{"report_id":"d6005dd3-cbec-48ce-a5b8-a234fdaccf50","version":6,"status":"done","tags":[],"date":"2026-05-27T01:39:26Z","url":{"schema":"http","addr":"winner-casino-fr.com","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"104.21.54.251","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"winner-casino-fr.com/","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"title":"Winner Casino - Jouez aux Machines à Sous | 50 Free Spins","dom":{"size":30916,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (30469), with no line terminators","md5":"f652a18235ba7ffd4b3f9315a97e776e","sha1":"07ab61f989dc85786991089f3824c1ac4148ed5b","sha256":"6f613a58669ad617398d186fb3f94efa25bf28fe0085e2ce18ba318490cd9b61","sha512":"221a8c10e52deab797f6a92e33547ca6c662ab54fc033472330b26012f218ec28d3ce4449911dabab9e04d1e7c81d54f78f174389374cbf9f453fbaa4d4bc165","ssdeep":"768:pZQb+Ac+C6IjUaphSOjNi3UCv6q9SBwNswwpnoE8fz2GWkiazcV:pZ03o+vACifoRw","tlshash":"75d2193791c01e39039366a2fb11ba93d535182e96b5e970ecac9d9272b4ce041bd3fd","dom_hash":"domhashe56274a2a1550f3277792efb1f0e74e7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"winner-casino-fr.com","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"104.21.54.251","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-01T01:39:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"winner-casino-fr.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-22","domain_rank":0,"first_seen":"2026-04-28T15:51:48.3232Z","last_seen":"2026-05-26T18:45:37.059712Z","alert_count":32,"request_count":16,"received_data":258351,"sent_data":7416,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":3,"received_data":26202,"sent_data":1628,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":1,"received_data":5478,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"winner-casino-fr.com/scripts/bundle.js","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9164ab72b28d0336c2ec1e40e4250315","sha1":"887e4fceca3197eedf4831a0778ae92e0b446192","sha256":"e8bcd2ff44019bb41750444d8b111323bda29c05cb5805d9769073d08d1e674b","sha512":"628ca0512ebfe6ac886fd65475cc7d2f4142e0480de15b40b7cf08ef9f612bf2e59dad07eb28f3bd6cb32ba8651e89996922266e3be73dfb049668950a6cc263","ssdeep":"","tlshash":"f951d7f53185f1f07f692890d17aa620b9392e73b81e4890a2fb4c462b2e40ea431d2c","size":2681,"data":"","first_seen":"2026-02-12T18:50:51.542313Z","last_seen":"2026-07-20T15:44:13.006338Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"58b3d536543cb225a1f92a12bdb15cc0","sha1":"54e682997704c290a447bb4efd9a02bc559c85bc","sha256":"27b7b9b6b7218f6521bdde95d6de7a34b01e1d2e0e40995940667182169677a7","sha512":"c8b75fd7c46c1fcdb2bdc48394785f8039fb85c5263758a5e67ca6df43c3100ed6a2ccb62ea6cba0face45bd21bc226ece034245cb57c42952a3071ba4d0805a","ssdeep":"","tlshash":"4b6156211e594e30099e8bc971b8eb91b973047678455860887e8c7a6a17cc752f47ea","size":3365,"data":"","first_seen":"2026-04-28T15:51:52.64142Z","last_seen":"2026-05-27T01:39:27.418069Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fc4542f3f945651d3c9ecda0ee936e0","sha1":"263fdbb6b6a9c7d786b91430575a0a04115c1249","sha256":"768a563eebff83016a7f70cde2f8125bf9caf3b5a5c2063d8c429f4aa6ce51a8","sha512":"1f583bcdf7e3dcbb0e000efdcc3e1b2a8ca0d3a00f234a3af481088b61b76429369e732262f6ca422bea23e41cbc5db8b0ed006ee6218a507a1efc4bfec1f893","ssdeep":"","tlshash":"38b0925603a7e160b2a712828bdb36471011b69a26fc419616146878441cc4a21a8eb4","size":110,"data":"","first_seen":"2024-08-31T04:52:34Z","last_seen":"2026-07-20T13:24:28.234819Z","times_seen":967,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f857b5eaca0f205a5984a7df0d538b67","sha1":"85fbf7a785015f1e26ff40f7bf8b9757c9fb9c32","sha256":"e303d9cc6e354fbf1d6f9ce7e9f9c27c46f764358940dfca621b6b4360af34d8","sha512":"5a6e97dc4267b136c91e4ebded2a6317f297e31b4feaa18a4be454140920796770bb12cc3bdd3690aeeead6f127757700cb5d059ea4b9a231e61c6b29b5dbfff","ssdeep":"","tlshash":"5f71877522511f733ddd519a9c24aec3ca65243885d6487e388d5cf31668ec340fdbb9","size":3556,"data":"","first_seen":"2026-04-28T15:51:52.642796Z","last_seen":"2026-05-27T01:39:27.419066Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/_assets/b0b7eULJzKj71952.js","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9df3f33b870097e64e09537e97523f61","sha1":"8e52d9265c48c9635847d515248f948ac56832ff","sha256":"0d6ae547ff781a31dc046f42fb8d6e5afab450a57563c14919055275e3751bab","sha512":"cd63d6583b72920461d0bc23fda6bc4e41b52830c1b9c179581782a2a17d9671ead4d6bf61fb97ace540b6085beddc09ea5abd6cc4f9dd7ce8952be2b9a18a30","ssdeep":"","tlshash":"480120d05886a03677b38c62c46be443a23e319c6adc8bd0f386d1e1246a1e08113a53","size":745,"data":"","first_seen":"2026-04-28T15:51:52.639541Z","last_seen":"2026-05-27T01:39:27.417068Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/_assets/c624CiUtgIc2b1df.js","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9e59c0f38d9cce9e6d75b2d48af201bd","sha1":"44e45f987a7bf931d114a8593476208f0010d14e","sha256":"7603593d0d9d3740cca6365d8d6012ba8f0a57c7cfbf58675af093106ff516a5","sha512":"31f111a89f89ecfdf0e432acfe9979abc02748cdc5ad3835d06107bd037525daf2340ebc64c906918b53b01a409220eb2ddc15424520642c6b47c9c167f6401e","ssdeep":"","tlshash":"cdb092d1064a2afa53e94504633fc812694c42abb9e46a1a840caec5b5f8a40809ea2e","size":120,"data":"","first_seen":"2026-04-28T15:51:52.614791Z","last_seen":"2026-05-27T01:39:27.413941Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"841497c6c9d995578b1806b30ec192c3","sha1":"3ebdd0a9ce06f7749a5466821eb03a2c42b3a8b1","sha256":"eab8f343652dda8aff9d3566438658f0b8a3bb7101d8940db58ef4810ec613e8","sha512":"e4ddf240ecfd2ea4f3f8089e6e6fa6a25c8b5a602c02e3072830affab5be7c8cbbcc2f714ebeb0b524be86e2dc72a9c9c5b9c79a1923e9ba468f2eb4d4791d2c","ssdeep":"","tlshash":"20d09732e8a480b200b3429636baafd1b8f2808bf0808421282c8ce2154ace201b0dad","size":241,"data":"","first_seen":"2026-04-28T15:51:52.644123Z","last_seen":"2026-05-27T01:39:27.419568Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/_assets/d0d3Ddt1Kc506a62.js","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2bedab8db65852ba5982a0e40c029715","sha1":"6c907983ac8ff0bb2a0cab34e8020ea39e32fc2c","sha256":"b61a7e1c7d03066bec4defe74695cc308c1c6fdb4117c6b57e6fa7ce086e4fbc","sha512":"a4dc280e56cbcfe2a0b7d3bae19ea04ae397de57219e348245048d265e0889fab95b839aeeb36e17a129e1452e28c14658a1fc0a2b1379f12cce22164e110b2c","ssdeep":"","tlshash":"daa0025bcc4500aca7189ec91206f68747a5395c0798c7910045a35795104c1848f947","size":62,"data":"","first_seen":"2026-04-28T15:51:52.594801Z","last_seen":"2026-05-27T01:39:27.417548Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/_assets/bdd6BjHpPV1ja3de.js","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38a6895f4183df6f58096c879a21541c","sha1":"a47c2888744ebfe02b2577c41a613744f779b12f","sha256":"3129900cfa1ad04773d73c060d006b6edb6ea7be880733c3e2d0bf4d9e139585","sha512":"0d9727c8161a1bdc0c7d8b63e7d3e894b059e4c18b4b48f4abeb78900c462ba8c82ff1d9b145c6dd2d7e0880b754efdc18dd6c140f739eb2be5c5984ebc16264","ssdeep":"","tlshash":"eaf0c092f08ad5bc37354dd8820fa066735505f40614da5081ea4fe333ad293c59bbd5","size":537,"data":"","first_seen":"2026-04-28T15:51:52.613931Z","last_seen":"2026-05-27T01:39:27.414722Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/_assets/d0d3yBjzXJbu6a62.js","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e74970d59e2c09999c772f5a81aa4930","sha1":"9f4f29edff7b5b7d1a6095c70865828765c8ec7b","sha256":"e020ebe477bc0f2526bb211c1cdf6a6b3b2d1185aa337bbf516420eeccb540ff","sha512":"9d9ba5a509f62587a3657b4fa84b3e4d6dbc5378c3f7f66108628054f8948cca51cdf246edd0108474d14351d89d019112e781ff31d5638f86865c2aae2cc53b","ssdeep":"96:+cI310QUqP8+2pQU9aOsPCXKfP7MMav34xyZ+wQfL02YOZzVC/:+H2QUxHKwEzL02P0","tlshash":"90d173e9b095f064aab3247540bf145eb33f3959384dc4a4a325e8c9b8f81acd127f5e","size":6540,"data":"","first_seen":"2025-10-31T01:19:32.479585Z","last_seen":"2026-07-10T20:17:56.829007Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/_assets/a057DaWjUmek6bda.js","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"99f9414d4af40fef079a264701c84193","sha1":"0e15107d76e2e92143220c435394584d9448f754","sha256":"ef2a67a8bd57e7900a4ac8e6e5a09190c945771d854253a26945a6d60737e4ab","sha512":"f40cc4625fd7551aa6fd4bf8f74df6473dd0338c73448f0cfde47588409bdbc606bede360d0896a0ab96a460b3d85d3c1c4f0d3b69c178c43944a757f453abc8","ssdeep":"1536:UHKv2omlv0hZublXwIeoEdILTKLCJ6+W9aED7AvqMctTtN:Uq+XwIEdIJJ6eEvACD","tlshash":"c8d309e83996f6616ab712a710ef1807733c1a1b280c4950a611fdde75f801ab27bfdd","size":134426,"data":"","first_seen":"2026-04-28T15:51:52.636846Z","last_seen":"2026-05-27T01:39:27.412952Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"winner-casino-fr.com/_assets/winner-logo.DiiHdJik_37gdO.webp","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winner-casino-fr.com/","date":"2026-05-27T01:39:05.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winner-casino-fr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 10:56:00 GMT","end":"Sat, 22 Aug 2026 11:55:53 GMT"},"fingerprint":{"sha1":"D2:D0:F3:39:14:81:65:37:0A:DF:9D:91:3E:82:A4:AF:C7:52:49:78","sha256":"33:3F:01:C6:A6:4C:BE:4E:26:D9:A7:B9:EA:39:C4:02:85:9E:4E:E9:2B:2A:AC:37:82:0A:96:83:7D:4A:4D:0D"}}},"request":{"raw":"GET /_assets/winner-logo.DiiHdJik_37gdO.webp HTTP/1.1\r\nHost: winner-casino-fr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winner-casino-fr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 01:39:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7934\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"c30546813542f2d0fb6ccd4cbcd03e71\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gyuxHiTvIhEnXCBJSlhhRHB1Wmz%2BvQEObwphIbf2WYCgy2goCQD28PiEIKHMV2zn7Y3iGidVbaWu5gECh9UTNXYCt%2F1l2XTbxnOpLP8VeRgd389LRdLwYut%2BzcVegm2iSEFHlIgeCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a0214dc59e355684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7934,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c5aee37a621152e7cfcfe6c408714ad8","sha1":"3ba6f3efe3845831e495233e175cfe012bb36c02","sha256":"9e7011892205da100e521692caef799db6f39469da1cfb98fa8d5a14f0adcb77","sha512":"312717aa0007d9dbc7037c8cc4ccc8e6020efae41d23a753339cd0ea042341c27a292cd280fc02874932d9ee9f116c8da5c576ad878e945c5a6200ad9ad77bb4","ssdeep":"96:ACbMlXOOb6/eNRnDmU5xsextsFPe3kvhMcgb8MAPH3c/dtQ778f6tG/eJ45C9+Le:WlqU7zLwUkvhmwaVo78Ps45DWyKJajU","tlshash":"7bf1bfb295941b228c648eb1419415d47fbee0763af85e7582311dde00e8752b6df803","first_seen":"2026-04-28T15:51:52.612098Z","last_seen":"2026-05-27T01:39:27.403601Z","times_seen":6,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winner-casino-fr.com/","date":"2026-05-27T01:39:05.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://winner-casino-fr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 14:10:44 GMT\r\nexpires: Sat, 22 May 2027 14:10:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nage: 386901\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-07-24T07:51:37.785071Z","times_seen":382191,"resource_available":false,"data":null}},"time_used":561,"timings":{"blocked":188,"dns":3,"connect":60,"send":0,"wait":61,"receive":126,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/apple-touch-icon.png","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winner-casino-fr.com/","date":"2026-05-27T01:39:06.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winner-casino-fr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 10:56:00 GMT","end":"Sat, 22 Aug 2026 11:55:53 GMT"},"fingerprint":{"sha1":"D2:D0:F3:39:14:81:65:37:0A:DF:9D:91:3E:82:A4:AF:C7:52:49:78","sha256":"33:3F:01:C6:A6:4C:BE:4E:26:D9:A7:B9:EA:39:C4:02:85:9E:4E:E9:2B:2A:AC:37:82:0A:96:83:7D:4A:4D:0D"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: winner-casino-fr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winner-casino-fr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 01:39:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 5478\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"83b039a4ff61e38814d7d7ff66ec083f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IVS6NpAgL1%2FDaO2DDOIkMf4SNlilDpEEZ0penjnq%2BH6C0hkCV54%2Bed6q%2Fzd9Wxwkuh96rerUG%2BUiERVfpUQXPJb6iywm2TmOOQlBhR22i2T4CbxcS%2B6xet4tdIFXo1%2B%2F5Vk0qUAQHw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a0214dcb88a05684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5478,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"1cc9e874fce4de732e18df105d218510","sha1":"b325e8b110d90b7961d26be91ee98d072df6c7dc","sha256":"1ceef02a35256fb78bff00f50eb6b09f7c89b50fcc728d46e9e3985092f7d0be","sha512":"b8a3eda10ae6a737101ecd21157f5d8e8ad518219234f677976fa9b2131cbed9c0222f213bb2fcb0919fbbf07e1a92dfa03d8a64c9ca725383a390dbf269b152","ssdeep":"96:HiyOYE99cNZB0cGPc9hBs5cKBagQQtK+O3nndN4Y+t6R4LSgacHWzB30asx:HiFn99cNZB0cGUFIadQo+O3n/ItmLPz0","tlshash":"c8b1af53d73d190563e60cf2b35963b22b13127509ff2d651f55b53b6209668a466c20","first_seen":"2026-04-28T15:51:52.640446Z","last_seen":"2026-05-27T01:39:27.404806Z","times_seen":6,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/favicon.svg","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winner-casino-fr.com/","date":"2026-05-27T01:39:06.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winner-casino-fr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 10:56:00 GMT","end":"Sat, 22 Aug 2026 11:55:53 GMT"},"fingerprint":{"sha1":"D2:D0:F3:39:14:81:65:37:0A:DF:9D:91:3E:82:A4:AF:C7:52:49:78","sha256":"33:3F:01:C6:A6:4C:BE:4E:26:D9:A7:B9:EA:39:C4:02:85:9E:4E:E9:2B:2A:AC:37:82:0A:96:83:7D:4A:4D:0D"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: winner-casino-fr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winner-casino-fr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 01:39:06 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AO77dGQsZZ2BAahNHbiByjmVdYvTQ34z9qJsLPfhNSBYL7F9jGnRzKx8SaShOXHNzPbt0A376QgSztEcXQfaHdfOusL3F7NoQ3n6m%2B1XvoTTkFXwCSjCYvVspzPKzhFdZPZsKWyk%2Fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"311b0ad01d7f59af65f2b0ebd3a9baa6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\ncf-ray: a0214dcb88a25684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2843,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d4cd28f6fc34e4b8c87ababd8dae29a","sha1":"8bdd6b91ae3f612d6ec9d62bfd4a9913f2830e3c","sha256":"b02261f2a8527b431aeaa32c6daa0a0531d5a5786b9739236a36e312a498b98d","sha512":"63ac910ed4ddaa7ea6e6a7e60f35873e30be9aaca25ad6a16a1431503bc42d81364ad4ee85a7811f835d31f19b08c7e172e91698ff5c9255d5227e144bc2cb00","ssdeep":"","tlshash":"d25194df7b7860e8a8c74757df2428c93b0fe07daa3a0280c1bdd6a514d3ed1a626d50","first_seen":"2026-04-28T15:51:52.615725Z","last_seen":"2026-05-27T01:39:27.405318Z","times_seen":10,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/scripts/s","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://winner-casino-fr.com/","date":"2026-05-27T01:39:06.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winner-casino-fr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 10:56:00 GMT","end":"Sat, 22 Aug 2026 11:55:53 GMT"},"fingerprint":{"sha1":"D2:D0:F3:39:14:81:65:37:0A:DF:9D:91:3E:82:A4:AF:C7:52:49:78","sha256":"33:3F:01:C6:A6:4C:BE:4E:26:D9:A7:B9:EA:39:C4:02:85:9E:4E:E9:2B:2A:AC:37:82:0A:96:83:7D:4A:4D:0D"}}},"request":{"raw":"POST /scripts/s HTTP/1.1\r\nHost: winner-casino-fr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winner-casino-fr.com/\r\nContent-Type: application/json\r\nContent-Length: 272\r\nOrigin: https://winner-casino-fr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 01:39:06 GMT\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nserver: cloudflare\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, accept-encoding\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, DELETE, POST, PUT\r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nx-dns-prefetch-control: on\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2BWnIsSWkILiPZgpSoCC%2FWKY62f1mkIwqL0%2BZA%2FFOCBuTmokOt7GRs%2Fvk%2FkHkLQXDCjOOrYRjHpTUVS0yXTCE5TbyLs0OJYjVhPC60uDjNKS6eH3GCDLP9W2rL6MAhS2lia7H516hw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a0214dcb98a85684-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":419,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7620d289b800ea5718596721a31ef1db","sha1":"b166f4e5978772464aa76fc675212eacc6ee16dd","sha256":"1a26299a55f7f541c40c432a1b2aa5f7d0641b29da810be273295a2f93d087b0","sha512":"ab3a3fe92baf471fea3299465f0f7b3430e2e28aa54e5bf9bb7e642022988372e854804a4d74cea31ba899229965e21bf025242a7eb651ed1f387cf23322a583","ssdeep":"","tlshash":"28e0f14581deaf2970bcbe41ae6946ad010cf3707d69807950d93554df2bd93448dd4d","first_seen":"2026-05-27T01:39:27.406017Z","last_seen":"2026-05-27T01:39:27.406017Z","times_seen":1,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T01:39:04.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winner-casino-fr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 10:56:00 GMT","end":"Sat, 22 Aug 2026 11:55:53 GMT"},"fingerprint":{"sha1":"D2:D0:F3:39:14:81:65:37:0A:DF:9D:91:3E:82:A4:AF:C7:52:49:78","sha256":"33:3F:01:C6:A6:4C:BE:4E:26:D9:A7:B9:EA:39:C4:02:85:9E:4E:E9:2B:2A:AC:37:82:0A:96:83:7D:4A:4D:0D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: winner-casino-fr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 01:39:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YFgYK82P6B%2BZe1GeOBogF6nEdYh%2FvRG2n7%2FqrhNpp8xvXyVUtoe3fNDM%2BAjbnFqSLI%2FEc28zvrpf6cmwOyk2w7Z7gJrp2RYV4PeOSYACNwZKyzFSNtYODAQUCOgmSREYDj9%2F6ZslzQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: a0214dc38c171525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30274,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (29819), with no line terminators","md5":"bfa5d43ab9c13f7d1317a84fa59f965e","sha1":"3570be2a95dea3c87c47eae09dbc3d13f5eaaf05","sha256":"584fcc8fdfdb85239adf23a1f3f724648bb5330550adc6a8a94561d7eee283ad","sha512":"207c06641ec8d8b839028c94ed5beb90f2d26c84d5f8d82dd56b3ef2740d6ec81ed4b3cf96c0c9f3aa2207d0e6a8226f922fd17e7d05320dcbd0c4d2aa9a74b0","ssdeep":"768:BaQAc+C6IjUaphdOjNi3UCvmXZSBwxUbwwpLo1328f2Ed4ciWj2V:By3o1vGACGbDo13bw","tlshash":"0ad22b3b92c4293a03c326e1f611be53d939582991b5e570ecbc9cd162a48e541fd3fe","first_seen":"2026-04-28T15:51:52.591464Z","last_seen":"2026-05-27T01:39:27.407411Z","times_seen":6,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":130,"dns":49,"connect":33,"send":0,"wait":38,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/_assets/b9f5B93mpnSnc8ba.css","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winner-casino-fr.com/","date":"2026-05-27T01:39:05.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winner-casino-fr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 10:56:00 GMT","end":"Sat, 22 Aug 2026 11:55:53 GMT"},"fingerprint":{"sha1":"D2:D0:F3:39:14:81:65:37:0A:DF:9D:91:3E:82:A4:AF:C7:52:49:78","sha256":"33:3F:01:C6:A6:4C:BE:4E:26:D9:A7:B9:EA:39:C4:02:85:9E:4E:E9:2B:2A:AC:37:82:0A:96:83:7D:4A:4D:0D"}}},"request":{"raw":"GET /_assets/b9f5B93mpnSnc8ba.css HTTP/1.1\r\nHost: winner-casino-fr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winner-casino-fr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 01:39:05 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CtQCUxYI7e10J4Qbv576lmJ8NvEq4X5cAQT4hasVSix%2FMYNLqvcROXiUywWYcBlJ%2BBA9GUDMmMpYvV0gqfqU3dpX8zs0yJbxUtNBkLWytE%2FWYrhP3nNmp2NUDCMsndKvWDsFTswvqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"70ffadfa7443dc553af40748c8126eb5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: a0214dc59e315684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4376,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4375)","md5":"b5b45e9b7a0aa2b96277d6354f6f7148","sha1":"3b9a2a92c7cd5ae8f87e7d1b5ad7a207d45dce1c","sha256":"72252da98ada2f2762ef48a6a992dcfc80976d7038c63cefc591e22a8e783229","sha512":"1e857582e57b99d287af154f5f3744c43c652263e73f2ad1b47a32bb726c82156cb8911890d7922fa4ef1a764caa2b53aa802a1ec72261e6ed5bf5168a4258a6","ssdeep":"48:DYDjwFYxzD+XhIb+TSfCMYtKBikA8xCpQLYOUWxsyUqZSUvNaIMe51Lrx4jdVPMO:c+Y5ltqHtr6oFOXxsb+Yrp","tlshash":"6291e1136653e12d7cbdf532bc50374e102d533e82d7aea6e9a5ae6e88c51e3171420a","first_seen":"2026-04-28T15:51:52.5925Z","last_seen":"2026-05-27T01:39:27.408668Z","times_seen":6,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/scripts/bundle.js","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winner-casino-fr.com/","date":"2026-05-27T01:39:05.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winner-casino-fr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 10:56:00 GMT","end":"Sat, 22 Aug 2026 11:55:53 GMT"},"fingerprint":{"sha1":"D2:D0:F3:39:14:81:65:37:0A:DF:9D:91:3E:82:A4:AF:C7:52:49:78","sha256":"33:3F:01:C6:A6:4C:BE:4E:26:D9:A7:B9:EA:39:C4:02:85:9E:4E:E9:2B:2A:AC:37:82:0A:96:83:7D:4A:4D:0D"}}},"request":{"raw":"GET /scripts/bundle.js HTTP/1.1\r\nHost: winner-casino-fr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winner-casino-fr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 01:39:05 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\netag: W/\"a80-19da6411f78\"\r\nlast-modified: Sun, 19 Apr 2026 14:59:39 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nx-dns-prefetch-control: on\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xC5H9d58uf6MUjISLZEZoWp9CxLHHvIsFTUhvMftFFsdpQIa8%2FonxYO7YZtR%2B9A2An4IJDd2pXdLj5xD0MwzqRu4AwU%2BTr8hW2J7Wg%2FF98YPskCw3jAkXfavBcX9PMuFJYJYcwrlTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 24830\r\ncf-ray: a0214dc59e345684-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2681,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2680)","md5":"9164ab72b28d0336c2ec1e40e4250315","sha1":"887e4fceca3197eedf4831a0778ae92e0b446192","sha256":"e8bcd2ff44019bb41750444d8b111323bda29c05cb5805d9769073d08d1e674b","sha512":"628ca0512ebfe6ac886fd65475cc7d2f4142e0480de15b40b7cf08ef9f612bf2e59dad07eb28f3bd6cb32ba8651e89996922266e3be73dfb049668950a6cc263","ssdeep":"","tlshash":"f951d7f53185f1f07f692890d17aa620b9392e73b81e4890a2fb4c462b2e40ea431d2c","first_seen":"2026-02-12T18:50:51.542313Z","last_seen":"2026-07-20T15:44:13.006338Z","times_seen":40,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winner-casino-fr.com/","date":"2026-05-27T01:39:05.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://winner-casino-fr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 14:10:45 GMT\r\nexpires: Sat, 22 May 2027 14:10:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nage: 386901\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-07-24T07:30:24.187543Z","times_seen":286747,"resource_available":true,"data":null}},"time_used":541,"timings":{"blocked":208,"dns":2,"connect":47,"send":0,"wait":121,"receive":6,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/_assets/d0d3yBjzXJbu6a62.js","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winner-casino-fr.com/","date":"2026-05-27T01:39:05.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winner-casino-fr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 10:56:00 GMT","end":"Sat, 22 Aug 2026 11:55:53 GMT"},"fingerprint":{"sha1":"D2:D0:F3:39:14:81:65:37:0A:DF:9D:91:3E:82:A4:AF:C7:52:49:78","sha256":"33:3F:01:C6:A6:4C:BE:4E:26:D9:A7:B9:EA:39:C4:02:85:9E:4E:E9:2B:2A:AC:37:82:0A:96:83:7D:4A:4D:0D"}}},"request":{"raw":"GET /_assets/d0d3yBjzXJbu6a62.js HTTP/1.1\r\nHost: winner-casino-fr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winner-casino-fr.com/_assets/bdd6BjHpPV1ja3de.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 01:39:05 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HUgUBSzS%2Byy1rdRt006lrGUC3o9BslQeavI2ZFe%2BJHjcjxzgFbwCWZ3cr3eEiyrlFtaqR2wn3OesGANYg%2Bx%2FyLAZE%2FWVOI6CpkVjN26lhphzuBE7xHDe0zBp%2FajnmONTBUfeEqA%2B2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1dd71dad6258aeb399961b5bb86aaa6c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: a0214dca08055684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6540,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6540), with no line terminators","md5":"e74970d59e2c09999c772f5a81aa4930","sha1":"9f4f29edff7b5b7d1a6095c70865828765c8ec7b","sha256":"e020ebe477bc0f2526bb211c1cdf6a6b3b2d1185aa337bbf516420eeccb540ff","sha512":"9d9ba5a509f62587a3657b4fa84b3e4d6dbc5378c3f7f66108628054f8948cca51cdf246edd0108474d14351d89d019112e781ff31d5638f86865c2aae2cc53b","ssdeep":"96:+cI310QUqP8+2pQU9aOsPCXKfP7MMav34xyZ+wQfL02YOZzVC/:+H2QUxHKwEzL02P0","tlshash":"90d173e9b095f064aab3247540bf145eb33f3959384dc4a4a325e8c9b8f81acd127f5e","first_seen":"2025-10-31T01:19:32.479585Z","last_seen":"2026-07-10T20:17:56.829007Z","times_seen":223,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winner-casino-fr.com/","date":"2026-05-27T01:39:05.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winner-casino-fr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 27 May 2026 01:39:05 GMT\r\ndate: Wed, 27 May 2026 01:39:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4792,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4313e6367844adc0cdb4d6ccb86b26fa","sha1":"20335f134c7817c1e9d01f8c57fa2a36669af65e","sha256":"d6a90916411b5b4b696edaefd46fd4503e5bc622c14e490a09cf0de39696d418","sha512":"23a3392e96d2bb29dd720e4e65ea2e398651f8e7626361425e932732f1efa52dc14dbcbe5751ed7137e69916480f3fd2be5ebf4ef39a43c6c6200c9e777c7779","ssdeep":"96:SOEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMacOxMaUJc+ukOxMarN3OpQ:lgKQcXr3lVwa3RzJZ","tlshash":"f7a19bd1087be114ab831cc123ce7d36ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-17T01:34:36.284919Z","last_seen":"2026-07-24T06:09:08.399766Z","times_seen":8244,"resource_available":false,"data":null}},"time_used":955,"timings":{"blocked":443,"dns":1,"connect":44,"send":0,"wait":59,"receive":0,"ssl":404},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/_assets/winner-logo.DiiHdJik_Zs8c0R.webp","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://winner-casino-fr.com/","date":"2026-05-27T01:39:05.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winner-casino-fr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 10:56:00 GMT","end":"Sat, 22 Aug 2026 11:55:53 GMT"},"fingerprint":{"sha1":"D2:D0:F3:39:14:81:65:37:0A:DF:9D:91:3E:82:A4:AF:C7:52:49:78","sha256":"33:3F:01:C6:A6:4C:BE:4E:26:D9:A7:B9:EA:39:C4:02:85:9E:4E:E9:2B:2A:AC:37:82:0A:96:83:7D:4A:4D:0D"}}},"request":{"raw":"GET /_assets/winner-logo.DiiHdJik_Zs8c0R.webp HTTP/1.1\r\nHost: winner-casino-fr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winner-casino-fr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 01:39:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15564\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"b64ad64d7d0d48d876f3883a96881802\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fz1Bbu7VieJzaX9wTCnybcUtBOxq2oV5Bjj3CwRC85ccMLTwbQU%2BbJ5o%2BHxAcl1vRMLQsEqyPmp0XUxoRmJ7jRrbFMWYZh7N%2Bu4KZid2v9XBpCmJbMQYVDtcmkcxaN%2BKy2ATAF%2B1DQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\ncf-ray: a0214dc59e375684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15564,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c29a772958473bfd1c7bc1e0f46eef76","sha1":"f774a20a4ac61e283c9ffc8d857a9c88b98ead41","sha256":"04696de92e5f6ef801d3dec4585349122166d11c0c03b02e220b999288cff7d4","sha512":"b47bf5ea3524f1d391f7c5fdf4bef23aa3c0c72f17969fa81a257d70d6442f08e2585b83eaa8ea40acb737496910ad47189d109b01c6af15526d634653bba264","ssdeep":"384:8H9rXWu6XoV94orv1Bvy4ChOKBh3MYRX+dp8YgLLt:8H9rXHeoV9BrDK4UL3MYRXDYkLt","tlshash":"c062c0cf9fae6db7878f3dfbb21274fa179b234a42111a1b86834864431cd81a48cc95","first_seen":"2026-04-28T15:51:52.613038Z","last_seen":"2026-05-27T01:39:27.411661Z","times_seen":6,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://winner-casino-fr.com/","date":"2026-05-27T01:39:05.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://winner-casino-fr.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 14:18:26 GMT\r\nexpires: Sat, 22 May 2027 14:18:26 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nage: 386439\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-07-24T07:51:37.81218Z","times_seen":281729,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":183,"dns":0,"connect":0,"send":0,"wait":187,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/_assets/a057DaWjUmek6bda.js","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winner-casino-fr.com/","date":"2026-05-27T01:39:05.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winner-casino-fr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 10:56:00 GMT","end":"Sat, 22 Aug 2026 11:55:53 GMT"},"fingerprint":{"sha1":"D2:D0:F3:39:14:81:65:37:0A:DF:9D:91:3E:82:A4:AF:C7:52:49:78","sha256":"33:3F:01:C6:A6:4C:BE:4E:26:D9:A7:B9:EA:39:C4:02:85:9E:4E:E9:2B:2A:AC:37:82:0A:96:83:7D:4A:4D:0D"}}},"request":{"raw":"GET /_assets/a057DaWjUmek6bda.js HTTP/1.1\r\nHost: winner-casino-fr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winner-casino-fr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 01:39:05 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=noG12QQj5q8Q%2BKHvP61R%2FSertSIYodP3O%2BSQBYtEOMS9VUgd8L5vBEmJubu30%2BbHklISNbOSRJj1JcTylS5YrPNFt4QkRk%2FN5gh0XzylVrZ%2FMf%2FsItvFARnsNaxkQ%2FTzKFMN2oLj8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"aeaf9acbc91024a47a31ef3ce28cb3ea\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: a0214dc99fd25684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134426,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"99f9414d4af40fef079a264701c84193","sha1":"0e15107d76e2e92143220c435394584d9448f754","sha256":"ef2a67a8bd57e7900a4ac8e6e5a09190c945771d854253a26945a6d60737e4ab","sha512":"f40cc4625fd7551aa6fd4bf8f74df6473dd0338c73448f0cfde47588409bdbc606bede360d0896a0ab96a460b3d85d3c1c4f0d3b69c178c43944a757f453abc8","ssdeep":"1536:UHKv2omlv0hZublXwIeoEdILTKLCJ6+W9aED7AvqMctTtN:Uq+XwIEdIJJ6eEvACD","tlshash":"c8d309e83996f6616ab712a710ef1807733c1a1b280c4950a611fdde75f801ab27bfdd","first_seen":"2026-04-28T15:51:52.636846Z","last_seen":"2026-05-27T01:39:27.412952Z","times_seen":6,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/_assets/c624CiUtgIc2b1df.js","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winner-casino-fr.com/","date":"2026-05-27T01:39:05.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winner-casino-fr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 10:56:00 GMT","end":"Sat, 22 Aug 2026 11:55:53 GMT"},"fingerprint":{"sha1":"D2:D0:F3:39:14:81:65:37:0A:DF:9D:91:3E:82:A4:AF:C7:52:49:78","sha256":"33:3F:01:C6:A6:4C:BE:4E:26:D9:A7:B9:EA:39:C4:02:85:9E:4E:E9:2B:2A:AC:37:82:0A:96:83:7D:4A:4D:0D"}}},"request":{"raw":"GET /_assets/c624CiUtgIc2b1df.js HTTP/1.1\r\nHost: winner-casino-fr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winner-casino-fr.com/_assets/bdd6BjHpPV1ja3de.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 01:39:05 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z9x7ZCSnUoxnn10vsbe9QOWJEqD0Bv60S5GJOQ3A7iHsBCY%2BZUt9V1leId2REvnNlT0GRy0riW1dPsc2TttsQNhvylnv%2FghWq%2FWBj2mmlGvD5FjdCtigVC2yB%2Bhq4Y6DlumzG1BnJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"10096bc6d21a44a09ad41f53513da1dc\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: a0214dca08045684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"9e59c0f38d9cce9e6d75b2d48af201bd","sha1":"44e45f987a7bf931d114a8593476208f0010d14e","sha256":"7603593d0d9d3740cca6365d8d6012ba8f0a57c7cfbf58675af093106ff516a5","sha512":"31f111a89f89ecfdf0e432acfe9979abc02748cdc5ad3835d06107bd037525daf2340ebc64c906918b53b01a409220eb2ddc15424520642c6b47c9c167f6401e","ssdeep":"","tlshash":"cdb092d1064a2afa53e94504633fc812694c42abb9e46a1a840caec5b5f8a40809ea2e","first_seen":"2026-04-28T15:51:52.614791Z","last_seen":"2026-05-27T01:39:27.413941Z","times_seen":6,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/_assets/bdd6BjHpPV1ja3de.js","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winner-casino-fr.com/","date":"2026-05-27T01:39:05.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winner-casino-fr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 10:56:00 GMT","end":"Sat, 22 Aug 2026 11:55:53 GMT"},"fingerprint":{"sha1":"D2:D0:F3:39:14:81:65:37:0A:DF:9D:91:3E:82:A4:AF:C7:52:49:78","sha256":"33:3F:01:C6:A6:4C:BE:4E:26:D9:A7:B9:EA:39:C4:02:85:9E:4E:E9:2B:2A:AC:37:82:0A:96:83:7D:4A:4D:0D"}}},"request":{"raw":"GET /_assets/bdd6BjHpPV1ja3de.js HTTP/1.1\r\nHost: winner-casino-fr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winner-casino-fr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 01:39:05 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vYNmD4CTFTNGWmY3K22JA2Im%2BxXY8IBNQq4h34dKM%2BbBKrRgbcW2sd1%2B6MLnb82qzRof1B%2FkScP6EBYqozuhs6EwvC3P4BgCSWAxwtxfJoA%2F8mjmJep2RVlZNBxMzD5KA6Y15BNG9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2c2f8c866fbe5d125857fdc032e3dbd4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: a0214dc99fd15684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":537,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (537), with no line terminators","md5":"38a6895f4183df6f58096c879a21541c","sha1":"a47c2888744ebfe02b2577c41a613744f779b12f","sha256":"3129900cfa1ad04773d73c060d006b6edb6ea7be880733c3e2d0bf4d9e139585","sha512":"0d9727c8161a1bdc0c7d8b63e7d3e894b059e4c18b4b48f4abeb78900c462ba8c82ff1d9b145c6dd2d7e0880b754efdc18dd6c140f739eb2be5c5984ebc16264","ssdeep":"","tlshash":"eaf0c092f08ad5bc37354dd8820fa066735505f40614da5081ea4fe333ad293c59bbd5","first_seen":"2026-04-28T15:51:52.613931Z","last_seen":"2026-05-27T01:39:27.414722Z","times_seen":6,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/_assets/b9f5B-LDxNCSc8ba.css","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://winner-casino-fr.com/","date":"2026-05-27T01:39:05.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winner-casino-fr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 10:56:00 GMT","end":"Sat, 22 Aug 2026 11:55:53 GMT"},"fingerprint":{"sha1":"D2:D0:F3:39:14:81:65:37:0A:DF:9D:91:3E:82:A4:AF:C7:52:49:78","sha256":"33:3F:01:C6:A6:4C:BE:4E:26:D9:A7:B9:EA:39:C4:02:85:9E:4E:E9:2B:2A:AC:37:82:0A:96:83:7D:4A:4D:0D"}}},"request":{"raw":"GET /_assets/b9f5B-LDxNCSc8ba.css HTTP/1.1\r\nHost: winner-casino-fr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winner-casino-fr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 01:39:05 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9I2kswsZRbwIY%2BgzJwS3n%2BqdN074IpCVBqgmdx9gdxbWzn7W5DWM47NIuGDe7W4gNo31hKme8GrFlUzf8zShNJ8ZcL4Wsc2o6z1XFmBP2PBfWooxbjlsKSoaqgAnmKo5PnoMMrp0VA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"756645e0620691c22c4af36fa801d5e2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=2,i=?0\r\ncf-ray: a0214dc59e335684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13677,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (13676)","md5":"4a79a8a6398fb9262644151febb7f209","sha1":"93a795ce70987931cdebc58be311cf1721528c6f","sha256":"44f03aa3013e3c8446e76e7952071539410b9f5e0aab13a25eb778e528dc0f68","sha512":"f9b736ef59b993141123b2e08e300228a0c81187c8141863ff8b8b7a2c884b3c0e060d045786ea9067680c20a666ae39cfdde6da94f934388232515f182433e0","ssdeep":"192:NiZzZ1zBpCqA2TRn6bCS4d3CTrmTH4msw:iR7tn64p8c4msw","tlshash":"745265a21745213c6c379a50eed6279d115fe304c69663d8cf33afb789cb14a0a7368b","first_seen":"2026-04-28T15:51:52.616565Z","last_seen":"2026-05-27T01:39:27.415858Z","times_seen":6,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/_assets/winner-2.U7Q9qgw4_2cHA7a.webp","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://winner-casino-fr.com/","date":"2026-05-27T01:39:05.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winner-casino-fr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 10:56:00 GMT","end":"Sat, 22 Aug 2026 11:55:53 GMT"},"fingerprint":{"sha1":"D2:D0:F3:39:14:81:65:37:0A:DF:9D:91:3E:82:A4:AF:C7:52:49:78","sha256":"33:3F:01:C6:A6:4C:BE:4E:26:D9:A7:B9:EA:39:C4:02:85:9E:4E:E9:2B:2A:AC:37:82:0A:96:83:7D:4A:4D:0D"}}},"request":{"raw":"GET /_assets/winner-2.U7Q9qgw4_2cHA7a.webp HTTP/1.1\r\nHost: winner-casino-fr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winner-casino-fr.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 01:39:05 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18820\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"37279105a3b170fa38ae227ad50d0a8a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cWnrXaOw2qAAgrpNU%2F9jigQxKEHnWv2pVmXf%2F683Y%2FSVEKxhQhukzDHcJa7LeeN2hDcnlKRd0dDAyjzSg%2F0LLbK6rkhqn4r11So7aDHIgYYp%2BuvMaJzEHlaEPzha%2BUiHK6fX%2B6aAOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\ncf-ray: a0214dc59e365684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18820,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1366x427, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dc2cd1037429b5bd1e4ed61334990d34","sha1":"ad8b63e82e23e77a90fdce3462b8b06c71c76614","sha256":"707a49a7b62d6b29ec7771a79c4d083f72ca66558e6232b6b4c4e76237d9164e","sha512":"67b24d3329ff162cd884ced57575fa0e932ed54c441c043e0d95a8f79d6450d39a25c1874cf07d4188bbfba2bb2fb9acc3177f62247c9555eaf547ce881c0b02","ssdeep":"384:VOlgwZ5Q/YyBCSbv8ifyAPKFW7BHr817I803ilB9NfpZeVPv7R:weYyBHbv8i6AyFWr817EQB9aR","tlshash":"0d82e0b47e5d1fb9ac9f61d6ef484597eb23c89a6e4de00485aa8c3ddba23131706310","first_seen":"2026-04-28T15:51:52.619276Z","last_seen":"2026-05-27T01:39:27.416476Z","times_seen":6,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/_assets/b0b7eULJzKj71952.js","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winner-casino-fr.com/","date":"2026-05-27T01:39:05.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winner-casino-fr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 10:56:00 GMT","end":"Sat, 22 Aug 2026 11:55:53 GMT"},"fingerprint":{"sha1":"D2:D0:F3:39:14:81:65:37:0A:DF:9D:91:3E:82:A4:AF:C7:52:49:78","sha256":"33:3F:01:C6:A6:4C:BE:4E:26:D9:A7:B9:EA:39:C4:02:85:9E:4E:E9:2B:2A:AC:37:82:0A:96:83:7D:4A:4D:0D"}}},"request":{"raw":"GET /_assets/b0b7eULJzKj71952.js HTTP/1.1\r\nHost: winner-casino-fr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winner-casino-fr.com/_assets/bdd6BjHpPV1ja3de.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 01:39:05 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HrBxepfVB42HNcUVLLbt5K8ydV5%2Baseuvex0a7w3A7lKOb6gbjDwVWUBefua%2BeB7ieqzXQlG8M89xVs9aS0zXeGbGFHXwT25s%2BPm7HTl0xCKT8DnJIg95A0G6G6%2BaVRPaAC9HNfFmA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"310f9e522880ab27e2450b4cf9f9a300\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: a0214dca08025684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":745,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (745), with no line terminators","md5":"9df3f33b870097e64e09537e97523f61","sha1":"8e52d9265c48c9635847d515248f948ac56832ff","sha256":"0d6ae547ff781a31dc046f42fb8d6e5afab450a57563c14919055275e3751bab","sha512":"cd63d6583b72920461d0bc23fda6bc4e41b52830c1b9c179581782a2a17d9671ead4d6bf61fb97ace540b6085beddc09ea5abd6cc4f9dd7ce8952be2b9a18a30","ssdeep":"","tlshash":"480120d05886a03677b38c62c46be443a23e319c6adc8bd0f386d1e1246a1e08113a53","first_seen":"2026-04-28T15:51:52.639541Z","last_seen":"2026-05-27T01:39:27.417068Z","times_seen":6,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"winner-casino-fr.com/_assets/d0d3Ddt1Kc506a62.js","fqdn":"winner-casino-fr.com","domain":"winner-casino-fr.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://winner-casino-fr.com/","date":"2026-05-27T01:39:05.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winner-casino-fr.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 May 2026 10:56:00 GMT","end":"Sat, 22 Aug 2026 11:55:53 GMT"},"fingerprint":{"sha1":"D2:D0:F3:39:14:81:65:37:0A:DF:9D:91:3E:82:A4:AF:C7:52:49:78","sha256":"33:3F:01:C6:A6:4C:BE:4E:26:D9:A7:B9:EA:39:C4:02:85:9E:4E:E9:2B:2A:AC:37:82:0A:96:83:7D:4A:4D:0D"}}},"request":{"raw":"GET /_assets/d0d3Ddt1Kc506a62.js HTTP/1.1\r\nHost: winner-casino-fr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://winner-casino-fr.com/_assets/bdd6BjHpPV1ja3de.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 27 May 2026 01:39:05 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WargdeDycSxZjwvXOmWjDIyum%2FQzD4k%2BUBIwYusgx0fHAOnhvi2ZSmbTstVUJiBfvMH%2FCAuSV4%2B%2BUyGsQ4iJIw2ZhA9Cjnt56TmHiyEvSn9U%2FGmyVvHuFZEy8laOmsWtoHaeaS6wgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"56260f24da2539afff7ad8be8f96fb9b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\ncf-ray: a0214dca08035684-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"2bedab8db65852ba5982a0e40c029715","sha1":"6c907983ac8ff0bb2a0cab34e8020ea39e32fc2c","sha256":"b61a7e1c7d03066bec4defe74695cc308c1c6fdb4117c6b57e6fa7ce086e4fbc","sha512":"a4dc280e56cbcfe2a0b7d3bae19ea04ae397de57219e348245048d265e0889fab95b839aeeb36e17a129e1452e28c14658a1fc0a2b1379f12cce22164e110b2c","ssdeep":"","tlshash":"daa0025bcc4500aca7189ec91206f68747a5395c0798c7910045a35795104c1848f947","first_seen":"2026-04-28T15:51:52.594801Z","last_seen":"2026-05-27T01:39:27.417548Z","times_seen":6,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"winner-casino-fr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}