":"2026-07-22T11:20:04.523977Z","times_seen":217,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":141,"dns":0,"connect":0,"send":0,"wait":71,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/cf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 706\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2c2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1628133\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DYxl9c8FCUWg9ORBsGEPpS%2BdRBqpgj3N4z8iDpytoJKHe213GuxDaI6uTdGjJ4PmJwQman7Xuj3x22LhvEDRkVJxaeRV3g%2FIgQ%3D%3D\"}]}\r\ncf-ray: 974793a1fcb60b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":706,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"2bae19358d79c6b07325f46878339ea0","sha1":"4c2d12c180f031a2ec37176414e6a61dc727171e","sha256":"5d77591fa0c409ea25c72d310d8e73ae0bfd7a13a6c6433078f767d90e548e65","sha512":"47ef241bdd60a1f9d2ebee4581f03a665180a28f36508881825f54a4f93d0cd163d0e4aa8ca1998fd3d02a61e68aaee388c02e80ac7d74725d08d659efc20ea9","ssdeep":"","tlshash":"b001d8e0364a9c85c6250708ac256edcff50c640c4b40f4dedda1df55761e49838dbb8","first_seen":"2025-03-08T14:29:59.783382Z","last_seen":"2026-05-24T00:49:23.290068Z","times_seen":114,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gi.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/gi.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 827\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-33b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1942777\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rnncNLdUaU%2BOS3vUlwtIT6XtWH9eRX%2BBcQZ%2Bx3Ub1WtM9kK%2FFVp0BPlHCA4sFu8xG7ojmmbyYaRra59MBTQ3eH0WHf08LfkmsA%3D%3D\"}]}\r\ncf-ray: 974793a6be6b0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":827,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"46ac37d63773b1ae7f2551e2a8f2bd2f","sha1":"db531fc81a74de9fb17717faf13ae3600af228d0","sha256":"cc44968b6063a8b12373a551b545006d13e5958a651a793faf34403a781de266","sha512":"0e7f7515b5c5b5ca503179a8ca59c5d44d168397158dcf4152af35b2dfe137c093304fb44a517994d1b8b646f6c3763069bf73c1424a6fa4ba47546f0117f6d8","ssdeep":"","tlshash":"63015643d7c745a8ee0da0aeff124418d299b52279555dc654c52365423240258292c3","first_seen":"2025-03-08T14:30:00.052693Z","last_seen":"2026-05-24T00:49:22.878012Z","times_seen":113,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/py.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/py.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 616\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-268\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1628135\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p5mcJmtOf43Pg7djPH8bEcC34vtjb1O1V8MiDqwEzm0jBH8%2BRj4j8xCVVxsecRu8v9zNPEkNQ7%2BcHGMMqhGRG57bJefxfKgISA%3D%3D\"}]}\r\ncf-ray: 974793ab58450b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"d30b7e284fd92d4d8c43399ec87f7125","sha1":"8ca5497e08d537b6b13af52e5d7a86cdb98d0854","sha256":"0df6d356ff7046a472956ba55eb970a16bfecaa25e0c090c719b6d3152548e1f","sha512":"f14a43ef32ea9bd9da22a4d31cec4f6bb46fce28c906459312338c039e93db4c52624872a536c9b3240da921285c757fcdd744972dedec6063d45a75f1ed9206","ssdeep":"","tlshash":"3df047e7cf08bc50c2dc9bf54d4a04d9773315c6a8970112b36207784d12ea5e4f475a","first_seen":"2025-03-08T14:30:00.050628Z","last_seen":"2026-05-24T00:49:22.864497Z","times_seen":117,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/vn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/vn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 473\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-1d9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1791846\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NeJ%2FY2SELjDsJDEJjKxvfZ1T%2BebZdKvxPAusvwJ2W9eLKHk96t%2BqoI%2FRxAa1NPlbnypaoxBQUwYWFyKAqezShROukxPiH1XUtw%3D%3D\"}]}\r\ncf-ray: 974793ae39980b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":473,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"70d1d9de7041b01f35a6078484cbceef","sha1":"cc5b02402ad3857ecdc810427ce66094c74dc4a3","sha256":"674dfd4118472d46a30f2c632bffb3cf3b304d22756b41d9910d1f662d2d9916","sha512":"081e83e56647aaa95bd2e8311cd54e83d601c2ca0e9439dba43ab9faaaa0a17329748cd6cb619832e1cfc198ec35d37d312a9a7bd1cf2a9e8e369f650cfaae75","ssdeep":"","tlshash":"6df0236b6f8cccf8ee5a2730d1055430b8507870d8a6f5131121bd26b4df7436819316","first_seen":"2025-07-02T10:58:58.291162Z","last_seen":"2026-07-27T19:48:21.744648Z","times_seen":199,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/banners/weekly_bonuses_content.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/banners/weekly_bonuses_content.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/webp\r\nContent-Length: 40012\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-9c4c\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40012,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"67521610080036c0583934935acd096a","sha1":"1cec53d1b43012103e8cf352bbd72092dcc52ecd","sha256":"7c5905bf15fa1e1b700e18e00b03aec004dafe2da89f02a9df036a026f96033e","sha512":"908ad35e688b9ad37a3f2921491f0653ddb7611b2fc8bceb031fe220c9e7d4208c5522dee75cd1b433f1b7a765d6f4c8a8455a5de10ab73a7a65d13f85bce3dc","ssdeep":"768:0t57EShQ5RfgescpkG/uh1Lh+jxjPEPR+MNQ8caTj5sr8/rh/:0t57ESy5NVscHIlh+JPYVuMYcN","tlshash":"4503f154699af657830b3301d14947ec9483cb3e1378dfda95a3439d3a6aa63e80f60e","first_seen":"2024-08-19T18:32:15.312706Z","last_seen":"2026-06-06T17:37:45.143242Z","times_seen":88,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"agstatic.com/wlc/flags/1x1/gb.svg","fqdn":"agstatic.com","domain":"agstatic.com","tld":"com"},"ip":{"addr":"54.240.174.26","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.agstatic.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Tue, 25 Mar 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:22:43:3E:BA:C9:EE:89:8A:DA:E5:F1:6E:A5:1A:CE:62:7D:8C:8A","sha256":"A8:15:5C:3D:F0:FB:92:90:3A:8D:33:6C:77:5D:61:01:E8:D0:25:40:55:13:A1:47:54:B6:2A:66:2C:61:44:8C"}}},"request":{"raw":"GET /wlc/flags/1x1/gb.svg HTTP/1.1\r\nHost: agstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 911\r\ndate: Sun, 24 Aug 2025 21:47:29 GMT\r\nlast-modified: Tue, 26 Dec 2023 14:45:28 GMT\r\netag: \"3de413a6f455e1e35121519f2e0deb75\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: xQyiSAvShfuzwItnXr-ZGMUH80hZpa6exDgPH5PSnmJuztknpmuUAA==\r\nage: 16026\r\ncache-control: public; max-age=604800\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":911,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3de413a6f455e1e35121519f2e0deb75","sha1":"8692d11f1bef937ecda85696ec530bbbfa76e5df","sha256":"2f0cc6ed1e8e9a7e56cafd3500585d685ae0c51abacddc52f750fb4d23f60b04","sha512":"cd5ab599bbe91838b2cedf58005c100196999ecca5c1c9db00d76b7eb8e91daf7edfed73cfb998dbeeccd5c4b88097ebed29a611a9d68ab07fd071bb5df4da4f","ssdeep":"","tlshash":"4b118cd462fde149ce52430c6a9e72682127b1c773414265f1991e4edbc588bc9d2eac","first_seen":"2023-05-07T23:28:43Z","last_seen":"2026-07-27T09:38:50.604042Z","times_seen":526,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":82,"dns":40,"connect":1,"send":0,"wait":2,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bd.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/bd.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 692\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2b4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1450565\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NHUWW8OUSN0q6nXmD9bbnNuYjPDwiQAKOsGi8FV5LX3RZBGqx8E3fr9cywQZYS%2BTT9VS61mmZiEmc5DsUPJ%2BWvApFO927hUDdA%3D%3D\"}]}\r\ncf-ray: 974793a1ac830b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":692,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"06b822361247bbd4e76691536d3ec21f","sha1":"e79a3518b1bc96169b93e993c15c2a7e8e58e178","sha256":"0e4d1ddf9f322a40f922fcd496a46e90996d8af8f1caebb4a147947036fa99d3","sha512":"064b6d70528a069e52a63fd1377e453f8bf7e52dc261a47a8e0a21853b81a62b8ffbad17ffad1cffdd451ce9a1efda72a80eae5e4c6ee8c28d9843a690624f3a","ssdeep":"","tlshash":"340144e2b3921db9f6cd88f1c89b44001ca0445e9e915428182c897d9582615d9fe1f6","first_seen":"2025-07-02T10:58:57.943012Z","last_seen":"2026-07-19T12:55:04.50251Z","times_seen":122,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/co.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/co.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 569\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-239\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1973015\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ImTJIpFPMVWKaEuDZ3JvWVZ0MOmAzQLNcze8ibf6Oph0CKW58B9qGaGlaGS2oWQfnsfeEkTitvetkqV7R3qewJ3odtLnFMB8FA%3D%3D\"}]}\r\ncf-ray: 974793a22cca0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":569,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"f5202998c4fb9fe4ab7663789c973f1a","sha1":"ac151cc898c0446fa68b337d7df6fd7ee262a451","sha256":"165c7e4d5e8fd56cd2952a464a03f6f12cfc6df6bee980ba989ebacd6af3343b","sha512":"6c7e47c195c6f6124628a9a169338fa87a055c11250e4f48df275a9a1ef03a8977c20b85ce85309bca9df719db625a2cf15ea40f91eb5e77c931050c7e6aebf8","ssdeep":"","tlshash":"e3f026ceca060c3aac35250f15df4550cdf4485ebc277107a5709935092e77980fdf14","first_seen":"2025-03-08T14:29:59.937626Z","last_seen":"2026-05-24T00:49:22.606541Z","times_seen":128,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/pf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 653\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-28d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 9185\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kYOlBf4rknTmdn8duhmuZ7EaNq99y1ngK3cTGqXDHkMhw73grB0siXLSuZMuAVaQaTl%2BmSiXbRcPo%2BJ3IvwPCJ3n2eoySwMPNw%3D%3D\"}]}\r\ncf-ray: 974793a45dad0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"2f564b2f23b734ee442add0f7fcb041a","sha1":"1e5b742a558e2a2101f188ecba0a115973b60cbc","sha256":"a2dc6bd1d5b91f9dcf0899fdbcfd2b1c1306e2f9840d9820817837b9a7675286","sha512":"f12101268f2ccfb7b7f3c857afc388985f7fb0f07dff8f89de3a9c966ccca3972c6bf06ac7166b8ddcc9a34959ea3002aee0ca87326404d8eb77786fd229cdad","ssdeep":"","tlshash":"45f083e4379024d51adc87e80b4556628b644b52b073a0cf16808e06460a29e3ffc680","first_seen":"2025-03-08T14:29:59.941916Z","last_seen":"2026-05-24T00:49:23.528591Z","times_seen":114,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gp.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/gp.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 679\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2a7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697707\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LJY4DxXwLmCESm7D7U8HN8amxUd7IM39Rj8mnHiDlLsqOrtvldWPije8GFOesgYO5S7VDCc1CiRlnnSvkqC9GJh%2FDKrCfxpLjw%3D%3D\"}]}\r\ncf-ray: 974793a70e860b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"0d0ecee1fe4c113666de9dc362a57deb","sha1":"d23a1ab891eead0569b591a0280f4755fca32abf","sha256":"9dc9fa2cf43eb9c8449fc32717db36efe4f883454c0e27edb9d48d620a92aae6","sha512":"d6d98eaed3f0b9d626865038f716c9f22fd89e7a99f3c5329a738e2b4307da600d3f6fe20097c8cbc230d807674e2c228d4eb1dd009755d627744d71115e0e19","ssdeep":"","tlshash":"5c0183aa0f0c8832c8ec51b58ec86118af143f61fc39f23341845c24679a8e03f80022","first_seen":"2025-03-08T14:30:00.055739Z","last_seen":"2026-05-24T00:49:22.880784Z","times_seen":115,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ng.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ng.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 601\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-259\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 488603\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I4s7OBCcMI4yftf9AMucMuZAJMqa1KMn1LWHmH8fFoRmdYSrqqFVrDSpaaT%2Bb4GNG33%2Fae2VjxjWPFsmeOL7LW2m1GvxdYlRQQ%3D%3D\"}]}\r\ncf-ray: 974793aac8050b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"b6f18a11761bd7926e3ec751127be3ff","sha1":"33432226c66fd47442d9f5bf532e08dc13e6174b","sha256":"93bd71d1517029bdf0f8e933ca034f886d9969af5859fd8109b2ad3d839bf3b5","sha512":"b3fa6fb60f271af098925eccbb77c783c517e7a55890caa713c5aeeb8486a7fbefec0d8512ddb116f87dea4f1497c1d3ad47f8847de6dbf343155af4b35d32aa","ssdeep":"","tlshash":"8af0b7479a16dbd644c3c2521c0142cedc2422729067a119a52dfc21aa02935d397300","first_seen":"2025-03-08T14:29:59.777102Z","last_seen":"2026-05-24T00:49:23.448404Z","times_seen":121,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sj.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/sj.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 670\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-29e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1960203\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41x0RnhJe5mXUm5JSO2o4UhrUWDFm%2FItReLZ5gCiteHfhjwuHhP3tAzzJjMvRLr5LeK%2BCusFVwzyROrD%2Bg1rQT3PAe43Yj%2FfKw%3D%3D\"}]}\r\ncf-ray: 974793ace8f60b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":670,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a9740043a6ac2a5f2512dd196263e7af","sha1":"8a56b456d3851dd06003845ae859aad228c3c0c8","sha256":"c07826d3a8286ff20351850821afa5e1fbfc39c1ec29e3fbce5a0b91f461ac51","sha512":"9ce9ac1835a769a10bb623b912c8eb382bd97342a6185a4efd34338638e57d5a4719a9156a78a6f8906e1e8bd8ddd4680015081a7d30c0647cb340ce94ffbbce","ssdeep":"","tlshash":"4f0123f614c1ddd0e7fc3326a37c92c25f50c4f6b755611857966e213440f42429930b","first_seen":"2025-03-08T14:29:59.801518Z","last_seen":"2026-07-24T22:01:00.731307Z","times_seen":168,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/switzer-500.7b78a01de3f438de.woff2","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /switzer-500.7b78a01de3f438de.woff2 HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/styles.297578458c20fb04.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 19564\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-4c6c\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19564,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 19564, version 1.0","md5":"a7cfda8e322242c49247550915e00013","sha1":"8246c541665cdea3ef22a1ffcbfd1eb1d34d24c7","sha256":"7393d1abac009ede0da9f95d6c83479a08d798e28d3509575e02fb1d2346866f","sha512":"20a0e7c47f698fd2eb98988cb244547690a4426460f40d3c31b4fa5311e4cd28178159002920004eaafb5069b74267975aafee770b0d39c8e31b142fd2a30536","ssdeep":"384:y1rROrEnYIq6iuk6tznGDDq7qY4z5afxQJpW3VdNNZA8tkFCJG+:ARZYH67zDnQ5apQeO8mA0+","tlshash":"7592e10697c05a8d8ec616fc304bca1e74195e5281c42ed16b18cdb399a6ebe2d813bf","first_seen":"2023-06-01T13:52:06Z","last_seen":"2026-07-26T16:32:28.437066Z","times_seen":2208,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":127,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/tv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 843\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-34b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697708\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TydfPlUb1n5GaXQ18kfgTb28iiJLzDAe4Gr6kJHJfah9u5Y2RwxoJ7gRcQps8635gEkOOXLbspfsPlbUfo9tn8pCWaqLOhRubQ%3D%3D\"}]}\r\ncf-ray: 974793ad99540b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":843,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"04387b1524ec9a1625504ef3d2f5fd2d","sha1":"9fbd36e33af28636c723ffa65f206199ff1fae10","sha256":"6c1238310e730334b9da458932bd2cd1a03db9050e7b0bbcb989344a757d7d9a","sha512":"3a790a499dd2787bb9362b41e39a2f6b481ea4c1210f5f571876bbc14b14e3e8250882bf85ebfe84a4dd59543c80ffa6d6aefcaf8c576c1582579393a74c8c4f","ssdeep":"","tlshash":"5d01d6ed4fe4ef40a782c2cf234080b0ce69148f8ae4900a73f8c5301e1d180a74e879","first_seen":"2025-03-08T14:30:00.053343Z","last_seen":"2026-05-24T00:49:23.451134Z","times_seen":114,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/eh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/eh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 830\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-33e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 867682\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Ivb%2FoLoJRMvx3OYmGIvtg%2FU4GYpIxVPtLxK4qFnzi2PqO4i6bEO5AUjeuNhEjCcQW2gX6%2BqCNLN6aNK5Rrn9rlIhGktR5V3HQ%3D%3D\"}]}\r\ncf-ray: 974793ae69aa0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":830,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"d7ba6ded1ae2692c293c23ff3de857bf","sha1":"df8f4fdcca67776e37937b1e5b7fd819b4a13394","sha256":"b721a0cd3b4f38dc6d6f6007132be4f144d2ff45254c17410c10bb745fd4facc","sha512":"41c3e9b38f120627ca223023fded246e67f04d281ed9f78b5fa55220f2f468bc5d0c00968bfad12825cb7870a380c7f743d305e9b1f163523f450d00cb9381f9","ssdeep":"","tlshash":"b80186c112800934cee78305323d35d4e0ad272f4647e643f2056a365819dde87f0b13","first_seen":"2025-03-08T14:30:00.058549Z","last_seen":"2026-05-24T00:49:22.873376Z","times_seen":114,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/tw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 547\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-223\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1142047\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nPRPFDNJSVkLu6kBuoCYHHjRrDzQSRoTJxRYN8u9JF8lo2nsAmxrtTbQAhQvCQwxvR1YYjTOHXXbSkn29aOfE4yA%2FC%2F5Wt7jbQ%3D%3D\"}]}\r\ncf-ray: 974793ad59340b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":547,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"7bab22e8dfa08f72644ad92cd50e6650","sha1":"d53e4af913760ec78c04f0d17a73c3aee4900d19","sha256":"29956e0cb431fc49c1efbe372f8c9e942dae927cec870a861aa489d166a8a6d4","sha512":"28a92330e911d1c4f0f8bee98fffeb45d1e6b5f19c0705aaa3251ee73122d0ed2abed3d387210f29e3310e191fff2f88bd848f4e1da9e37172ff8a2d5c922646","ssdeep":"","tlshash":"bef075f631775f1ecaac0037d9b20d16eb16047e4c35eb06f955a74e0b22059c6f0791","first_seen":"2025-07-02T10:58:57.890198Z","last_seen":"2026-07-24T22:01:00.714216Z","times_seen":124,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/levels/hexagon.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/levels/hexagon.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-2a6\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":678,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d63753195933b385be23a7e8957eec24","sha1":"44116eb2bd0232243ef3a97cfd9a160d8cdbe35a","sha256":"45d1adfb6587ae003bea112b0d4b5f743d40bc8a670cf837c90052fd3135a7fe","sha512":"e68ece1af31274629835c1831518fdf5571bb2b1334f8087f9ffa16459c631f7c11c015c814bb7918aeda3451cd6a899b010862d986f28441387bcf9e622624c","ssdeep":"","tlshash":"d2019ec5750c9181f4098b098a3d703f31f47cfc9abf435935a11297bd451da4c92ac8","first_seen":"2025-08-05T17:20:37.089767Z","last_seen":"2026-05-24T00:49:22.774519Z","times_seen":74,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":658,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/cc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 796\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-31c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1745085\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4qT5V7KJdnaOf%2FkWcxZ4gnZAozsUNiy33TlAF%2FYQdDad8wlzVqP0ooCVTd105vZndwNGEuKl9gkr%2BH2BjJrf%2F2dv18f8OucH0A%3D%3D\"}]}\r\ncf-ray: 974793a21cc30b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":796,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"0c72437f1110c708538f1de7e645b2a7","sha1":"316c695044717db9c887e3198946e58a1c401eb1","sha256":"a1fa6532ae271cd5a585ad14cf0f7228f0f6fac96afcd73d330eba725cf4873c","sha512":"6b6ba69ca08e3a0c5efa11261c4ad2ce22eeeee855ab778763508bdcec597184ec47aad3e332e8ebfda6d711fada7f38b47c40a2bdd78c65f50d5610ba1f0ec3","ssdeep":"","tlshash":"5801c573504f0d3de0ca4c6ca4e60eccd568361201a29f1e1ab9640308bca0d209542b","first_seen":"2025-03-08T14:29:59.977998Z","last_seen":"2026-05-24T00:49:23.468512Z","times_seen":114,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gy.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/gy.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 733\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2dd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1975725\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ixzyHHMwE%2FbPAF49jl20997pPEysknFAjEhG%2FSeRdiXwH%2BKhzAYW%2FhBxWRLIHooGtsA27eFLx%2BWNWQOa3YYAjJF4xLdKGaB4pg%3D%3D\"}]}\r\ncf-ray: 974793a73e9b0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":733,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"bb3c907a9424bf3b5b35e9be7e593707","sha1":"db2e21d1d134b20c66a5572f34d62087b59dedc9","sha256":"ca0a9f5fde816c11788cb89f1945f0894ca19048013e04bb6f581fb05907a304","sha512":"3036174d54fce948091974c08d6c1ccd59456bae43df94c69b8dfb9902f9fc0447d5d24348ee3dbe7002e8d9382404ec185fcd499943addd711a3311e11df7ad","ssdeep":"","tlshash":"a20165e283d9a9ec7d206661a25a1638c02919758e787311411045f7969d91c5788efe","first_seen":"2025-03-08T14:29:59.953728Z","last_seen":"2026-05-24T00:49:23.614388Z","times_seen":115,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/om.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/om.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 624\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-270\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1103763\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EN1ZdyGQmPWai7BZT7mE%2Fi2f8eBXb9w%2BIVvcCXtPc1tab5sdQvYkTHUuUuqKv9tPw6G2p6hbyDckjLIjeRqGo1mFKUghKcpufA%3D%3D\"}]}\r\ncf-ray: 974793ab38250b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":624,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"7b02af1f4daed51b3269ae400c14b241","sha1":"1ca969c790044dc377c2a5beef87dc9870254067","sha256":"fb436dc2ae47e09349db62df6abaa709d2e85057d4b65e041b0378bb6234a067","sha512":"86280ce1617c2f847d471ddd4144ddf3c62d83f67f1e846310c9b6d46a2bf96a706a10be04c0a59ca552d40ac0d1fa061ed2152a338a06a9da7b02d60bd285be","ssdeep":"","tlshash":"52f002b74b126d20cef442268942c5b4afc9d6411d9d4471861684f1bb503ac53faf1d","first_seen":"2025-07-02T10:58:58.179272Z","last_seen":"2026-07-26T18:03:35.101052Z","times_seen":125,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/sounds/agent_message.mp3","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:38.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Mon, 25 Aug 2025 02:14:39 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"68a5820a-eb0\"\r\nexpires: Mon, 22 Sep 2025 10:19:20 GMT\r\nlast-modified: Wed, 20 Aug 2025 08:06:34 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-08-23T10:19:20+00:00\r\nx-node: m9-up-gc91\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-07-28T04:56:45.491731Z","times_seen":16640,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/banners/cashback_content.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/banners/cashback_content.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/webp\r\nContent-Length: 39078\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-98a6\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39078,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d28a349152e849aae35f61fc506b6a6","sha1":"a7352149a40530527f96b4bd9bdcda9114d621a2","sha256":"83594fb676b1a88b4aace065d60291fb60167d9ac97ea7a87e91f5d1da37a795","sha512":"59007a1893d3017ded96a1ce95b9fbb007c8c73d86cef1e2f57c4d88f8b9a434107393233f21a7090e983edb3764480e092989540eb8b3b53695502dc8935f5f","ssdeep":"768:F9HSVrBbVywC39doKz6pLis91uOMiwomFxk3JtHH+aghsIV:F9yVzywC39lz6pWs9gOMit3JBH+abIV","tlshash":"d903f19d460128f77ac16db2901bbb7c744b337828e227f7fe80993981398dd5b65609","first_seen":"2024-08-19T18:32:15.309009Z","last_seen":"2026-06-06T17:37:45.289842Z","times_seen":84,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/footer/payments/master.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/footer/payments/master.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-348\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":840,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"65c3e82ff58fc44a441f2f66a98b468d","sha1":"a44fbbaf538a17bdb70c2c2eae6abaf4bbc2a47a","sha256":"54cc8b9b5ae72dff20e674903762c4f25668bc87da2c55c2a3978691e43e2cd5","sha512":"19da66a80cf63453e02b62d40c5705fedf190ff9b425f31c1bfe16a03546aabc904baaa0cad360d38323391345719a687b0e053a2a5f1862086bbab0125f204b","ssdeep":"","tlshash":"8e0188ccd27c91a8fc0c53c98f24246c3e4aa23e5270c1daf00e98a496d6c95c410ba3","first_seen":"2025-06-22T12:57:21.081259Z","last_seen":"2026-05-24T00:49:23.477892Z","times_seen":219,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":570,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/levels/2.png","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/levels/2.png HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 8778\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-224a\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8778,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"4f31a3583916442a1b43fdb95199358a","sha1":"7376adbec8255d731c3267e1430057b4cf61c5e4","sha256":"a1c42735b5ec272e951e3d6a9d07b5617342d289b3810523f13ac1e23f1ed558","sha512":"ab5d2753f0a91e773c5225ad3285c3b71179537686ecac2be8fde99e799c7a4273cb7cca948b20d9baeeafe40588cc7f75b9a2612c09a3d225f2f568473bba17","ssdeep":"192:qSxFpS9vqmnRvTpM+6r2ZybqSAkFOrUMMxFPp1nQ3j0jJ:lxFpkvqwvubqZybn4CFPp1QT0F","tlshash":"2002cf73100d55cebf86912f25b89f02d056f758c1fd17884c9926c9a1d56c33b1b122","first_seen":"2025-08-05T17:20:37.410056Z","last_seen":"2026-05-24T00:49:23.499213Z","times_seen":73,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":420,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ao.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ao.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 717\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2cd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1876611\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=he4awVKTmLny4ZO07%2FE2GCmVYVw9d8LEqk3mKW3bV%2FvWCKK2RCk2mQnsUC0vBvzxRj0WFt9DL3oO2chkoHxRSNBliU3ZtBCgYg%3D%3D\"}]}\r\ncf-ray: 974793a1ac770b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":717,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"60b64b12262f515fc81cf3cd539907f7","sha1":"112253e003d497c07212a894cd51781f8a4e2841","sha256":"d8acf613a4836a0c40a7709ff1e9188158557dc4962c612a02a277219546bc7e","sha512":"b1a8bb85146aa74e306658f87c2eecb9c2361bb3b88c7e16f554d3def3f90731025bd0fd1f9877abbdcfe52b47c76bb5018528cc5563386cdca8ee3802d3c74e","ssdeep":"","tlshash":"dc0194e334ae11acc9890070f203af74f91b38b4a32804360622df65160ff8b52533a1","first_seen":"2025-03-08T14:29:59.773553Z","last_seen":"2026-05-24T00:49:23.028468Z","times_seen":116,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/eg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/eg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 660\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-294\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1975724\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oSlaBWEdkbNgTCRa%2FCv8h9b5ydnl8Qeb6oIXo1828hjVhnwmCfnZMGPeynDxuRguPS2EHEi6Z0%2Bd%2BXcFp2bgMmJV0aZ7Nt4C6A%3D%3D\"}]}\r\ncf-ray: 974793a27cfa0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":660,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8c87c748009ef723a8b33ddd3cd0e7e4","sha1":"5847db409450b8c44e9236c90c31b75b251de99d","sha256":"a1f55c979e036e83771f33acf49005956e9ed29f0725861fbcd27c416d80f98d","sha512":"47989e7edd37919504a0b9adda200dc951a482e7986a025eb9cee918b0c5a573219061d050527d9e04f218c03a085b13a015c762145eec7a80c4697ee0774437","ssdeep":"","tlshash":"ca0123a47790ce29eead0170a83121adefd429857ab906240543cbb8c446447a5c7853","first_seen":"2025-03-08T14:29:59.859244Z","last_seen":"2026-07-07T17:21:00.670909Z","times_seen":123,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/nr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/nr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 558\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-22e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1947730\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KE6bWGahoffT0V7ipl9Wy33qy%2FChP6Dqh5fgdkeFwu02Lzm8h6adjmXyd8oQNvKHzlTzxPFYkAe%2FvTv%2BHCtn%2BJ6Gev2jf3rM%2Bg%3D%3D\"}]}\r\ncf-ray: 974793aa3fd00b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":558,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"45122de0bc8cfba6ad87fcea72c7c287","sha1":"c1b04f344e9412fd1d39137ce7885eab69609cbd","sha256":"e1ed8d0b5abe7c4dc36f18bb73b90452a594ae21a22d0012724ecd2cf0620c4c","sha512":"b33f03abba0e94a3c21b9f978521a9c2665fd24c75acf0af2df044c11488c61daa27ccb35bdd90930ab0200d4821042154af2b648d0f7f9c23abc3aa585f35f9","ssdeep":"","tlshash":"5df096e0c9216d40daacd16729350d46b8135f29b141cdc7f480dbdb8c60201737f242","first_seen":"2025-03-08T14:29:59.83931Z","last_seen":"2026-05-24T00:49:22.634026Z","times_seen":114,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sd.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/sd.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 671\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-29f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1746824\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=guvLkNiO%2B3YRXm1BjCFg0%2BhzqyJlhkzt1esx9F0XiVv%2BLUXfHUZ580mBoXAGxnU4C7ipGhNcjyOygT3KdojmTi0Ke638tV5GoQ%3D%3D\"}]}\r\ncf-ray: 974793ace8f40b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":671,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"58958a46c8dbfe96d97e2ac2b068e0bc","sha1":"9d4becf710e52ed0c3db04b9dd763f629a7787bc","sha256":"4fabecf2141838d1443a0dee7aa6c90e97332f309e47f3b1970c07e25c34a74a","sha512":"21d97d6bf0b3face71d48a8d3c0d977f83b74c76e81409951a3eafbc922bdf4f42933a2fe774b9b722858626e025b0200bd48d2a51b900bda935dc2b667acbc8","ssdeep":"","tlshash":"870123b66d415c38c70a4232d3ad26feb8d5e82947d1e404427add3ebd511081f9409d","first_seen":"2025-03-08T14:29:59.965622Z","last_seen":"2026-05-24T00:49:22.586144Z","times_seen":117,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/loyalty.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/loyalty.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/fo.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/fo.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 724\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2d4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 531519\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RTK28q8CLWhNGdMXwGGb7I158rnePVlFB0%2B95ViKpIrnwBZq38mwERVgkC5aTLFuwQd%2FyKrnraOwiiqVNUkiCJiafaDIijbN8g%3D%3D\"}]}\r\ncf-ray: 974793a36d550b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":724,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6f78bebc1b8179b587b6a61015ad536b","sha1":"85f1508a867f44981d5d92976adda6e6ef2c95a6","sha256":"9ae95c70a0b9f538afa206e01d92203072b3a39ccab0b8b922d62d45a8dd3dd4","sha512":"10d4803304d35cf6ca515b2d6f52578eda7ab48782b8522beb6f000512780df4b54d5e13ab3479ded1897fccb0690d4477f7a429eb5b87f25d88f9a2a1fea06c","ssdeep":"","tlshash":"280165898b24bdfc99784513076b69467d013e90b97ecb4a104206f1a843e41940ce30","first_seen":"2025-03-08T14:29:59.89799Z","last_seen":"2026-05-24T00:49:22.597119Z","times_seen":113,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/fj.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/fj.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 841\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-349\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 360140\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QvkfyGwqi3AUGxzX6qhL29Pa96NRHjXmWA4wjAdy98g8prf22jSiSnrvJTz%2F6L3rJo34PZMeEMMsBUWrom37uJUqu1AqJ28ELQ%3D%3D\"}]}\r\ncf-ray: 974793a38d650b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":841,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"08a4024768554ea21d453a60e002a623","sha1":"ff75137738991c3ea7b5b07841f3331b2d2dc0ff","sha256":"cebf2367d3fc879623c4eefae30bb28ab2799ddbb284ab046943f80f16835503","sha512":"679c98d63fb4c7f0f873346934cb9d15d676cb88815c69e5e6cc5c9470d11b4590ced3cdd0cbe17b5db6315f9ead9c18926c75b23df79b79e623242bba3bb181","ssdeep":"","tlshash":"330186e60318b379bea5c39ad70346069837a363b03d91ca9492bd1c44036e85fe8d06","first_seen":"2025-03-08T14:29:59.791829Z","last_seen":"2026-05-24T00:49:23.521669Z","times_seen":117,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/li.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/li.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 566\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-236\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 513692\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DyYkbHYkxfxus7TkiJaRcWGIRKSHSrts9tyjlwLZ8DzWFVcure%2F0wBigrBV%2Fk%2BybdToNE5l%2FYWVTJr53LQUrIW7LAvnhcI2C0Q%3D%3D\"}]}\r\ncf-ray: 974793a8ff450b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":566,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"2f17517e854a345edf2342a50189202c","sha1":"0e620e73b8220b82243eb674b1503eec32bd8b63","sha256":"34c347cd51e0c620b05b74a4f5678fdb709170011f6b6e67a9ebec547adcb205","sha512":"720af594b7720f375e5d9ead151f27700fe977a410246cfddfba87ce127b0baf3a0d5d809f21cbd974e9deada0990f7979044e8ac1f2d68228fb10ece9b87e99","ssdeep":"","tlshash":"c7f026c7adac5ff8ed802379d15351f6edd41dfd57118546cc034ca9024a05e9213a05","first_seen":"2025-03-08T14:29:59.94404Z","last_seen":"2026-05-24T00:49:23.105771Z","times_seen":118,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/re.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/re.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 769\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-301\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 360141\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y98rlmgeh%2FKQl8SCrzkNUPcS4kIhrXbfX55QUYZVLxgADdL92%2BcnttR0Mia3wdiDraQaLu8gN377ykKodceAIEDyu3bU%2BznhUw%3D%3D\"}]}\r\ncf-ray: 974793abd88a0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":769,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"cfee96cc4e2331852e0582e85732734c","sha1":"ebfeddc52570a3171d6294e1c477eb4c01366872","sha256":"075b4aa95651f7c185fd09ce7f21ef18130d10dcb2f75e91699c5e76f52e84df","sha512":"2a66e44e2772af744c0c878c2f897273b67b1aae7d1947cb0bb13dd7015e107a0bf9c9d8be9a8fb66d7ab079cd01f92aa30f037cc9d8c6c1953ec94eb11eb632","ssdeep":"","tlshash":"9301b5dfb3028c376c1a52b765c98813b8a049b07b5508a2fa2c832bd14b1e4f8dd46b","first_seen":"2025-03-08T14:30:00.015959Z","last_seen":"2026-05-24T00:49:22.614909Z","times_seen":114,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/arrow-down.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/arrow-down.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-20e\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":526,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da29d3172dc6be45aede4274c6ed8f50","sha1":"dcbd48f1f1d3b5345f09cbe15621923a623fbdc1","sha256":"78dcbbd3adcaa20f1a5b52688f49a77d19773322b1847ee124cdb6dcdd51991a","sha512":"abc9fdba293ebc3cf26d4cec1e4a6cadc2293dea7b7e9c0d2bbd1b9df24db9d00957b70cc09660d53b3e247608e69f7896b95cab29b6d989ed52d57798c628e4","ssdeep":"","tlshash":"f6f0c9e79088d1f1fe1a03a44473154a276e80b67b8604a0d9782810e122ac28f400be","first_seen":"2025-06-22T12:57:20.976504Z","last_seen":"2026-05-24T00:49:22.759033Z","times_seen":73,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":340,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/pass.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/pass.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-2d0\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":720,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0b1a6e4d7d651fa2d45003433ad55704","sha1":"bd85f23509b0cbbd785c81912cfb6f06d983d76e","sha256":"1bd8cda4c27f62c8ba9a516934f7f273a1d8e97e5ab0f3743f4e32dd12a29fd8","sha512":"9f1e7a1a066cf840b7cdb8e45df63587213112d13f20b619ebb652d680a2b655a9f62c30ed61d6fdf637ad01815d221cc2bd0d3b1bc8c6c8239d59f89ab498bd","ssdeep":"","tlshash":"e90176bea384482c75038740b73ab439a00a0db32b4eaf8ac85175f266049a8d977cd6","first_seen":"2025-08-13T10:56:46.9574Z","last_seen":"2026-05-24T00:49:23.420592Z","times_seen":31,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":336,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/kg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/kg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 517\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-205\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2274676\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3O061shrTc3geaA3zsKW2Vblgaz19dfbV6TYc7GJSnlrNnB35Ja8qlj2WakcEt7Ti3EfVdGIRF%2FfXIZh6VFXXUB1ixLxc4Vfng%3D%3D\"}]}\r\ncf-ray: 974793a8af110b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":517,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a4eb3df3d055ebc109fc05a10f5632e4","sha1":"253157748969545556a71baf40c627ca7f5eef11","sha256":"263b4179b46efb65aa68223300c6b383a1268d8e1b91c14c373017a6d8d2ac9d","sha512":"140a8e14312248969cf57d37b063165cd60f58a854db666ec963b5851d93621adc894b70fa5d9153a7b2c44abccc3e1f29af670451a2ae42aa94d64ec4914918","ssdeep":"","tlshash":"41f00e7aaae584b6d0ba483620080a16ac36f02a6138db83207c7918a08c44f52c9b0b","first_seen":"2025-07-02T10:58:58.235579Z","last_seen":"2026-05-24T00:49:23.243032Z","times_seen":114,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/mz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 751\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2ef\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1628135\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pAMoXX9diACCHSmTuPzRnXcoadUo4qUjPWsJUgq7ijpA19Fx6hqMz%2B1DO%2BOM%2BKR2hodlANfk5KrhmkkKiFVikpLxuSC1gC3o6Q%3D%3D\"}]}\r\ncf-ray: 974793aa1fb80b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"54127ec18b852603dae5a3b1392938b2","sha1":"d70c4b1633f74fc3cdd9481e2b52e7481c5dc8d9","sha256":"e426518a853a23741779cecfebd4112303b35535f3bf2610e580bb3b25b8a4d9","sha512":"6fc78ce1ae11544876a944b8ab8a6e31aa7f62bd778115356b386b0e747733e015d9fcb588f690b2c75d5dc6768f5ab1a0859a42236219ddae25f1f1803bd26c","ssdeep":"","tlshash":"2a01b59b32850b28ccf1932b81383aa0f63a66b6d401b11d4b95f4a10b197080120a83","first_seen":"2025-03-08T14:29:59.81356Z","last_seen":"2026-05-24T00:49:23.167334Z","times_seen":116,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/pl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 569\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-239\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1971720\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z9rup7TAVvJWjfJXehpoyCIt9SBvx4Nkeh3DUqCrpwvqNvfOUqJIfLOAVAuNovsRVrI7CTdtw3BYEeVCUDvUvz70p1hVgYOk3A%3D%3D\"}]}\r\ncf-ray: 974793abb8750b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":569,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"cdd5f904c135c26c4f668f6b0f18b1a5","sha1":"a99c944b0e924059de8010c6c5a05be88f273d37","sha256":"954b849dfc01ea8031abd8e5af4091235a6107aa4be372bac6f050470cdf17f2","sha512":"fe7e494642af78c7ac1b5d33d3586d8dc5ad6a291961fe6cf9fd743cfaeceab58b507207ea8f6e9cd7d0232c33f69cd9da8499ad90b8b402e8d9e0169b9b390f","ssdeep":"","tlshash":"e0f026ed0763ccb6fd87017144095b11d94462dadb41c33254eacdf4472b36a5d74904","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-07-24T22:01:00.715123Z","times_seen":168,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/games/ico/PossessedNL.jpg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /games/ico/PossessedNL.jpg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:38 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 44551\r\nLast-Modified: Fri, 27 Jun 2025 16:47:52 GMT\r\nConnection: keep-alive\r\nETag: \"685ecb38-ae07\"\r\nExpires: Tue, 26 Aug 2025 02:14:38 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44551,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"cd4d0e00ab7cd5cb7e7018f54c153360","sha1":"70c351d2e74031ce1755e71a9d1900ec93a16a81","sha256":"8eb183ea336abc5b13ac8ea743ecabf5dc77acc7a73c7169732f7e34d7c83367","sha512":"b7683d4d35c3be17206c02e17cbc0a1dea22a6a22c75def3b83b09d7dfcf9d9c5ded1d0eb1a8f8f0a081cfee18b2770b4589724be0116bb2cb1ff0a5fb98c7f6","ssdeep":"768:wBQvTnlhe+vjum4lBr4pvxbCToTYxfdZdtGuLLxljqCAbZdWOurxFA4nipjJi96:dDlDv3rTzuPNAb+9NF5nipjJi96","tlshash":"3b13f1fd84f911d4bbb909f6de416d2af2d471187cb024d373a7e85c2c9f31482a698a","first_seen":"2025-06-22T12:57:21.102304Z","last_seen":"2026-02-13T13:44:35.70128Z","times_seen":198,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":250,"dns":0,"connect":0,"send":0,"wait":84,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/switzer-700-italic.1107dab5a2b7b463.woff2","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /switzer-700-italic.1107dab5a2b7b463.woff2 HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 15604\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-3cf4\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15604,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 15604, version 1.0","md5":"2c3951e7b40d2c0d0257f5340261d0dd","sha1":"917fe952e13eb314d554d50d87d2d33c1609f4ba","sha256":"0e11e659d374826312dffca4e775323581d2142dad6e3afd2c9ecea18914e799","sha512":"fe74dcd6f3fe2c7a3c42e8eed60f0a88818377ec13aa767332a4ad36cb5930d32e1e4bf880bde5d00535525f4eb5846eafa9517753d2a9ae81f6629f1a844fbf","ssdeep":"384:uIQUd1lpPrPNUt+v5ykjSKCVh4x2TpBZbGaTJIS:uIQk5NUeyk2KCVh4iHJd","tlshash":"ce62c099c5fa8e1fb38c9ab7fd5f07d843a2471d08d05484c431c4d98a2da818ce7ee6","first_seen":"2024-07-01T06:02:19Z","last_seen":"2026-07-27T09:38:50.520751Z","times_seen":126,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":141,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/gift.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/gift.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-820\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2080,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df0965768e874ad13424fca1d2919468","sha1":"8f9dfbb6d9afd849e7663b2248b3f926eecbc928","sha256":"3709b5b627f54ca4d5b6ddcd70ed8238d58dbe96d81e26ea24b1319571ea6dcf","sha512":"400f1d7bea005ca1a151f0fede6ec6607ef348131f0c77959e44c2beb1799d5641a386c39747e8c9c1138e4c62679dc579c281fa2dd4bfbd78f65147492ae5d0","ssdeep":"","tlshash":"354176f44140d4e8564bc9b49d7a7c94f72e34f65c24c0bc0163dd6adfa43e6ca1ac66","first_seen":"2025-06-22T12:57:21.069194Z","last_seen":"2026-05-24T00:49:23.461921Z","times_seen":138,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":420,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/cn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/cn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 653\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-28d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1712357\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T7uQgfHyP81JeuQeN8LEmBM63X1wiwUG8PzZjRU77Hb2OsaQJURckGY%2FJEZ96e5yHhrq5C8b%2BdergsD98%2FfHQ2r3soVNaFjGhg%3D%3D\"}]}\r\ncf-ray: 974793a20cbf0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"2a786b5171b4c9c8444d002d128a01d5","sha1":"b1844d4a0529c4d2d0b69160de23cacaf32659ef","sha256":"cc31cf98c0e6778c25632f97a18ca50902a71ef0b76bac623a90159b697b8607","sha512":"644d61ff66169143335a1444e0d1c853ae05ab9b0cd681d4cc73ad41af1243bdf0ad4b235565f6b0b7c29447b6b000ef5352dc0f1e88812da68bb94b04066ba4","ssdeep":"","tlshash":"d3f0c8bc832888a09c750f32c22384a564c1632ccc5ac6418d0c400eadf0409d1c8bd1","first_seen":"2025-07-02T10:58:58.289392Z","last_seen":"2026-07-24T22:01:00.718138Z","times_seen":153,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ci.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ci.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 636\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-27c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 967893\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rkf4GnooIeKkeQlFXYpy24vsJPC%2Fu1KRZhispcVnuHfJ%2FhVVS%2BRkvozbzuQvHeH1HCfrwjRNqTUo2pUTgze9iMdXt5SS9btgZQ%3D%3D\"}]}\r\ncf-ray: 974793a24cdb0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":636,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"7d30a4db029f3f08bbd68a4746e6c970","sha1":"d8db191d1c5b2e2102e6959219730e682250836c","sha256":"bcb427e2ba59a41432d57780ca4c599811ad6b49e883ef4fc12b63198ed88b56","sha512":"6163a95e28c198823378291eec03d31b4982f55d4bcdbcf6b8b0c515bfda4836b583d012106ca5b847233971050de28e417f51360d9213d1aab68893d000d717","ssdeep":"","tlshash":"02f02db710eea89dbfcfc64e44981055f82782384904cd519e2b8e1f29b8612c0a62f8","first_seen":"2025-03-08T14:29:59.769984Z","last_seen":"2026-05-24T00:49:22.657917Z","times_seen":115,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/gm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 674\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2a2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 531519\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tBmWcDbs%2BoWlxaXRmF5T%2BeC5xFq7TZsAzaIYlSCEc%2F5uAs7PaL85DS6R2K%2B5ixaDGxvInIhqoMUF9O%2FSHh2b0RSVQeMSGfPINA%3D%3D\"}]}\r\ncf-ray: 974793a5ee280b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":674,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"721c21562d8ea99b294901d60499fc3a","sha1":"2597f6e0c81ad8295813ccdbe9e74cc34d6472fd","sha256":"3c341685ab59576969f47660f4e3df8261aa786db864097120eed45edb663339","sha512":"51290fd164871525fde8ff940057b54cc5112731b9f3454bb140e5ad1e6efbc02ff0db8b945b682944bc1da6cfa3f701ae1e70f538a5d1541ff62d284b52348e","ssdeep":"","tlshash":"1901884057b1cc69fd28d7e63b9154a9cd4c1230ed11953c77404d3ca642b2045dc76e","first_seen":"2025-03-08T14:30:00.015266Z","last_seen":"2026-05-24T00:49:22.988133Z","times_seen":114,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/lt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/lt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 592\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-250\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1803587\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pDvHHBsArOzDg0s4%2B%2B7Cu5r1l7UCaB8UbmvlN90sb0egP0jGfltyrYU%2BmjmQ7RA6F5kWPUa8PSAghjTsn8XPhL3vTpEvpem2UQ%3D%3D\"}]}\r\ncf-ray: 974793a90f460b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":592,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"36a8d400fceb32aa499a780653c56210","sha1":"98fe28a09c2faf5eed8c839510d98a74064e37f2","sha256":"cb856f54a3c495fa7060c7b5d13c62e714d0f5be505e0567eb181a3103ba06b0","sha512":"3790c89a02cbdcc9db662e1efdda5fe36f8572a4dbdebed0331e2e06e8bcd3c0642f82453fe9071d465cd13b4ba6bb4b244e58c49f3ac139ba00f0d69530edfa","ssdeep":"","tlshash":"95f041ca3e62cce9ca7e112a2c52a080f608361b2a5366230529aed04e21908035de93","first_seen":"2025-03-08T14:30:00.024937Z","last_seen":"2026-07-24T22:01:00.718659Z","times_seen":124,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/za.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/za.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 825\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-339\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 9421\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2O%2FCwGVMFpEW5NBxHHIAffaeXIU7brhwparqEcPCczKjJFXUZrYvvoS9KBBrPdKrstdkEtvHY4iGga3orEnv9kNpMMUVZjJzRg%3D%3D\"}]}\r\ncf-ray: 974793acd8eb0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":825,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8c90bd94ab6ff256dfd149c50f0c084b","sha1":"a632585269f3d5882c6cacc06b4741ad5a1d1381","sha256":"33c4f0b3f39c492a282b5e11e43199036132577d6fa3244db6fa5eab12ba2d60","sha512":"e77c7f9aa6bd93c05327582f1f1a5dc383a7b873cac40af88e7f995a212d6a5d99f3788d7417bebdef071c06686dc79cffd541c891fda31f987bdd2cecb86976","ssdeep":"","tlshash":"7a01ca3002b0dcd95d9ee5d1a94730700c051d4d43e023a7c4e5dfe537255a409452c0","first_seen":"2025-07-02T10:58:58.224966Z","last_seen":"2026-07-22T00:37:09.335925Z","times_seen":120,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/css/c775408/chatcontainer.widget.css","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:49.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /css/c775408/chatcontainer.widget.css HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 Aug 2025 02:14:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 21164\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"68a58209-52ac\"\r\nexpires: Sat, 30 Aug 2025 11:30:30 GMT\r\nlast-modified: Wed, 20 Aug 2025 08:06:33 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-08-20T11:30:30+00:00\r\nx-node: m9-up-gc33\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98561,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"14653fcb6b98056fc2f1c0d0fa41c882","sha1":"873ce2441132fd1e5d39c4b29be3d5b7daf98d63","sha256":"3c3061a58a12ca9502e6780e0cf53eefaa4a63f118654561e641b30d8ba22f63","sha512":"04ae872ab59f6207ee30eb9d28dfcf8312244abda748aff6b25670812c9f42fa376d8f9678793b1fa74c9effc5d4006d78916eb304928e848b86c85fef087983","ssdeep":"768:ZGHrbqKsv6I7l6rKsv6IQbQm5LSwpOIwUwS45H9tuK7gfeuv93Uo+BoB5otexSt2:ZGHrbav6zv6T1SwG3bem1Bw5otexSt2","tlshash":"25a3e662b681652db01bc532eca2fbbd643dd012db231fbaea55b730c78b5d71722508","first_seen":"2025-08-20T19:14:17.396246Z","last_seen":"2025-09-01T11:30:14.29458Z","times_seen":79,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.kentcasin355.com/api/category?lang=en\u0026pr=kent","fqdn":"api.kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:15:41 GMT","end":"Mon, 17 Nov 2025 12:15:40 GMT"},"fingerprint":{"sha1":"5A:21:78:73:C1:44:39:14:ED:89:01:53:36:B3:22:CD:5D:DF:67:CA","sha256":"79:D3:CE:5B:49:98:7E:53:E0:CB:AB:20:5F:B3:F9:AD:68:D1:32:26:53:54:04:32:5E:A5:B3:7B:05:B3:CF:A1"}}},"request":{"raw":"GET /api/category?lang=en\u0026pr=kent HTTP/1.1\r\nHost: api.kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://kentcasin355.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3892,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f90c850df2bf4c56ee82b44e1888aac4","sha1":"cbade907505ffd4fdf7fb23e4c0338e2fdb17f76","sha256":"e564ebbe37eabd58cd569482eb2f038c36d14791e71bc45842f35c647ea0fe57","sha512":"9ac53029c1a2098254eecb0f6e1302fd4dc9567aacc4c9dbf3d870f156933f65211255eb1a35ff668061937a9615b8c0244f7674393575859dd87eb5396183b0","ssdeep":"","tlshash":"f581cf33e11449fad369bfc53cdf360629ea125c3dc0ee2a8a88d60902956f94727977","first_seen":"2025-08-05T17:20:37.480188Z","last_seen":"2025-10-24T13:57:14.506672Z","times_seen":180,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":62,"dns":2,"connect":44,"send":0,"wait":61,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"api.kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kentcasin355.com/api/games?lang=en\u0026pr=kent\u0026device=1|2\u0026page=1\u0026category=30\u0026per_page=48","fqdn":"api.kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:15:41 GMT","end":"Mon, 17 Nov 2025 12:15:40 GMT"},"fingerprint":{"sha1":"5A:21:78:73:C1:44:39:14:ED:89:01:53:36:B3:22:CD:5D:DF:67:CA","sha256":"79:D3:CE:5B:49:98:7E:53:E0:CB:AB:20:5F:B3:F9:AD:68:D1:32:26:53:54:04:32:5E:A5:B3:7B:05:B3:CF:A1"}}},"request":{"raw":"OPTIONS /api/games?lang=en\u0026pr=kent\u0026device=1|2\u0026page=1\u0026category=30\u0026per_page=48 HTTP/1.1\r\nHost: api.kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://kentcasin355.com/\r\nOrigin: https://kentcasin355.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nAccess-Control-Allow-Origin: *\r\nVary: Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Methods: GET\r\nAccess-Control-Allow-Headers: content-type\r\nAccess-Control-Max-Age: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":109,"dns":1,"connect":45,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"api.kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kentcasin355.com/api/countries?pr=kent\u0026lang=en\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:15:41 GMT","end":"Mon, 17 Nov 2025 12:15:40 GMT"},"fingerprint":{"sha1":"5A:21:78:73:C1:44:39:14:ED:89:01:53:36:B3:22:CD:5D:DF:67:CA","sha256":"79:D3:CE:5B:49:98:7E:53:E0:CB:AB:20:5F:B3:F9:AD:68:D1:32:26:53:54:04:32:5E:A5:B3:7B:05:B3:CF:A1"}}},"request":{"raw":"GET /api/countries?pr=kent\u0026lang=en\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://kentcasin355.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19207,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"14abf1392e62dcd552cefbf92f6e7f90","sha1":"dff0fc44d7c5e91d3a321c3820795d5a895fad1e","sha256":"6d5b7e60294cb65e5fcd78c1065a9ca3e1611522a8648e819f44c6e4b5b1c4a2","sha512":"72266feef889b988b02530fc82416a42d3ed944c812b0056f9162d9c72df136c070b1062c829654d8f907079ef7be5925adf6463a3cd6163eca3fa803e900bac","ssdeep":"192:J7E4IrZ1pRjj/E0X808R0y/WYJ/pyofA/wh9wNKSAEWV+R98e0SN:JTI7pNrRJyuYyoE4wNjAfe9N","tlshash":"fa8279a96e9edcfce52b5d9015af172c65be1d22b6ee1d850dcd0f2c46a814af00183f","first_seen":"2025-03-08T14:29:59.805774Z","last_seen":"2025-11-14T12:07:57.257203Z","times_seen":46,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"api.kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/dk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/dk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 675\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2a3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1636878\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DHCKIZQxIgojwDuqrTKWESCBG5pHhcu9WJeCCQP3gH%2BzSujtwdtAdSUbNFSjkmd56%2BR8Es6IYv2UrFw9wd20SjdLB%2BJ1mRIj9A%3D%3D\"}]}\r\ncf-ray: 974793a25cee0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":675,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"c7c423ae2c04f8ab157a7ac58bf4533b","sha1":"9b63e03642346c40789dd7dbb75679a2eb4a74b2","sha256":"86f5fe7a5c2793f236dc9d84d5cab836ebc685fd12e1091bf3839550577f63dc","sha512":"3f7602ac11be9d358de4538566e66c63c3e32a6ec4d5d6d93c5d1c0da717b0b04d39ea313a7def819792c9a7622251708aa4ad36f7bd5511e124dd5ee652e3bc","ssdeep":"","tlshash":"940123c6d750dd7cccb8a510f5174d9af834d6ab0792c1b86e2265152f8112aaeb8827","first_seen":"2023-09-15T18:04:09Z","last_seen":"2026-07-24T22:01:00.708563Z","times_seen":136,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/jm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/jm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 694\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2b6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1746825\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iV7lsx9EiUFNTDm67mXBcizS49i3T2RUZ2068%2FjEVQ0Rpi5UvkTrGjtppOBYA2QTJJVDhaNKRbZFKAjMPVbFLKvajkWoq5QvRA%3D%3D\"}]}\r\ncf-ray: 974793a82eeb0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":694,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"b369bada4482ae4832a03390a049aa9a","sha1":"fbaada27f0224c06e662782fabb3c746320ba37a","sha256":"8d2e55ba1706aeddc69e5ac704b278853b939daad18ad146c6b2812f81b2b18d","sha512":"fc5ae63f3647fb6b9fcd221c2001f535f0232a1144745817d22423b4ec0e3f8fd4b510e9418891181e39228748f6d8e93cc393e2e3edc1b38b80b3b60d510d85","ssdeep":"","tlshash":"a20144679928d828dce432f8da45ccede117632c1892811835299df6af6f35154886ad","first_seen":"2025-03-08T14:30:00.013979Z","last_seen":"2026-05-24T00:49:22.787244Z","times_seen":116,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/fm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/fm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 565\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-235\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 252370\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ye2Ov5Pdi1F7N%2FQv1etgZbQeYGrZFIRhQ1SKFWhzPBzwu5qUcj4%2BNNj%2FeHcopugsVG%2Bo2Ceytyyc0QYo3V7iVt7qCZuegaTJiQ%3D%3D\"}]}\r\ncf-ray: 974793a9cf870b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8cab05594bff00e7601d6947cb716a00","sha1":"25fad7854548d7d71d246c71892fff2d74a57b60","sha256":"391463318d4b12e06e5db83eea8661415899830ccb42da6fde3839af1c5582b1","sha512":"56fab9f66e3e7d90c4d3dee4459921bb3b24a83d218008831a0633c9ceee3b9b8f1f6f6ca5c0329ede6a35377cc048533095265079018d00613bdf0a7c64aef1","ssdeep":"","tlshash":"5cf0e14876245ca8f85418c41145478b1c0e6ef4bdde5436c48cbd1788b21459e7ea60","first_seen":"2025-03-08T14:29:59.86882Z","last_seen":"2026-05-24T00:49:22.839312Z","times_seen":112,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ps.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ps.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 693\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2b5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1966596\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gAXhPnWMJ6Gcz0gYjh8crpEVIO4PCwDEb58tELrtZZ0A1eh3AklwA9OySBlEc2s7W9v6y3oWzEFv7WKv6br6H9VI8kvyAW69gw%3D%3D\"}]}\r\ncf-ray: 974793ab48360b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":693,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"66a705c58e4b44b9bd4deab52edd4c8b","sha1":"44e076644baef4ba18d795652a810e8d077a261e","sha256":"326f3a8b4b5700bcfc1e078cafc59af5cace85151203d6b52f675b7ff8008d7e","sha512":"bdcfea4e6a202f53833aec1bf5351963978e7936c10113c59ce6ff07adcfcc47f62c11bef16b3b4d096389875a83a27e52cb7c5be87291c95f5f2d2ee021070c","ssdeep":"","tlshash":"c901883263771cd090111c92018230d14e156dbded5d3325455c2d2edc5477d8d8526f","first_seen":"2025-03-08T14:30:00.057103Z","last_seen":"2026-05-24T00:49:23.129609Z","times_seen":117,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sm.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/sm.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 907\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-38b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 9186\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZI%2FpP1sCnIhozfx2ixU3%2BlJJcZAUH0m11erh0K82gZK%2FfDP1S6nmacf%2FUjrzBbgy6Yq1NP7uRgVNthufeQintGlIVJwGk2PZnQ%3D%3D\"}]}\r\ncf-ray: 974793ac78c20b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":907,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"2aa0dea91da7a5486cdbd429c5ac4926","sha1":"6ac11461b598aada9278c0f8cdac023a7e7f942e","sha256":"caeecadd1852270e737d5917cbc79b347ca62488e46dfafc3ff19a44e56815e8","sha512":"ddfebf4a3c5aa0adf3454799e4c5a031c319836722f1f7ec904d83e98394b18ed5723794531ef4d72e0478fed74ec7d42d793937828bdd710f90bd464c439616","ssdeep":"","tlshash":"2711b7b4456ab46d488bed3f0faf0320f5778e8305baa991f9042173b022b16819e160","first_seen":"2025-03-08T14:29:59.912729Z","last_seen":"2026-05-24T00:49:22.766772Z","times_seen":117,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/favicon/favicon-16x16.png","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/favicon/favicon-16x16.png HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 202\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-ca\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":202,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"b3c08714ff9dc1c761c9ad695e7ba489","sha1":"e34f26a66aad56cc15be74f1e00799b92111b5d4","sha256":"9ebd77cb951147544563e09326cb4b84b9d8a50c0b657ff7baec140db4f9ab03","sha512":"9553d0c67e3f7a90eafda80f3ae62bc99628acb0444f429d03e4165afbfa82416ee66af5943de52dd7f96921f04cb9bea59f4dc3dd3bb2bc4962a338dbfc07c0","ssdeep":"","tlshash":"b1d023d5c6c0c1142a47c4965b84a55c9b9470c0dc1f509d03de457d417d008172fe1c","first_seen":"2024-08-19T18:32:15.223887Z","last_seen":"2026-07-27T09:38:50.544753Z","times_seen":91,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/vu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/vu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 638\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-27e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 252370\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJo%2B0PaWbtrKeYZhGroBawEyDhbmWrTE73K1hpeyInhc%2BKjKphOJzc%2B6SWEy%2BRTrh4vFWbKIYmJnVs%2Fz7UIYLFfmIN%2FbIaxswg%3D%3D\"}]}\r\ncf-ray: 974793ae09890b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":638,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8630fdc039a80b87aa4dac33d79d1dd0","sha1":"2b3a0b1fdb4ba1f5aca30562d5e8472be7167fa2","sha256":"14df13bcb23da7c685017fda2668f446c03b545c50bc0fea574c54f5153d1fe7","sha512":"e648140bda72e17a666af3f6b6d7567e7a34e68bcdf4a45b6d08adfef198d3e510d9a2d2f537746f22969a7842fc5ccc32d6d8eb6e1feafa2518e5a27e05673b","ssdeep":"","tlshash":"58f068fac9832817c7e4535e52e61281d4430c8deca631a5b756c6211294545d1cd8cd","first_seen":"2025-03-08T14:29:59.786874Z","last_seen":"2026-05-24T00:49:23.299504Z","times_seen":114,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/se.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/se.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 657\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-291\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1887269\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pdRrBFhDqI56Yd6P%2Fm3YmopY8GFWL9zSbROcBsjgUd%2BFGaMyehON5z71qJA%2BRqSgKNO8XFXVFnB4BKQwUBTud2ACdJ0JaSuO7g%3D%3D\"}]}\r\ncf-ray: 974793ad592f0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":657,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"924ecdeab322c91a70766180432cac31","sha1":"25c4dc154c7cba7eae2b739f0c58d620de754c7e","sha256":"aa128d3a2002b46ec8c7a9860648804e008f621c88b7ff59a6f837160d174c06","sha512":"8e64dd92e0a797c5a965348bd0a21b663ccc7b44baa631af3590a6430ce8a7558caa06653e0ee760048aabac5fbeb3117e5e31de78dec01871ac0d1d06dbb241","ssdeep":"","tlshash":"e60183fecf386d121eda25979e848513f6610f80ad190aca863a58719e00fc4994aa8a","first_seen":"2025-07-02T10:58:58.110198Z","last_seen":"2026-07-24T22:01:00.732567Z","times_seen":143,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/pg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 690\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2b2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1876613\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nIIpksHmN2cEePtnx27DEwcVELBwcMgDxL8m0eET3DuC5T%2FBaN1MJUXjHrc8mwWTptjcM662KfHQUNWkwHdaGWdDcEo9qjl1VQ%3D%3D\"}]}\r\ncf-ray: 974793ab58430b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":690,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"4a867878150fe1e681693f83e823e06e","sha1":"12b93f8e83cae5e106042594b5822131caad3ff4","sha256":"14e6aa3b1889e76a18e9c7069aa31687fd0caf7dbb0bae31bdb2856aa8d54794","sha512":"cfb17884bd0f15944bceece023d74669c7185153a8b81a1e8f1ab9ddeed6535a567ed5004513b863b30be4f00ba98dfac2c3b4da8c9decdbe9187341da622d6d","ssdeep":"","tlshash":"bd0188a27358dc9ce0dd9775a60e1cb0dcb0500cf95d7401c2cd57638646389f45ce83","first_seen":"2025-03-08T14:29:59.781512Z","last_seen":"2026-05-24T00:49:23.475289Z","times_seen":117,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ga.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ga.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 709\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2c5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1876612\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UPLbgQaH5mSmCzP7f8JxqtAs%2Bn3FZKTH5Ac5wREqt894ycBQbOdGUvBQ%2By1VNuUPn6wbOuLv3jsC%2BeU5n45zsWUxaw2LHrhFKA%3D%3D\"}]}\r\ncf-ray: 974793a59e180b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":709,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"778d4d4ac9de9cd18448865208df027a","sha1":"f66c6ce5f246db92d1e042c782b1f28383713d5a","sha256":"7867fcb5d3f2136fd202eec5b7195d418ec403b4570027f05a5d8c6f179ecc3c","sha512":"2d256b950da75e7bdc7ac1f7d410466393a7851770227e0498b8cc4c33eb637494cfd0f9f80524581f9c48f1dbfa64e60119216e4c18edf4fab85ad074e7ad83","ssdeep":"","tlshash":"9901941fb3a62b21427c948e5bf680002438526aa72d495be8f48530132170036b43f2","first_seen":"2025-07-02T10:58:57.899206Z","last_seen":"2026-05-24T00:49:23.24054Z","times_seen":109,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/bg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 561\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-231\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1529969\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RwQTk3T%2FgRSWEBUFePSzKwxQ0XivYs%2BA%2Fk%2BmsxZ5%2Fu8hNZdECNi0xtvLabWofeBpXiGwR93qxyPpUXQ7GPcDkKyb1GMR6msfTw%3D%3D\"}]}\r\ncf-ray: 974793a1cc9f0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":561,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"82c871df1e79facc9547b849be362bb2","sha1":"b3214d2dd59d7961b5c1f18f5ab1749734848720","sha256":"c5da2897a66a3d015a25dd2556c3cbb0f309546047a7e850e12a63dee7e3654b","sha512":"a76757cbebe8c70c1b1360d6cf25a9ce8131c3ddf94b0ab364579706e1f4ccda8d8d756abfbc56baccdc7a441ee111ca0ed129089b3186954189470b84dc7831","ssdeep":"","tlshash":"daf026f39192dc60d83b5205223a81c2dd7863740536104fca968cc46f39103622c291","first_seen":"2025-03-08T14:29:59.782804Z","last_seen":"2026-07-24T22:01:00.727642Z","times_seen":134,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/nz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/nz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 653\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-28d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1530038\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FI6jbaBMbAXEZr5YUJYHNG%2BKZCwYXw2zYB750GkVRQZhMlF1vrBbACFfCUQMSWnlbYYMhFAJa5zJnCZaQOHvSAvQBz9qrVZKqg%3D%3D\"}]}\r\ncf-ray: 974793aa8fe90b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"01b662581d064b15d11850a732ee5dc0","sha1":"9294ee95c17e50265972de38edf314bb8ba92e59","sha256":"ad88586a6213ae75d021c6d7ed767ebb342bc62caf3fb68247a0c8421edb29bd","sha512":"47f70b2e6aa48cfff01e69e2ce2c18edc29e5e3af613b995e7978f993075fe0dfc220a12703d57e25007e3790ae5c4e12b5285c9ef7e267cac418c5d680e5080","ssdeep":"","tlshash":"07f023d25e945d208c959627090194d199a26d5dc02fa8d5fd164726195e700dbe12e2","first_seen":"2025-03-08T14:29:59.776388Z","last_seen":"2026-07-22T00:37:09.239261Z","times_seen":139,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bh.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/bh.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 662\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-296\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1647833\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aewa%2BjIr2I6CKdNy0gtxFAuzmmwYTQHKOCKv32Dmw97y1VciBsPR8WoEq%2F%2FllFV9oNTElcdWif5ptgxt06xUi7dpCeVg%2FU51gA%3D%3D\"}]}\r\ncf-ray: 974793a1ac820b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":662,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"f1fb94f91d5334efa6004671f9fe3c95","sha1":"60e88386792c6d97102e09dd343a1fdeee8d00bb","sha256":"16732b1b7aff3c43ffeb8b4152afdb6859c0700f7e88a0ab8b67a9adda3dd8e4","sha512":"b34101259eb55bb5ed9b36a55c88d2a9b3cfb4dcfdbb97caf1d7f37aa3538768923eedd68447bb4ea245f539c27f42796ab673a968626c7df9b129567c869db3","ssdeep":"","tlshash":"f30123de4fbbcdceba50c13a8d8211609ca0927acf9882c39042e27d914311c7f8c253","first_seen":"2025-03-08T14:29:59.999645Z","last_seen":"2026-07-08T04:03:21.493039Z","times_seen":123,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/promos/promo.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/promos/promo.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-428\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1064,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bc4e77b9775ef0d163160a194166b907","sha1":"1dc259bd1cd1ef875ccde831d5ed20b53222f552","sha256":"6d284862b3a44b96248fdd4f2e0be08402fcb7b3c37df72d20c8f901153a599f","sha512":"5f545fd0fd930029695c26312220f09da614d2606a24df265914e7e0713d9b45c96b122bac9b563376f03079c13235e62a53ce1d430958d215d5bde11b4d386d","ssdeep":"","tlshash":"271120fab154a2f080069f75c47392a1b94b34fb3ae9c1cd8390e854aa2a125c688cf4","first_seen":"2025-06-22T12:57:21.196403Z","last_seen":"2026-05-24T00:49:22.710259Z","times_seen":138,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/mr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/mr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 692\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2b4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1628134\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qBMZsBbZ5PDk6f8206nJtpg4zxs%2F28Oph6Sn55IXFD93WkWy4L8uQDxvD0kw9lt%2BB%2BbOGFFq4BmZHxMp1lQhtBBkrtN4bwhIng%3D%3D\"}]}\r\ncf-ray: 974793a97f700b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":692,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"56b3e87248a0b7e77d0b6ddd24854e66","sha1":"79a2cd4f3e23bb2116912b1dde70ab6295a3a789","sha256":"16a881577c4fe4cb8a373947cb801f07d876b5f8fa130ba0742c4b185f60199f","sha512":"a98a2175d5f536562b4109b0ad74893d289623b491eef9ff71307409c3b63622a5d9dee22985e4d2a142818b84b027d1a0e6a2a4db9bf6e1b53064799f69bf53","ssdeep":"","tlshash":"410194eec89292aa8b6514230002c9a8bc72c25080a1053ac110bb202c3f048d8d47cb","first_seen":"2025-03-08T14:29:59.847161Z","last_seen":"2026-05-24T00:49:22.960242Z","times_seen":114,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/tz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 799\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-31f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1100080\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MvVDaeFqm8EylYBQEcKEXR7qzsZzsWoyAwxGnxRTRozkxDMZoZDVxeMtUJmip7XTOVj%2Fh0bsg8dbGdXfMKIPPhgPWKVzLZS6XA%3D%3D\"}]}\r\ncf-ray: 974793ad793f0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":799,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"5652389a1d6b60ac8d1d71bade5fc0d1","sha1":"aeaf651354d2c2b338e4740a282443e52c042b14","sha256":"e7b886a20c86024179085ebf191f3678d7de6a80dc516d810284c3de17d2dcf5","sha512":"6a2da75db0e8d400827c237c5d0449162cdf665260c7df0a0200cf00aceccaadafb040abb3d66dc7153a340a5d2a35f64b6ceedc6ce31f474348f47034433f01","ssdeep":"","tlshash":"5e01751932d1d430d9468b31eb0c8ae2d4c7680770a1be07895f4a3ec1593586ddc105","first_seen":"2025-03-08T14:29:59.79546Z","last_seen":"2026-05-24T00:49:23.392706Z","times_seen":123,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/bg_right.e2d21ec775bcd9e6.png","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /bg_right.e2d21ec775bcd9e6.png HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/styles.297578458c20fb04.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 14885\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-3a25\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14885,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 199 x 2735, 8-bit colormap, non-interlaced","md5":"a4d7eab03b3374f4aee1ee044c1c9c1e","sha1":"11b98b02bc7233e558253d974e96a99ff0de1686","sha256":"abdb0b72935cbe07a2580d2d9d66ebfa0a980902a8314b60819b7111608e8cd6","sha512":"3fa1ecfe356d5b6114664399467f6ddd7a7f62fb8e56dea15336a0dcdabc4696f0d277db04c14e34ae512120c66d7227f9f678a24eedb83a5422d6660e334cf5","ssdeep":"384:IYPJXA0yhrA6QsC6yLclcEY22chfshuhf:DmhrasdyLclcxGfL","tlshash":"a362c0f4a61e0908de0e79f3e2f45a8df9b4568ff6ac9cc1218046079a535cb48dc22f","first_seen":"2025-07-04T05:14:00.905233Z","last_seen":"2026-07-27T09:38:50.540461Z","times_seen":94,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gq.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/gq.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 682\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2aa\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 523951\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lLgwQyYonUgjFCfNxHJxLQK%2FkHhKi4AvoV6d68TS1Z724N2hl4zPTusmTD1Bc6tapp9ocd0EAUmcNRXRsh8o8QbEBGsbI%2FfdHQ%3D%3D\"}]}\r\ncf-ray: 974793a28d020b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":682,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"74bd14eafb11a3abf63a68641d027508","sha1":"5f7f887219ccd1ec126266a42571eada4efa70c6","sha256":"393807418900a02a9fbd1672e2d60d22ee442b37733cf1d2e6c1c383cf71b271","sha512":"7cb61c594cad2fcde1945ad7fb2773eb194655687aa3d5f48966f18bf2ceb7e03cd32175bacd5b73f8f5132f8622eb8d2915fb39d7eccd0f4a81f5f79acc044c","ssdeep":"","tlshash":"c3018391e2200e97d9b10061b25a56e665374d30c57be31602f6c8f3051d3d32fcc1aa","first_seen":"2025-03-08T14:30:00.048856Z","last_seen":"2026-05-24T00:49:22.712557Z","times_seen":114,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/id.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/id.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 533\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-215\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1713751\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WDqk8%2BR5ux7%2Fzvu5kQK6J3bbS6%2BYM42SYRmQqsu8HKPNckWBaZMR30EQDbJ9HKldsloSuYLAsMgxWLFTWde4rWSFIgVw3JTMoA%3D%3D\"}]}\r\ncf-ray: 974793a7cec80b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":533,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"8d1444e3a9b371cbf8c2701c06d96ea0","sha1":"02911f5453c344a42789b2e6a8acc1370787ce6e","sha256":"27f46dbe30f6434e6a0ff334c85ea8ff3f1d7a09ee919568b2e2908f328ac07d","sha512":"30505fe89ad5536d44464faa4a20b0afaea3ef2fbb171c43813af481b28be2f84d8fe83a9cdc822dc744a3748d63f45618ac4f1848b2c0c910632be526346630","ssdeep":"","tlshash":"71f0c078adcd559ddc798b356118b5b9d872322c7b944d0e1708f951750e31ae48b80a","first_seen":"2025-03-08T14:29:59.854247Z","last_seen":"2026-07-28T08:27:13.792891Z","times_seen":351,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ma.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ma.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 469\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-1d5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1876612\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yeULHCbEARSnIMKHfAKElBO3mxDpvdTOapDFOzArpQJPUoqxfumQE1lxDkXjSnkhA%2FjhmcfNG%2FAvL3oFFw32HLZ0D5P%2FLJJm1w%3D%3D\"}]}\r\ncf-ray: 974793a9efa40b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":469,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"4021ea430dd401a9c12bc7039e5a12d3","sha1":"aaf632e35f09ae7a6730f22009a651202173e662","sha256":"ca7b586fe35986101464231bb7f7e65a2922305b62d00fd308657d340ca801ed","sha512":"35f9d8a6df4de968c191b25e123ca53e43f94089e4d8cbf2aa118aa1f031187aa27220cc329ab1591a84f60dfeb50af27542e478a0841629ef519cfe5b7f8f12","ssdeep":"","tlshash":"e9f02bfb27a05d1bcad2445ff1475465e5c6fe553075750301408b356d17216ccc7e86","first_seen":"2025-03-08T14:29:59.786103Z","last_seen":"2026-07-07T17:21:00.662701Z","times_seen":124,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/np.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/np.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 612\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-264\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1112178\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQZGuNWluppyP0NMrVvku%2FBmfLzzELgkmqYYoq0I9LsCChztGZQztATboUf7rTDxv%2B8RB9IWCIym%2FOgmRzyodo1AgoWo4voI6Q%3D%3D\"}]}\r\ncf-ray: 974793aa3fd20b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"1178d005c86066c4be2ada05e6e54445","sha1":"7ab452a95696676b13778abee77f8cfd918b08b5","sha256":"382a95e1e2c9f394df0b970e37fdb7b3e6662187d4c448f5800ed0fe705965a6","sha512":"065b5773c94d4eda3dd55184b8fedf71886a4f371794c1f982ae68448929ab62050a532e53a0ffce83e7111defe43543f28c992246488dfdd8be2616595031ed","ssdeep":"","tlshash":"bcf008d79d44cd3444fa4115d348880ee912a92fcd3fb542bf649e7180976ac54d6649","first_seen":"2025-03-08T14:29:59.87694Z","last_seen":"2026-05-24T00:49:22.895145Z","times_seen":120,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/tn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/tn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 616\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-268\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1141706\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fz4cks1h%2FJ7IPma%2FvY4TIq9m7%2BTVMXUOISfvuzv1pSqG4Mtt119u%2F%2BGhudmkX3NGH4T4TZ%2FS7tq8%2FsKsO7b95KmztPoQ%2BRGIPw%3D%3D\"}]}\r\ncf-ray: 974793ad99500b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":616,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"2fa44110ff5288ecc94de44c01006b89","sha1":"badaba336111362998a88445bd1f2bf43ad6e072","sha256":"6456089ffce42d8453b2b57c326ed241fab1ddd824bb03f0ec6fe68ff2baefab","sha512":"f845054a4b1615caba67fecb8b902c4086aac9698a65f67d99d1eea76d9421d3dd924519c6d13061141ce6ab0e0b7c66b2233ae7d0a0bbe7675184420bf9011e","ssdeep":"","tlshash":"11f06256361adca68d22f1252ac9208de8002396cb961000d14edbc8962632ff8c1a22","first_seen":"2025-03-08T14:29:59.870382Z","last_seen":"2026-07-07T17:21:00.648577Z","times_seen":120,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"vi-sber1-20.jivosite.com/ESt1iDtMoi?346b37c13fe769e0","fqdn":"vi-sber1-20.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"37.18.110.91","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:39.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /ESt1iDtMoi?346b37c13fe769e0 HTTP/1.1\r\nHost: vi-sber1-20.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://kentcasin355.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: H5msHPVhxaUPhlCw68kbmA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nConnection: Upgrade\r\nUpgrade: websocket\r\nAccess-Control-Allow-Origin: https://kentcasin355.com\r\nSec-WebSocket-Accept: SbSgmVe2hu5alBmnCyUaGniOMtM=\r\nServer: hand/3.7\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":45,"send":0,"wait":45,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node-sber1-az3-20.jivosite.com/widget/status/2256902/ESt1iDtMoi?rnd=0.1933869780923697","fqdn":"node-sber1-az3-20.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"178.170.197.234","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/2256902/ESt1iDtMoi?rnd=0.1933869780923697 HTTP/1.1\r\nHost: node-sber1-az3-20.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://kentcasin355.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://kentcasin355.com\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/3.5\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\ncontent-length: 79\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":79,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f86c9f94b22a109699060c5d964be00","sha1":"84f22306010b4ca0a6a9acb9ca9e6727eda8a914","sha256":"2589094e4700b3600357364ea34af9c7ed361b24c58b5cb2eeeac566dde6cd2e","sha512":"12cdbba3512cae7fb002d2e861a7ff6de018201b19a862fcb4ae960803c9fd3eca93d59132f0c71b86808516a29ad49ce737ee7abdf121e5fa9a8c1e6e1c9432","ssdeep":"","tlshash":"3ea012610d214c1152008210a2c67e05093005222d92c024b555a000717719004cd00b","first_seen":"2025-08-22T04:09:12.543153Z","last_seen":"2025-09-23T04:52:24.479016Z","times_seen":27,"resource_available":false,"data":null}},"time_used":2455,"timings":{"blocked":1196,"dns":59,"connect":61,"send":0,"wait":63,"receive":0,"ssl":1073},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/in.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/in.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 673\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2a1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1141705\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zeaK5qBaAkWc0vgI82shQkQKu%2BoKywcpa9WiOsgUkMJ%2FeDh0VaO4I8lcFL3N3QQYsNuC1ghOOkp8vmDGh7D1WNpiGtA6UwdLMA%3D%3D\"}]}\r\ncf-ray: 974793a7aec50b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":673,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"b17b8857c583dbb7e06e94f42d9fcb1f","sha1":"b9910f92be7ebd0e1f948431ea74ab96aa0a0b17","sha256":"c91cd6833602ceacaea2fdf9ea6959388ec1731c7fe113ab1e330ff20b1c20e5","sha512":"96ead135146198eca86f7f4d5c8fe94c547c88921d27bedaf49c50a4f17344a600640ed90b5aaa4f6fed9f67ed9a09052f1d0acf3b52d2244e2d19cac5240cdb","ssdeep":"","tlshash":"5101886707805fb3cc494120c19e17e17e974dbc10133513118cc23f7c9d14885c9ee2","first_seen":"2025-07-02T10:58:58.311086Z","last_seen":"2026-07-25T23:43:19.252708Z","times_seen":193,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ls.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ls.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 641\r\ncf-ray: 974793a8ef2f0b61-OSL\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-281\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nage: 1370977\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5VTgrXe9UwHDUi5d9oygLTYHMVFJEr7gJOK41z0579Zqb%2FlxTsuLi%2BTVeRX5OnmD2Iw0XnK8A72vZ7Zm%2BObFPH41y0iH12Z9REajGm1H95JqdkdwJhohieXuVzUebg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1297\u0026min_rtt=402\u0026rtt_var=827\u0026sent=416\u0026recv=224\u0026lost=0\u0026retrans=0\u0026sent_bytes=131907\u0026recv_bytes=10781\u0026delivery_rate=20299065\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=55fad1da16cca10b\u0026ts=1251\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":641,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"46f74da80f4c6eb0cfe179aa7b1b241b","sha1":"a913961660272ed8a6a45a100cd70bdff8e800ac","sha256":"acb3272ac6957280c774649b22cc18201e615d2591fd1890465f599ef5e6c781","sha512":"c16e9209fbea5b830d75a8860d36915620070437da262cf8cc2ffb0f9b0a66ecc22b6e3c02e9845ccc53313998f4b64ac63de817bf1cac01a73adfb2eb4d646b","ssdeep":"","tlshash":"ebf06279eb7350a58c51003a887b14c3adeb4312f95d363f2050cd7603ae77687d99d2","first_seen":"2025-03-08T14:29:59.883874Z","last_seen":"2026-05-24T00:49:23.410805Z","times_seen":115,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ro.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ro.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 515\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-203\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1794698\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KrlFnJorEhiElrvvFP88Ou7gS7RMm6dCMeInij%2FldcV3T1zop0ziYrEpO38KCC6Utby6SOVUUMoWVCn67bELzkU5G861R638Fw%3D%3D\"}]}\r\ncf-ray: 974793abd88c0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":515,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"41e80d8c304dea783d42ec06b6023911","sha1":"f813521125786f75d58ddf39be6147f87accbf8a","sha256":"a547bc8fd2468b22e1fab78e3b204eca1e4f9851685d0b63e0856724bfbb56d3","sha512":"e703fa7ed48f534a109276ab68c91082984afcfefa9153a6fe0afa6d804522812f2f3979d05218fe694db28621aa949a3036e4edf94ff98f170c8dd0a2241922","ssdeep":"","tlshash":"81f075d2203c746bee0b38068f50ad088dee2686c81ec0a09cb68835f201d0431029a4","first_seen":"2025-03-08T14:30:00.036671Z","last_seen":"2026-07-24T22:01:00.72469Z","times_seen":149,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ky.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ky.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 736\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2e0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1962862\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cZca4387U1LJcQ%2F8IoeCQYoHyC2KoeUVJCLgPj963Fiz%2BgZWj9OdUcHjn7t8%2BHOrxtU89taNMpQ%2BN9hpMU2gFwKyiNo7F7BZ6A%3D%3D\"}]}\r\ncf-ray: 974793a1ecb40b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":736,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"7bd66a1bc639b2dcb030dadd45f59bd0","sha1":"49014ff6fae178d820309957a55b7afd0b19493d","sha256":"014358b878abbc7c8a56a4c3945d0a1d9ea37f0954fde228cc068c722785adee","sha512":"8a43c803e90e7c7818d4fb8803837a448ab02f80e115e133586beae4696089f3004b75628bf08ca0fa3152d97a141d33264b22350382602450182e1264e4d95f","ssdeep":"","tlshash":"4d0199ac4bc2e79bb82ee7b3050e4dd4ed0527f12541330e00a977ec32327441946177","first_seen":"2025-03-08T14:30:00.02156Z","last_seen":"2026-06-04T12:58:41.54735Z","times_seen":120,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/categories/jackpot.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/categories/jackpot.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-620\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1568,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a4e89a0753176e69c7b10e5eb228f50","sha1":"d0369f1833402c8f3b8be020475afea464c4c3f0","sha256":"b5ed7d7f3aaad87c44f321de6a5f3de85b000d010d69cd67ef25ce65d407c838","sha512":"8966d6b16c4afc37f1753520633d5088d69351749cfa719e43bec32673c660f2f9e5bf4cc3143d19918cb54ce320fd35fefe2318d1ed3a55e29258624b041e10","ssdeep":"","tlshash":"c431cdba921ce2dc04cbefbccb36d4a1270e6091f9abd7a4d89e837104778d9d487414","first_seen":"2025-06-22T12:57:21.044943Z","last_seen":"2026-05-24T00:49:22.756717Z","times_seen":138,"resource_available":false,"data":null}},"time_used":771,"timings":{"blocked":704,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/levels/3.png","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/levels/3.png HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 10624\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-2980\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10624,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"eb489e34b02ed950dcc5ee0c5c683c77","sha1":"e048174e713bd2a3e31d288be846de076838cb94","sha256":"1487e6f6aec3dd916b113266f7604c435ccce8a9fc0a6c24e1de42d2e867078d","sha512":"769b669b962a119c52e6efb7584bd9a2b6e0d24998417d46d315f3bc4592571c74df22501ac2d052a5b1bbe6902627d88da4de17a8db43ac3502139551e7781e","ssdeep":"192:/LEKGFS1gXtAnDi4gp/gtDbl/QRy/soYT8SKfd4KGwzOmucczpeSf/:jlGddADi7StDblIy/Kwd4KG3mudFtf/","tlshash":"ee22b0f121ca1f44f8deecdf25d8aa61029cd89071cd615be762c3138a6c46d33a65a8","first_seen":"2025-08-05T17:20:37.445641Z","last_seen":"2026-05-24T00:49:22.887872Z","times_seen":74,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":438,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/ad.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/ad.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 644\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-284\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1103762\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sFxNeUqtBdDHcDHujQPkwa1GIjfRSLH3EVJ%2F1LbgeDYuws7zx%2FlhoKbPdafuusbyRWhR6wuoJCdW4KB7RdtwNi3GPJPwYw6SAA%3D%3D\"}]}\r\ncf-ray: 974793a1cca20b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"606d48c2f9e11120830219790ae9cb31","sha1":"720f88f6660cb3f3b7d3ebe9cb8d81815986bbb6","sha256":"322ae0ac4adfcce2802a296b8025e2514d8fcd8eb062e0ddbcfd56531a2d47a4","sha512":"fda0ee3e92bbcf770a81f72b96f65dfed85e09aa213b43fcc2af499a49837883b8f3b370b4d9665720716164318bc41935d9d885952b7bf6f7760bd0649cefb5","ssdeep":"","tlshash":"76f062e267449938c6344bd2e2aa8f328ab10601de7dc38e9c2d8462491bfb3107112a","first_seen":"2025-07-02T10:58:58.170457Z","last_seen":"2026-05-24T00:49:22.651334Z","times_seen":113,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":36,"connect":14,"send":0,"wait":14,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/et.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:35.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/et.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 769\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-301\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 180714\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0BYxdGPnc6JCG4zScW%2BZFKzJlxzVgq%2FftjQfkE6yTyJ715DqRCFwgTA68f%2FM4SKlA5s45tt1th2vThvtficNdCQT0y7TEXhKcw%3D%3D\"}]}\r\ncf-ray: 974793a34d4a0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":769,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"7d857990edbb143fd79f2611e7f636b6","sha1":"a87cff5f647e6c4007c3048b1f298d3bf1069b14","sha256":"ffee23829087473aa0253cf707c416a4a0a00bc5d5a0d2f17756deaf07a94251","sha512":"5f79978fc619e0df38ee0d45e40669fa2b629880ccedbb4ad8efcd2ea69e2088ca8bf96a1e8864979b7c0f295017524f0b0d669b69690f29d9f698baf2868c89","ssdeep":"","tlshash":"fe0175e88ae54a3da1c0aa450a1fe550ee9c13b2f42e265e3f52445211c265459ee14a","first_seen":"2025-03-08T14:29:59.89705Z","last_seen":"2026-05-24T00:49:23.056718Z","times_seen":118,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/gg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 741\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2e5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1947729\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=46kp1i%2B1aIXVSY%2F3v4IOIjK6TvmS15IPyC66sVtAu%2FCr2rHDxIrocoz0hGRvC1vra8y0EdOzx%2FFN1dC%2B8cf7PT9%2F3URZ0X%2BzDA%3D%3D\"}]}\r\ncf-ray: 974793a71e8e0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"770d59b5a3efe51f90b35d7543477bbe","sha1":"e1ef10092d2cbd383e14fd8dd102c0ede3e3151a","sha256":"d9f91fea344b12376f03fbca37896f38c3d5e48665ef027f9733caa85fd59405","sha512":"ed7c0341c0a0e349ee036fcc4bbf8b75e656c852960c74b148c87c8195ca627bd4cb57025a1a6f3c4199913b5e2a8548e42d022361a3fa30e9a79c4f88f65288","ssdeep":"","tlshash":"1801602ea3e14f61e9490258468f88f864b080d3482620998b38f5a33c72127199b345","first_seen":"2025-03-08T14:29:59.775712Z","last_seen":"2026-05-24T00:49:23.445438Z","times_seen":114,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/lc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/lc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 633\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-279\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697708\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VTvL%2Fp1Qd2ZUZpUDVL3Rvriwg7FJlJz%2FC1fi%2FNTmy4Wo1Glw3j%2FuUy6eEAeuQaKraTSNdFumMp5ap1BuCYLiKpyx7pE32%2FEnDA%3D%3D\"}]}\r\ncf-ray: 974793ac18a00b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":633,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"7b4324b1e4850422ba3640d8ae69234e","sha1":"dd1a9700588c943da994c33f87be3130f61b12d9","sha256":"e6dcfba5e04a8f6c3cb4cfb071f9f9d9de1aa39550c722d6ba879b36b039020f","sha512":"9e5b01fb44e5657b6b99d437239e2fedf87f0eae264960bc30734d5650c59e7724b490c769628441f12042f1de12d7d3acd9bfe5efd483f590c6d9229bfd791f","ssdeep":"","tlshash":"c0f02da23b2c6cf42b844212cedb8020fc98a76a63b65702cee341fa4a463c41299812","first_seen":"2025-03-08T14:29:59.956791Z","last_seen":"2026-05-24T00:49:23.693575Z","times_seen":115,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/games/ico/BeheadedNL.jpg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /games/ico/BeheadedNL.jpg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 55731\r\nLast-Modified: Fri, 27 Jun 2025 16:47:52 GMT\r\nConnection: keep-alive\r\nETag: \"685ecb38-d9b3\"\r\nExpires: Tue, 26 Aug 2025 02:14:37 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55731,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 432x324, components 3","md5":"91712e4e821c5438156227eaa64ed773","sha1":"b135b73c390951365de1c56dfd70eb46ad6ed2c0","sha256":"bb33897f047c21e80474f8addead1c44b99ebb5025adafb95fe06261e3d91c2f","sha512":"a6348708479abfa304bc85008f7eec58070467eb056784a72c87cbc5a40246010b21dfe16e91de60aa785536a6bc2a49b9e295372c58372442a646e12495da22","ssdeep":"1536:Ft6R9d+NAg5BSAOsKT8LEgiUrxl+iWmy00:Ft6RmAgZOsKTIEqrxl+R","tlshash":"da43021830cc4194f67d66b7dd28feaa00ed54dc27d8bba3058d4e114aa1fd59ef8e82","first_seen":"2025-03-08T14:29:59.992218Z","last_seen":"2026-02-19T08:22:57.884471Z","times_seen":213,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":197,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/banners/header_BG.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/banners/header_BG.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15852\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-3dec\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"024edd09cab4cf39c55d9d16b0aa0950","sha1":"fe695cea3a7267301a7c764053e8968f1e52e44c","sha256":"585f56561716ecee10aeed76a6a9a992d0500d48b446e693b9348cfeb5ccd955","sha512":"aa03297e4860ad433dc44c35633be6bcfab6c7855e31573b570b62b8505ba0efb5d1a820e17496b0aa18451a713270137745b6c21a0ea18a7de5c54b63539fd0","ssdeep":"384:+JPW3pKqP5waY7wct3BgiQrOkH4n/sQ3rRlk+sVr+:6Sp+3ii6OV9G+oy","tlshash":"a162cfd127ffc0b7920ab57522a4c783a31c96d8a724bd0696cdc60b58916e177c360c","first_seen":"2025-08-05T17:20:37.123603Z","last_seen":"2026-05-24T00:49:23.442618Z","times_seen":74,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":504,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivo.ru/sounds/outgoing_message.mp3","fqdn":"code.jivo.ru","domain":"jivo.ru","tld":"ru"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:38.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivo.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 23 May 2025 08:26:37 GMT","end":"Wed, 24 Jun 2026 08:26:36 GMT"},"fingerprint":{"sha1":"07:E5:24:E6:38:82:D9:A9:3B:D9:9F:6C:CA:85:05:67:F9:70:6D:EB","sha256":"35:5E:C9:A1:8F:64:C1:73:82:E3:0A:D7:B4:C2:B2:91:30:3C:D7:E7:EE:F3:8C:76:50:04:90:44:7A:35:0F:95"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivo.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Mon, 25 Aug 2025 02:14:39 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"68a5820a-1396\"\r\nexpires: Mon, 22 Sep 2025 10:20:19 GMT\r\nlast-modified: Wed, 20 Aug 2025 08:06:34 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: sber1\r\ncache: HIT\r\nx-cached-since: 2025-08-23T10:20:19+00:00\r\nx-node: m9-up-gc81\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-07-28T04:56:45.548227Z","times_seen":16641,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/games/ico/DDayNL.jpg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /games/ico/DDayNL.jpg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:38 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 43787\r\nLast-Modified: Fri, 27 Jun 2025 16:47:52 GMT\r\nConnection: keep-alive\r\nETag: \"685ecb38-ab0b\"\r\nExpires: Tue, 26 Aug 2025 02:14:38 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43787,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 464x348, components 3","md5":"ab18c9785d9391f3d524426a685a9cab","sha1":"7fc7a9f7e5cff997813eab3e348a761a8ef7de4c","sha256":"ae96dcffb8001aa616d8e48b0ff085c00ce8a0ab27bef5d1a31a8ef92114838b","sha512":"ac4d1ed06c779e38c161bc7ac6d4e73d275186a78c166ae487bc2f75155a27b5177262b22b96442ddaf251482b9d8522da3e4224791808a7b142e1355e4ec24d","ssdeep":"768:xY9BPdM3fxslmJxmYcKfVPbmu4w2qpUm92qDfhphwSyA3fgUGzV6n:xYV8ylmJRHf1XF2q6moqVphdjvgUGzVw","tlshash":"b613f1654f0c24d1f542c6ea7ca72e35cbfe7030b62368c5e5c5f42e14d96a2ae9842e","first_seen":"2025-03-08T14:30:00.027868Z","last_seen":"2025-11-17T11:06:56.162247Z","times_seen":125,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":268,"dns":0,"connect":0,"send":0,"wait":75,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/vc.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/vc.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 637\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-27d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697708\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xUZ2x7aiwRWhGltj7OXqmTyDLWMzR1w2L6ECj2YQ1zPFvG4ug1M85vb6zvJTKyC0sohtUDO4hWUkF6EwDRhw3AoRxeqICycMSg%3D%3D\"}]}\r\ncf-ray: 974793ac38ae0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":637,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"b5a85e4c57aec831e72d16b20038c802","sha1":"57692917c8742b031a8c1f23e328bcb29839c864","sha256":"eccc8a4618f9d878c66996954443e839c9b86328979d695cb04ef7df06bc1a67","sha512":"6f941246397525f574b283c60ae60341af045f983e8471fa9d599b00d64ae347f491e66bad225a4f736874ed4c79266177e8c420e52c7bc97f39792ed064a53a","ssdeep":"","tlshash":"6bf02381db88ec2ede8d29635121cf8d66614349d8357086199b597099aa28cd2e4741","first_seen":"2025-03-08T14:30:00.044202Z","last_seen":"2026-05-24T00:49:22.806578Z","times_seen":115,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/games/ico/DeadwoodRipNL.jpg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /games/ico/DeadwoodRipNL.jpg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 57786\r\nLast-Modified: Fri, 27 Jun 2025 16:47:52 GMT\r\nConnection: keep-alive\r\nETag: \"685ecb38-e1ba\"\r\nExpires: Tue, 26 Aug 2025 02:14:37 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57786,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"9bf3bc96569465c6e11fb25760fe3d74","sha1":"d5817fac9971a4b3cc2daf8bae8166d52660ff4b","sha256":"9e40bc332d7979c61a7830c977983bafe96257ece7e9033a5931a052c005b6e2","sha512":"03da3c7b7dadb8f2ff58b93b7642709ad98eb166231ce62a4a1fa6967467836cca04d2e76cc6915c9143f87d9cbaaf488c481f60866e9add5d9c0f54c9ccbbe7","ssdeep":"768:QG4dHj0Bf8s5njeKfhKpf+w0Gg/E3JNkjA2osXNDgaQfzpRIG4h9j9hofRlc2qv2:QGYjUf3/4JhwE3pyXY3wh9j9h6G2","tlshash":"0243f1d5d21f05d8f9a148bedd329dc115fc5ca9c507761ef5c3302aa86eab22ac8620","first_seen":"2025-03-08T14:29:59.797664Z","last_seen":"2026-02-13T13:44:35.810265Z","times_seen":200,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":180,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/games/ico/WavesofPoseidon.jpg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /games/ico/WavesofPoseidon.jpg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 83511\r\nLast-Modified: Tue, 29 Jul 2025 09:47:49 GMT\r\nConnection: keep-alive\r\nETag: \"688898c5-14637\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":83511,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"3133bfb206c77491d0fbd715eacb3a12","sha1":"21501afbe2104039a871965ca0353c53ed1b5029","sha256":"43b619465db228e885e2029d17c38cc19e3b10dfba42be0ca70f1306545ff62a","sha512":"273db49ff3e3842677f57c56d5495df797a86c60e40d68aa8b916400c0d983634d7440111e0b05fbed7c1c8c4d13f17029247fc89c4d0e54b132bc7fd72a831d","ssdeep":"1536:MZdYP5H7r/AnXWeaHNJ0+JrMHnP3QuBvS41R8IOQJESksq20Oj:lP1vSWv02re3QU1R8ZQHkq","tlshash":"4883123294b66dfafeb96ab9c3901e6825f2c91007c10fcc39c8db97cb05d497a36491","first_seen":"2025-08-05T17:20:37.198738Z","last_seen":"2026-06-12T00:18:49.572581Z","times_seen":184,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":462,"dns":0,"connect":0,"send":0,"wait":70,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/banners/content-1-2.webp","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/banners/content-1-2.webp HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/webp\r\nContent-Length: 104628\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-198b4\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2c44287665f46344b35ddb41aed26fba","sha1":"a898d915a0cc61dec3adc35f042c3dc59a654811","sha256":"04cb174b91b3a9f18d54a1645be1eaf3b49657fa2536098b7d3bccbd28cbad00","sha512":"d8fb543945c3a5e621376d3347e21e2ad67a61f04de3b55772c02467635f9bdfd842b32155f43cfd8f07465cbe1d0d9ef35f7d5da30e3db951a2bef84a8d2efb","ssdeep":"1536:HsLZS2yqwfAh63zLtWPOxVOL1FUzt2f9qr0NREmtHRHwpNiIvplEl9NTst1:GZSzDfDXtLPmrfYUEmZRveil9ZsD","tlshash":"49a312920c96f879cf56ed181d3056010d32606cce3605a2c5b6f4ae77c9b972e2bb8f","first_seen":"2025-07-08T21:30:00.279332Z","last_seen":"2026-05-24T00:49:23.456704Z","times_seen":80,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":77,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/img/icons/info-icon.svg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/img/icons/info-icon.svg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:34 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68a5667f-16a\"\r\nExpires: Tue, 26 Aug 2025 02:14:34 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":362,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"23a5134cff64ca5058c70c3290592e38","sha1":"507e4e9cce12ee5cfbe9ed8bd21f429773742e01","sha256":"ab11f22aefb8593b6c6b5d07d8d2ccc6a8a9acd92c1e62e278deb2fb1705fc90","sha512":"4de3e2e8d6e1a7850b38b7d11df4bc93df38cf1e0a0452e2855832ad3c42ff250e0c92ff351b545bf1dbb6b3ae7c3baa9fa85284db08e5d86f568ea89b59f4f2","ssdeep":"","tlshash":"1ae0dff4ef1cd5cd83018bb21e2a214c030ea0b770200183ab0c3ef0959ace1d943b14","first_seen":"2025-06-22T12:57:21.069946Z","last_seen":"2026-05-24T00:49:23.480458Z","times_seen":195,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":569,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/am.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/am.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 601\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-259\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697706\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PhWWbcpqPRhcn6VlBXbqWjhnPLU0Z9ANCRQMA5HhlKV0iyFPImfnLw4s6pwO9Whjz7soYr7svsQMl9Cc0Wt688L1pj05m6ELkg%3D%3D\"}]}\r\ncf-ray: 974793a1ac7c0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"bacd9f3c914a837c831adcc6bc289fa9","sha1":"7ef48ed22b1ae7b20c1b0103fb6a33bd9073e3fa","sha256":"4976c3974b1c8ce6d92615b074e50caf1a8081a908acc1b3aaf8111c86875c6a","sha512":"3578f195b55a12b233a4c5e16f6035b86d63883f7ec8214e5801c9fdf86656839e18f48f6aab7219eb44de781b3d57ee87022e739c47d6a8a0b4375b5a1c6211","ssdeep":"","tlshash":"faf047d363381a7bef9677f803970d696810d7d07108d7d017a9c6d24b1af6240ead19","first_seen":"2025-03-08T14:29:59.827682Z","last_seen":"2026-05-24T00:49:23.073104Z","times_seen":116,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/bn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 749\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2ed\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1801593\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SoAUZ4bvl2gniLe1tWQ7%2BZSrqhKPkcmKANOx7a31nIeZ3epybCr9cIhG6estyum%2Fm%2FFleI5BR6Cv6VURyam%2BhRuGj5SjmjC4gw%3D%3D\"}]}\r\ncf-ray: 974793a1cc9c0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":749,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"888f9103f347bd75d092273c98193320","sha1":"6b260632290659c72a1f5a0409e1f4808ef5e76d","sha256":"928131163fa3e997e095fea7d3157575c91ac934079eed601d05c358a983febc","sha512":"04bd18e87468a31612db58f4e3c355a6fa2cb3d76eff653079c2578e958e744bf4606696cc02c5e6f665a169514d7c38f0fea3e69002e9bc5fd6fe00ea17578a","ssdeep":"","tlshash":"1e01b53c6a42d41befa34e8299cbc0a2cf3481a5d0f32c0a5062098d5aabe47f1c3858","first_seen":"2025-03-08T14:29:59.872672Z","last_seen":"2026-05-24T00:49:23.68803Z","times_seen":113,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/gt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/gt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 571\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-23b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1801594\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5kpx0GECahSvLpxSsUeJ%2FzEgwTUOPBVqRwXQCADdmO52NczWyRtLHmEYKNcOHjeCIJGENIyaKafgAg8i%2FByCdvMszWeh1OjCxw%3D%3D\"}]}\r\ncf-ray: 974793a71e8a0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":571,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"6fc998cb5a0daaf3e13c19bd29d08914","sha1":"5923d9b55d59b95ebb1742121a77e258ad904d9e","sha256":"1ec6889ae646a6dcaf346819a2b4504f1b9282db9933f72d5b278fc5740fd8ec","sha512":"5fe23bf926a0999adeac75029fdb723009f63d315ed328d07340beff03eee32373d74daa810b546a955887124a65cc6fc8831b38768ae16db21b0dde97cf6fb8","ssdeep":"","tlshash":"97f0419ecfa30c86d8add46a14526300440d0b20ba30d3845164f7244b122645b1b98f","first_seen":"2025-03-08T14:29:59.768602Z","last_seen":"2026-05-24T00:49:23.292686Z","times_seen":113,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/kr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/kr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 713\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2c9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1709562\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x5qMBVZcrd8EtZ1bvnLUefgvQ%2FeW%2FfQtiMC7cv9YjPkITBmebrGEB%2FZVO16Q3lF40yqNn8W0NCEbxSRVfpCtpKYV%2BSD4Fbj1ag%3D%3D\"}]}\r\ncf-ray: 974793a88f0e0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":713,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"3542aff1ebd903ba6a5bfbef074dee4e","sha1":"29b676192fcaccc72e40dd10358fbd95682d1eba","sha256":"77577ba34a032d62299414f6b72fa04ec288a23819f43a6a4360841ece2833da","sha512":"57e534d06f8be412183fc50482d0fa6d8144c2286787676687506d51e9e26513914d373f81e17b923c3fa0385c63181b71341099a80b58314b4ee92ee9c3a6c4","ssdeep":"","tlshash":"540165a5e6c08d97ca3454bd62a3e031a6ab8ba841bd3449d1820dd323076cc3c90dd4","first_seen":"2025-07-02T10:58:57.986224Z","last_seen":"2026-07-24T22:01:00.699221Z","times_seen":147,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/nf.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/nf.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 630\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-276\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 9185\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rv41R0Vjgt4e6Q9RIU23u5uuNajQCGcFfaVhaHgT8E54ePmsk%2FVZ3CkF%2BuDmTkHdhwQsNgn2X8nq5pw9%2F7iiM4wqKyWYgGu96w%3D%3D\"}]}\r\ncf-ray: 974793aaf8140b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":630,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"73766ebc0478107bb0e2f1d66fd496c3","sha1":"ea8dc3fb83e004cc77d50e8af90754cf02fa0c9b","sha256":"896d662a098d7d9604bdaef72d384455a811e7feb6b5881a9118fa29dc230b35","sha512":"3058e3aef2962f27c0b27719218e7e8e91fd807aa4a8144eca31f72fcc72f14cb1b6f5c1c3890bcd2a1d890fbf8e83489d63a648efc7a49bda7e077ae7a60e0b","ssdeep":"","tlshash":"eff06285de71cd889b4aebf03b9264e684b6a35dafaa120222e3f03083093106591913","first_seen":"2025-03-08T14:29:59.878274Z","last_seen":"2026-05-24T00:49:23.727962Z","times_seen":114,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.kentcasin355.com/api/translations/en?pr=kent","fqdn":"api.kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:15:41 GMT","end":"Mon, 17 Nov 2025 12:15:40 GMT"},"fingerprint":{"sha1":"5A:21:78:73:C1:44:39:14:ED:89:01:53:36:B3:22:CD:5D:DF:67:CA","sha256":"79:D3:CE:5B:49:98:7E:53:E0:CB:AB:20:5F:B3:F9:AD:68:D1:32:26:53:54:04:32:5E:A5:B3:7B:05:B3:CF:A1"}}},"request":{"raw":"GET /api/translations/en?pr=kent HTTP/1.1\r\nHost: api.kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nskip: true\r\nOrigin: https://kentcasin355.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106110,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d16dc5ee25c1b9229229ecbe4e27c71f","sha1":"cd92a9cf8dd91b62a7679a7af2ce2b5891d329c3","sha256":"42c755be89ee902e193672933e597239053a76e638267182fdcfd4ec18d89e8e","sha512":"ea8bb2ffb596888a0771368f9b2392397a68a8307fd8b8fad94988c3a839669f8c3ec5036c381536ee4e2d507a80d2551bcb676694ec293c5dba3b89be2c2755","ssdeep":"1536:sEfmr38WOGc6mLNtUVugpA9WKSfFDG7/ZfAfl7X78B0W82eZ+8dnNSc/CCq9Ffrm:nu78BNtUVugpAkRdqrR+AH3hgn2kGLla","tlshash":"b8a3f89fe78813b7079203d07a8f7be6bb7d40682321d5a478adc12c2359d365a739d8","first_seen":"2025-08-12T21:48:24.920579Z","last_seen":"2025-10-20T13:59:14.987886Z","times_seen":59,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":39,"connect":44,"send":0,"wait":65,"receive":43,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"api.kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/games/ico/FireMyLaserHG.jpg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /games/ico/FireMyLaserHG.jpg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 66598\r\nLast-Modified: Fri, 27 Jun 2025 16:47:52 GMT\r\nConnection: keep-alive\r\nETag: \"685ecb38-10426\"\r\nExpires: Tue, 26 Aug 2025 02:14:37 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66598,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"b0b7d3ac64a423452e7b6aa580af0410","sha1":"4493aa0990d48fa40eb3166b5c1888fc19899399","sha256":"4179cfd27a3dbfdb19b17d6a3b806f4adbcff5ff59dfe484539845387312f6da","sha512":"d84d3bc3ad01e7016cf7f6e1491369abcdcd17243348527fa7a45c4798bf30f558705ab1ff392bc169c343036ffe3ddbb42fb589728f66073a1c343e66164295","ssdeep":"1536:rCX83NpBz1ksNKqHTwpD/def9/antpmz6zrasRfirUFHHb2f8dhDC+mj:C6PBKsNJHADkanH2sRfjFHyfAh2pj","tlshash":"ee5312133b86bad8f70d737ba225cb342cb4963560b93a4976ed915af203931d0631f2","first_seen":"2025-06-22T12:57:21.164905Z","last_seen":"2026-02-13T13:44:35.664222Z","times_seen":211,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":206,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telemetry.jivosite.com/w","fqdn":"telemetry.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"94.139.253.159","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:49.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"POST /w HTTP/1.1\r\nHost: telemetry.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 185\r\nOrigin: https://kentcasin355.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: JivoTelemetry/0.9.6\r\ndate: Mon, 25 Aug 2025 02:14:49 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T15:56:16.616317Z","times_seen":17582408,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":183,"dns":59,"connect":58,"send":0,"wait":58,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/sz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/sz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 946\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-3b2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1546724\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kvBGc7BhJ7O5MmST0BqmDxZPpoZWQpHtcDVoCD1eCsT%2BJPqz49YWlULrycyrRSlB7%2FT3qKjtLAXAql4SgQ%2F5K78pPvPQnRMucQ%3D%3D\"}]}\r\ncf-ray: 974793acf8f70b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":946,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"01b1ea397b7e86221665bd584c0e9e49","sha1":"52f640454bbdf0953361d209e59b386f3f2900dc","sha256":"b7e38bc179e362c9a9ab3f9754023c17ec760ea133c8436129f58c1c9bd12f67","sha512":"bb7bbfd6f601f930c170c10879d8d8caa6e95f179b58a40ec3abc88bd1a0943f2d5f3bbcd6a6f057ca0a64d19b92056006a880fabb000d37d72c405af781b854","ssdeep":"","tlshash":"291194e6c9743d8a6986d1d85665a3adc7d4a391df341c3e1cd4bc06281624e2ad2d60","first_seen":"2025-07-02T10:58:58.071686Z","last_seen":"2026-05-24T00:49:22.867055Z","times_seen":109,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/games/ico/XwaysHoarder2NL.jpg","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /games/ico/XwaysHoarder2NL.jpg HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/home/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:37 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 69719\r\nLast-Modified: Fri, 27 Jun 2025 16:47:52 GMT\r\nConnection: keep-alive\r\nETag: \"685ecb38-11057\"\r\nExpires: Tue, 26 Aug 2025 02:14:37 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69719,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 440x330, components 3","md5":"873b9f49061efc9cc74b8067033b9e93","sha1":"83dc9db5b4b95a50030e3305c6d2a29eb8454845","sha256":"45c0b313bc983dece484dbb235a88e911bdc5d121d1e46d690d3137df7e6e45a","sha512":"7cbdb7728a4e1ad34c52a7dacaf10770bd23ce51f5fb7dee95679b8a426f0bbf4282fc209c31d65e76568ae28db64641bd3089d9d13b9c95e58bf803abb17f52","ssdeep":"1536:T0i8gcLkVTdICxXcMpRqwuTQ04sLEWpZPVA0L:I3k76weQ0ka9VB","tlshash":"2763023f5018e2eb52412fa91d5b4874a6ec45f24c96786a73f34cd2f557342b9c63b0","first_seen":"2025-06-22T12:57:21.154828Z","last_seen":"2026-05-22T01:16:05.056424Z","times_seen":215,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.kentcasin355.com/api/game/last?per_page=30\u0026lang=en\u0026pr=kent\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY","fqdn":"api.kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"5.61.54.107","port":443,"asn":58061,"as":"Scalaxy B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:15:41 GMT","end":"Mon, 17 Nov 2025 12:15:40 GMT"},"fingerprint":{"sha1":"5A:21:78:73:C1:44:39:14:ED:89:01:53:36:B3:22:CD:5D:DF:67:CA","sha256":"79:D3:CE:5B:49:98:7E:53:E0:CB:AB:20:5F:B3:F9:AD:68:D1:32:26:53:54:04:32:5E:A5:B3:7B:05:B3:CF:A1"}}},"request":{"raw":"GET /api/game/last?per_page=30\u0026lang=en\u0026pr=kent\u0026key=MZmWqJFpvmOKruZRO5dmzAoOY HTTP/1.1\r\nHost: api.kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nOrigin: https://kentcasin355.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: no-cache, private\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5487,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b9175b213bc43bfc4e64126042bbc4f6","sha1":"f882debfc89d717fd4330d56f680b5b6e77cf13a","sha256":"bf07ef46859436717d7a2ddab5c885c1c9cf80f53bb9528a4253984fa8fb6efb","sha512":"2e3fb27013452fd2d9ee044f552cadf03f052bd2f2ebac8f6d94d7a6591ac62cfb1d400567ee3e1b1ec7451eb537664431757b9e2bf91b952930a48d9e2e198f","ssdeep":"48:YML7pu0sStHbL7cYF1to/0wx0fDRF7BxeRV7vJkaAmncl8lwc+lz+6:x7pHdnc0G0rgV7vjAQcAw","tlshash":"20b14b898e63dcbf375572c81c8370eab66d713374c0dfe410a8d804da6a563a6a725e","first_seen":"2025-08-25T02:15:24.032381Z","last_seen":"2025-08-25T02:15:24.032381Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"api.kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/bv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:34.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/bv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 670\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-29e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 252370\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uBQyWZdQjHIncDf51BoucmC%2FIpcB9qK96wvvYwDY2SJPJopbDzQlHtk%2F4OwSPlwsMl%2B0%2FKPN0YgxWk1OieBENxOsXmvWFLqjCg%3D%3D\"}]}\r\ncf-ray: 974793a1bc9a0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":670,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a9740043a6ac2a5f2512dd196263e7af","sha1":"8a56b456d3851dd06003845ae859aad228c3c0c8","sha256":"c07826d3a8286ff20351850821afa5e1fbfc39c1ec29e3fbce5a0b91f461ac51","sha512":"9ce9ac1835a769a10bb623b912c8eb382bd97342a6185a4efd34338638e57d5a4719a9156a78a6f8906e1e8bd8ddd4680015081a7d30c0647cb340ce94ffbbce","ssdeep":"","tlshash":"4f0123f614c1ddd0e7fc3326a37c92c25f50c4f6b755611857966e213440f42429930b","first_seen":"2025-03-08T14:29:59.801518Z","last_seen":"2026-07-24T22:01:00.731307Z","times_seen":168,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/la.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:36.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/la.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 551\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-227\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1697707\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BxKcTA0gD5aO93JsmjNHiMUZhWUiBvvvmz81Crc3C7vq4utNJq%2FBB0qfrx32qNnh9u%2F7nktjh3FA9DtoxezU37iy7ZBToZAByw%3D%3D\"}]}\r\ncf-ray: 974793a8bf1e0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit colormap, non-interlaced","md5":"a945793e9018e47ac9672e6f52088cc8","sha1":"e6b6515650877655c8d7f5894d49ff1aedb00962","sha256":"707eda661c23940a095126ad869cbe02aeecea12f9dec282be8442a84398a317","sha512":"e3af6d450bec16538215cb5150cb41763949797cf546406f3dd485d5caeb2693286a4f49cfd4a67f42b96f5382489d6868dfffdf8144ac0ca421c2b65c09c437","ssdeep":"","tlshash":"f5f096542210cd70fd5b821ad56cfdc0957422017d3dca03340e800033bb31c1051411","first_seen":"2025-03-08T14:30:00.04662Z","last_seen":"2026-05-24T00:49:23.344139Z","times_seen":123,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/pw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/pw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 737\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2e1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 252370\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GuoEQUYKrqAATrlnSOECzKs1I3AnwV58zXOs9lS8HBbY8N3Gu2SlFuOPKH91AAZxbLBkp9zGc3UUitrFZ2gim50eD0BPimPCuQ%3D%3D\"}]}\r\ncf-ray: 974793ab48320b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":737,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"9243f0012054254843fe8810607b8a84","sha1":"a65151b7857a69e26401105ba7357619be443a96","sha256":"0cc096148dec145219b037f28eec10ef4388310dca28c185694a7ce34299af05","sha512":"360086bdb11716f59cbef8827304c7a0365eccbfb07f3f547250fc047d1e7b4ecff9f9fb53f19d887bd66bdf906d4f744dfd3a230d9e1ec697cf282eed71c665","ssdeep":"","tlshash":"b101650f5183b8aeaedd4b39f00b5246fa561a85b306e86d1b87663701f0c183a58e45","first_seen":"2025-03-08T14:29:59.919311Z","last_seen":"2026-05-24T00:49:22.722204Z","times_seen":112,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/24x18/si.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:37.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 08 Aug 2025 23:14:52 GMT","end":"Fri, 07 Nov 2025 00:12:20 GMT"},"fingerprint":{"sha1":"04:E7:40:63:59:15:0D:51:D0:77:16:F4:88:74:0B:F9:9F:D8:B4:97","sha256":"43:41:9A:54:EC:CC:88:D0:52:EE:C1:BC:91:8E:97:60:72:AF:2C:E5:CE:4F:F8:B9:3D:48:FD:97:6A:54:42:93"}}},"request":{"raw":"GET /24x18/si.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 Aug 2025 02:14:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 720\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:57 GMT\r\netag: \"6864014d-2d0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 1971720\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PdjHLRLFOv4BNjW5gMMAOudhQfGd6Zie6eE7QPO3%2FiQa%2B8lD1AIKzlX0dq12%2F%2F%2F44lluBRiuJJnpzU1EZfw9%2F%2BsKRg9ExK51tg%3D%3D\"}]}\r\ncf-ray: 974793ac88cf0b61-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":720,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced","md5":"08c23d129a6454bf4d76e72106c64329","sha1":"a44b446da81798f77e633e93b2916ef34c71f047","sha256":"8e70380b4005560a22b12c01028d488a2d5affa53e337101b3650d40b6f5321c","sha512":"644725791c22f43eb33c0433f6cfe945c54c7213a97d4ff815356efeebc27f4a18b6bfd1572c6ae8f966b5de887b40006980f0d7ec1026aff9fb951470581bfc","ssdeep":"","tlshash":"3e01657512ec455488c75565de1fe935583152ee5da4014873c255e90eb5c32454b318","first_seen":"2025-03-08T14:29:59.763656Z","last_seen":"2026-07-24T22:01:00.706513Z","times_seen":129,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kentcasin355.com/assets/favicon/android-chrome-192x192.png","fqdn":"kentcasin355.com","domain":"kentcasin355.com","tld":"com"},"ip":{"addr":"212.11.64.170","port":443,"asn":200482,"as":"nexserv GmbH","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate","date":"2025-08-25T02:14:33.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"kentcasin355.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 12:13:39 GMT","end":"Mon, 17 Nov 2025 12:13:38 GMT"},"fingerprint":{"sha1":"51:BE:18:80:DE:D5:45:30:6D:A9:40:A7:10:DE:00:EC:A0:E6:91:5E","sha256":"52:80:10:38:F3:40:56:F5:81:AB:15:F6:0C:0F:DE:DB:BF:F5:7F:96:6D:07:6A:D2:A5:77:BC:2E:1C:96:F2:FB"}}},"request":{"raw":"GET /assets/favicon/android-chrome-192x192.png HTTP/1.1\r\nHost: kentcasin355.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://kentcasin355.com/r/cb289a440d6f61d44c663529ef2abc66/kent5000/activate\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Aug 2025 02:14:33 GMT\r\nContent-Type: image/png\r\nContent-Length: 4368\r\nLast-Modified: Wed, 20 Aug 2025 06:09:03 GMT\r\nConnection: keep-alive\r\nETag: \"68a5667f-1110\"\r\nExpires: Tue, 26 Aug 2025 02:14:33 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4368,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"a88490b71b7e9d3a189ee2e0c6a2ffea","sha1":"529909f23752e0c7dde8f85c53bf45d16c7dc93c","sha256":"41a55f511b1dd02775585bc7bc557c618ea01b4a730124ad993f341217e5ec44","sha512":"c0582ef2146a1a690b52fb63863ac9dfa99e0360d40583d9ce556d8040962af42eb569b12612f0b9670242f85cbeb0ba3519d4bc98583470d0ae6c3ddc9b5a0d","ssdeep":"96:AjGbRt/JynTorSmHxHjf+tcZIXbais9p8+F2KK8mcdo9775p:AifIGRHxHj8m6aiCpJBKAEp","tlshash":"59917de438777f9cca3f1905c47be4854937a225d2db1a873a6800328daea56e09f087","first_seen":"2025-08-05T17:20:37.489053Z","last_seen":"2026-05-24T00:49:23.090384Z","times_seen":75,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-25","alert":"Sinkholed","trigger":"kentcasin355.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}