{"report_id":"e50fab3c-8bd8-4683-b2a0-6ba650c3bd64","version":6,"status":"done","tags":[],"date":"2026-04-28T16:30:44Z","url":{"schema":"http","addr":"tropeziapalace-casino1.com","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"172.67.157.94","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"title":"Tropezia Palace Casino, Bonus sans dépôt de 100% et 100€","dom":{"size":73106,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (54541)","md5":"2518d4f5d31fce29a227049cb987d50c","sha1":"1db210f7bb34c1c1a7d9af0b5fcac4bc1a8a21d2","sha256":"d4b472c4f42a275a93fddbf37bb2bd6de323840e27399cbdf7f1c90d4882278d","sha512":"ac1451d2ed4ae15c4bfc65acfb20ddeaee3c3fb419744f03469cd0232a17dce2b69b9694423c1440d87cb7b8c3470bfe4da06fb6ed5ffedef04e7f7e28626fe2","ssdeep":"1536:bXJB0KFYDCfKqpiI3EnIjtMmkNdnes4j6NRYoymEux8lGUT8JH8:bXJ2jY9sg","tlshash":"5c63f8a48688ad7b139740d37513ab4ed78d6006e25a5ef4bedc4ae4f7cb42707b02b1","dom_hash":"domhash136b6aa9a2661fe35c9e55320ab4c42a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tropeziapalace-casino1.com","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"172.67.157.94","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-02T16:30:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"tropeziapalace-casino1.com","ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-04","domain_rank":0,"first_seen":"2026-04-28T16:30:46.723278Z","last_seen":"2026-04-28T16:30:46.723278Z","alert_count":41,"request_count":41,"received_data":1238957,"sent_data":20161,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/927.a7dc7992c436ba78.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"169204fe2bcc42c380af5e1ac2be7fe3","sha1":"8a03ce5223655c895c434033b81080a819fd917b","sha256":"e77204d4fe82687b08d2c78d02e066935c1b0c697a95682b12decbf3776b528a","sha512":"d47937c3eca1582d992d537eaccc779735e73d5450fdacdb27f801abff617ee8dd60a5fbdbde063b15a402746facd53cf439b115e864099f1c7537b218b3aed3","ssdeep":"","tlshash":"905131059986fdf9f9ba0cc9925fd53e762eb40f990c8da8fa7488414c098843603be6","size":2571,"data":"","first_seen":"2026-01-03T15:12:30.935058Z","last_seen":"2026-06-02T03:03:58.989391Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","size":141013,"data":"","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-06-02T03:03:59.000906Z","times_seen":287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","size":98298,"data":"","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-06-02T03:03:59.004649Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","size":8192,"data":"","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-06-02T03:03:59.001644Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/pages/_app-990136d9d9932659.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d8de86d0ebd9c661e8d7a7d9f6930e4","sha1":"6e8820dbb557dee74353b2e0ced472ff12698083","sha256":"d50eb0a529f70cc1b5a2cfad0f75ba5bb51cc6d7a51e6192be8e3b44d9d490d4","sha512":"75556fd7af08cb5fd13303c868aefbfba50cb5cd94b90b152442fe07e8260c1a125c2e61c763abd944adbb973a6b062d372fb987f995733762477ccbf230ea77","ssdeep":"3072:ii1PkPUKsWkGa4HtlYw0kn5DU+djxlozNm8ad6/QQX+uhuxOEowsB489M4cJkcxN:iiCcKsRGH3dCadhQ7wmNJiRs1+HZ","tlshash":"55a4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","size":487976,"data":"","first_seen":"2026-04-28T16:30:51.443455Z","last_seen":"2026-04-28T16:40:37.651687Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","size":2376,"data":"","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-06-02T03:03:58.995982Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","size":828,"data":"","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-06-02T03:03:59.017415Z","times_seen":251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/i5dK82hpfidkEOetlThun/_buildManifest.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c028a41e561ad15098a0fd6f8fb47e83","sha1":"70483ff83288d80a9c665b72bfe100040ea1c094","sha256":"b1b1bf7396934f970dac9e70613d24ca80b3fc579b30de25036c5c5d2f4f5551","sha512":"ce9fa7f699c884c1ccf0f1a8acea76cd2e30579b5d536703c7ce8d067b7528d58fd1ba721a662bb917062922938281918b9a9501693de2e1ffa5bde2fda811c7","ssdeep":"","tlshash":"0011bd82010ae61a2ce8ed47373f13a3af528036663c0ab68fcc1d6c55904675f3a862","size":1014,"data":"","first_seen":"2026-04-28T16:30:51.485604Z","last_seen":"2026-04-28T16:40:37.655527Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/i5dK82hpfidkEOetlThun/_ssgManifest.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-06-07T02:16:15.173503Z","times_seen":232219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","size":98327,"data":"","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-06-02T03:03:58.991334Z","times_seen":271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/59-523bb81ef69f96cb.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6984d40400f0095dee745926190c2edc","sha1":"1d0530bc3b5e74e749b38e788b2aba8c8550c540","sha256":"64c1545405f3195713f83c30914065e10649b0ea650ae3129356d11d5693ae08","sha512":"0cafdae2c3fc0d43ec9f9a68ffdd75e7bacdbeeb2b15c8b3289ba1699989bd2a1b171e24fd14384ba2df9179a3bf9af041ce9090df0e16eecd81023563881e2f","ssdeep":"192:OzBOuoWwKyWpzqXD5yU3W1NEXNZ3k/EP49uxCmAl79uLhmfpcGXOAPYPKF9:OzBOpNJP49wu7sqpcQOgB","tlshash":"d362c56e45424cae9abd94e4c4271108d7ec6606f154bcb0e7a68423b0dbedc62f27cf","size":14926,"data":"","first_seen":"2026-04-28T16:30:51.470827Z","last_seen":"2026-04-28T16:40:37.707665Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/4.ba59667ae674f179.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cdd6ad3f4ca408ef5aa4cb828afd42a","sha1":"0e92ec6a36373187146cb50cc3178cbf2b9f5f26","sha256":"49c6655fc02e5ca41d8fda583b637a642687dbd2db162f72600533260fc8e7f1","sha512":"49c4afc202c88c6349c16aee9d5f3ffc18a20a46bf913ee61f6eea7873b1aaffc8c4eec7b053f6df4816c938521a5391f228e4702e6cabc99586cc7d54dd8627","ssdeep":"96:pYin10pfahAC7V+QB6wghii/OS4XcJMDDxCX09aZT1T09aZUwd7+djSvQQV1Oeys:ppifCplh/XFwl+djSvQQV15JsIl","tlshash":"eef19549e087bfb5be7f5842662f850d732e250cce174cb5ea78a8028290cd8b5d67cd","size":7557,"data":"","first_seen":"2026-04-28T16:30:51.473951Z","last_seen":"2026-04-28T16:40:37.705342Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/webpack-a6cccd69e31e329e.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"983f03427a0cc74a40d95f6f0fd9161d","sha1":"daa55847490d26bb3f0e7e891f055d38ddded69c","sha256":"31b641eea0316b4d7c7fb9f71b5462427de54b425e735c15240755af0758cfd3","sha512":"7d73e5e0ba6a523ce8e2cb013c63c5bbb7fd09df7bd131e9e7ab7a4e2c9885a5f30a1384b43b0084881442e4048603970e2934a46502bb8e1cbb1285736f0c59","ssdeep":"96:6IAgDpEzqynRR3EKjmvFqMug1kkNxNF9VTlVHO/jeE2UjKBOK6nRVG/OGfIfRY8q:64Gzxnj3EMOFLBkQNF9Xe7jKl6nRVG/n","tlshash":"37c1c79e72a4f4b61743a5a0493f9056f13e247b781ed0a0d70ac9b4bc349688533fa5","size":5968,"data":"","first_seen":"2026-04-28T16:30:51.480411Z","last_seen":"2026-04-28T16:40:37.685429Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/media/c1b11e140b58cf5a-s.p.woff2","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/media/c1b11e140b58cf5a-s.p.woff2 HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tropeziapalace-casino1.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15108\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"3b04-19cba34181d\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FgrkwRh3XfIHcywRFw1NsggxPX9FzuPKDVesAtJLx%2Fr4Ln4Sjh3n53aziDUiOu49v12imySwm%2BYhhY7C4KgTnNbo7UvX3qgBtQdAr%2BQ0q95xA2INITk9RilhrUZg6nVaxtNbYrVMIwrf4qy%2B6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f37737f7ff91ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":15108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15108, version 1.0","md5":"368f3e99ee207a4a2e2584eba7d3c82f","sha1":"9f907e41605807c4bf4f960745698b1e430a716b","sha256":"963fc62d2cf3e59e6f338db71b85b5ea86dd009fff859116d51a31a9b98d1d30","sha512":"2eb180c4cba21fa77eb89d801d6e55fd10acebe3a25e99228e3ca5861447a393aa60420a21f3cd573cedf5107dd391b5e5e1fcf5e09e799f2cbe7a6826eda2b2","ssdeep":"384:VHJTAkiZnTfVU4LSYdh7Db82J2Werb7VVX0m1+cz7aNw:VpTA9xTfVOA5o0erb7YmcGaNw","tlshash":"c562e16e92dc05534d2bd6f84eebd8cc7bd0f8548133af233905a62a854b810f218be1","first_seen":"2025-06-16T02:04:53.862041Z","last_seen":"2026-06-06T05:47:14.560815Z","times_seen":356,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/pages/_app-990136d9d9932659.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-990136d9d9932659.js HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"77228-19cba34181d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qlxEGij9Fc9QAzVaQ7rJXji9ayuotNM4gtIFIOar%2F13kRGObPUsCE0dtXlG8e%2FAGOUAdinHQc8e9bNCXwC9PrRYYIg77Ql8Faw78tPLROt9VZlbH%2FQpqOIvWqOs3nAi1bJF4OMASAH%2BC3M6uLw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37737f98061ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":487976,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64562)","md5":"8d8de86d0ebd9c661e8d7a7d9f6930e4","sha1":"6e8820dbb557dee74353b2e0ced472ff12698083","sha256":"d50eb0a529f70cc1b5a2cfad0f75ba5bb51cc6d7a51e6192be8e3b44d9d490d4","sha512":"75556fd7af08cb5fd13303c868aefbfba50cb5cd94b90b152442fe07e8260c1a125c2e61c763abd944adbb973a6b062d372fb987f995733762477ccbf230ea77","ssdeep":"3072:ii1PkPUKsWkGa4HtlYw0kn5DU+djxlozNm8ad6/QQX+uhuxOEowsB489M4cJkcxN:iiCcKsRGH3dCadhQ7wmNJiRs1+HZ","tlshash":"55a4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","first_seen":"2026-04-28T16:30:51.443455Z","last_seen":"2026-04-28T16:40:37.651687Z","times_seen":2,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/image/?url=https%3A%2F%2Ftropeziapalace-casino1.com%2Fuploads%2FTropezia_Palace_logo_9e55bfc5d2.png\u0026w=96\u0026q=75","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Ftropeziapalace-casino1.com%2Fuploads%2FTropezia_Palace_logo_9e55bfc5d2.png\u0026w=96\u0026q=75 HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2016\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: Jwop47EcHHRBIvAokjTf+p23sECcsYtj1pb2MlPa9Ec=\r\ncontent-disposition: inline; filename=\"Tropezia_Palace_logo_9e55bfc5d2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hhUALjjXEPJQk1YpDuqzDYYlspjCPYPP%2F6zrZfsQDskqX0JzIMMGVfSZuWu5KY%2Bg7bd3CUyc0fZHRsgSGlk8mU1WnArJKxtVByI2WwpP%2FrGi3iaMly%2FKqnHpicT5%2FT%2BKfdW0oAL8e1IWYtCotw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f377381081a1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2016,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"79f1eadab2e1d1e55777126b5b1055cf","sha1":"f2f24512243e518770cbceb4289b5d5e7e9dbeb0","sha256":"270a29e3b11c1c744122f0289234dffa9db7b0409cb18b63d696f63253daf447","sha512":"245f262863c0c536f812a96ef837eccd4321aa66afb571c88c140a462b338598fcd02c3253c1e8bcbdc3d9bc31960ad5c0e041834089cbedca5d7d419ca073f5","ssdeep":"","tlshash":"bf410ee7d4701c17fdc25a6e59dd501184e52a35df7ee07be370de129ca540078ab950","first_seen":"2026-04-28T16:30:51.445325Z","last_seen":"2026-04-28T16:40:37.696227Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/uploads/rng_51a2f61fb7.webp","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:23.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /uploads/rng_51a2f61fb7.webp HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:23 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1112\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 08:05:29 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NYQL1XLLu%2B5QIKQWpExgeRz8mNbSnbtW2zz3frmapl%2FVNI%2BtGmdS0sLKZxKBX2i3ZArY5iVH6HIFS7xAH%2FBKmzvSsq9h6umC9kIY%2BfW%2FBzU3r5aIRou5WvF921BQnBqsVh5p0MQngcLKs%2FWaHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37738348431ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1112,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"448f0e6c993c1dbac88bf22c0f73d84d","sha1":"8fd97b193b0a591047c8a78152cf976cddf460ea","sha256":"ec0c9c5791250b8238d776fdff7e155a5d25cb89049a70de53960ed9e76d5a0c","sha512":"6b44b8cf4ecbc610078a21038ce60ad9be45c824350e2acd4a7547e550ef6208fc7bf58829930fe3824ffab40eca1a875b58ed437dd997839e428b1493118df0","ssdeep":"","tlshash":"6921f92428dc4d5e6d916e720e4170c871becad8a56017f214c6a99cbae303a280ddd7","first_seen":"2026-02-11T03:37:17.304284Z","last_seen":"2026-05-26T23:54:02.144627Z","times_seen":18,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-28T16:30:22.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Next.js\r\ncache-control: public, s-maxage=10, stale-while-revalidate=59\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gARQkZE7Izov9%2BxDPD3SLaJLzJ67lHb2AzemmbbVqV%2FXyXqHLCo%2FWnqJlYV6tuinZ9yxD9DNKNaQUzqRpQfwFv09jUoL4LOvdBCy6ntuQHeHRH20zoB4aJTsJeBD5%2FX3jGA9xoukzsVC1h3fLQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f37737c4d45c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":66271,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62973)","md5":"51c1b07c2eee08cb4be2471a0797bcc8","sha1":"fab724f1c028eba3c329d33acd700c6061fbccdc","sha256":"7f6cfd5de137c0ea8ab8c6e21d0db65e041e276765fc091c8ed0426aae3e6e60","sha512":"b8ec7122c9c159e167c2b213a9a4a5f37666f61a1fe0282d1e0b15fd9a2e6b19c94619bb42fbe668bcdb2547279f402912956234335bc5d569916c55500cc671","ssdeep":"1536:pT9dFo6swyuDOlcjX0ONdnes4j6NRYoymEux8lGUT8JHV:pRJesR","tlshash":"4e53e7b0c688ed7707e750d37563a64ad24d6407e2961ee0becc4ad4e7cb8270be12b5","first_seen":"2026-04-28T16:30:51.447669Z","last_seen":"2026-04-28T16:40:37.663753Z","times_seen":2,"resource_available":true,"data":null}},"time_used":432,"timings":{"blocked":43,"dns":25,"connect":1,"send":0,"wait":346,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/media/9f0283fb0a17d415-s.p.woff2","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/media/9f0283fb0a17d415-s.p.woff2 HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tropeziapalace-casino1.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21336\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"5358-19cba34181d\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W9IXRq63NjV1EB6Fj%2FZEYBRqDpXNw71Cx7%2BvX%2FIdUrtwVkBC6%2B3%2FZ5yXEYtR%2F4sbHIjFA9vyvCh83vGiJICx1rdYC6ScvttBCJ%2BEjdkTO5XUaNj72t1fLTHW5LHBRiKJQOPbP13lBZHb6gWozw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f37737f7ffa1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21336,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21336, version 1.0","md5":"0e35c6fd40c2ab9ef2d5b97baeca2f2d","sha1":"781b1852315aad9bcf111a3017ca734ab6dcd6b9","sha256":"07a6f958db51de42694ef87e2c01b9cf5ee415047b2fd17ab1c313c772a6804e","sha512":"7f76da76841e131252106ff1d70e22908753364d612e9b807d9332f89b13c759b1b9d05ac5983055b48bf99b441a2a07301db2c93fbb79323e492c238df1d7a9","ssdeep":"384:h9WnIiwq4BeuEc4AZTT4ZWgC9UCzpulxbC9WzQFvCY98IW1NoTXVY23sC6:LWIix4BayT0ZMUQpulJCuQF6IW1NgP3O","tlshash":"4ba2e1080f4b3a18eda72c8972acb57498741c208f8ee2770cd42859365e652fe3fe57","first_seen":"2025-10-20T15:26:06.98799Z","last_seen":"2026-06-04T14:06:59.774258Z","times_seen":269,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/chunks/546.767fc6323cdbff4e.js HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"948-19cba34181d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lhx8wNQFIJSt1rG0tmQ5huv5MPLJhQeRIiT12XMZhs2aSu60vc8TB3H7%2BMJqMZ2jgR1eAwyYB4BsqSubG1MP3bXzQunBzJdilUtfjfXyNF8zVSJ%2BgpmhHasaiTMxOhoy1yxn1q3mgyBS%2Fn2pIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37737f88001ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2376,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2376), with no line terminators","md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-06-02T03:03:58.995982Z","times_seen":268,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:23 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"89fc-19cba34181d\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HpZ%2Bx5BoXWb4lx3s6BwiFW6IKYQGD7l1jOXlcNWGUhBCtq0%2FViyuMsluplwDiLHFaq64D7ZgLY1TymGGllUVEbrdwGsDCtBSMzA5zNk65ZHKM0WepdZzrgcsI0EGguBW0ab0CiJM3Xc2i3DEMQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f377380c8131ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-07T00:21:57.731919Z","times_seen":1779,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/image/?url=%2Ftotal-2.png\u0026w=64\u0026q=75","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/image/?url=%2Ftotal-2.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3112\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 1IQ8dZLvJzt7jJSWdq31UItS+8IY-kyELSYl7ymzCN4=\r\ncontent-disposition: inline; filename=\"total-2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ihWLHpvF4WZKwQCQ0E%2B%2BCybjDcE6r6NCBoHTmp2H2i5Wn6UZZk0WV%2Bef4vUhmuWRpsJ%2BDu1ut0VPHSBezf5cgcEeyjF61YDpxRu7IlRpCgRbl0ypYaVzFFsWcO26C3YrK6g9hiseNyxRMPtQaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f377381181c1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3112,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9266ec4c0b5e7ea801409c213828352c","sha1":"d902439770a2f68009eb488fcb951baa968cf6bd","sha256":"d4843c7592ef273b7b8c949676adf5508b52fbc218fe4c842d2625ef29b308de","sha512":"91beb28dafe0f3410ab30fa27e1757ac7fd3107e540330bfeaae0e2246cee3e1d628d577072bd51c169e8a066dd03c9b5c371bc833eda40f7703cc3d55ce9aab","ssdeep":"","tlshash":"7e513b5748b32183decf3207914d412d0782d0df18854db9e8bc2ddea97a2f085898e5","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-05-27T00:33:43.209396Z","times_seen":130,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/image/?url=%2Ftotal-3.png\u0026w=64\u0026q=75","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/image/?url=%2Ftotal-3.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2872\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: OCeyBa9dqIJvgkicFaVXDReSu6lIWhkViWkMV02bx38=\r\ncontent-disposition: inline; filename=\"total-3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2FIEda92F5SNmBnrTgBe0SH11fObTI4230u5IvKu8onJJpdPiVkjLdZ155AmE7gBIM%2FSBVHRzaA3tnQ7m01CX0YOc9onPRObrPtDcGAzGSXUBKUwFxs%2BvrK5yM8BPhw5nMeVNX4r%2Fmdcs68HdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f377381181d1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2872,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15d5c9005a37678205724a79e0c94ecf","sha1":"f84013d6e304be3f339edfce9188a5b40a10a8d3","sha256":"3827b205af5da8826f82489c15a5570d1792bba9485a191589690c574d9bc77f","sha512":"610f90da66f2799eccb5895b7a32fa1b4ab6cbaf7234c5740525f9fc953374052e20a11a32f879934fa28beb9772a47b6a8724484c20a71601ed87631dfa9b39","ssdeep":"","tlshash":"10513b1625223524dc707e718a2b13aca80ba84c0fffd767f1428d634c1496e67db8a9","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-05-27T00:33:43.228311Z","times_seen":130,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/image/?url=%2Fjackpots-wins-place-1%40X2.png\u0026w=48\u0026q=75","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/image/?url=%2Fjackpots-wins-place-1%40X2.png\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1412\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: NWcNEApufzPN1Z6+CYAf9TbOYMw9v7XHucYwPA8FnBs=\r\ncontent-disposition: inline; filename=\"jackpots-wins-place-1@X2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rkvwq2vtEmn%2Fd6q9M7ZRg3PrxcljTaqtpAQQBaMK8fGx6jgqYa16gKilWRdQFKmoTXlNTJBCmegUJbkkXhD9hSJ9xpFlJKl3ZwHzswNy4Eb%2FhOy8cK9pMicTK7le2UYfxbFrlOCUSLyzAJEjvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f377381181e1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3c79467552a70a7e3b9aac5361dca35c","sha1":"c185808d79c2a23b02504ec935117459b1c1b799","sha256":"35670d100a6e7f33cdd59ebe09801ff536ce60cc3dbfb5c7b9c6303c0f059c1b","sha512":"664ee68f3c1334fc77beabd6037b226504bf74cc23bda66ca67f20612c26275690e730cf2eedca94bed50a3554144240c1c59229d98fd63cf7abcf886b877584","ssdeep":"","tlshash":"56213810768cdbf8e771087b765008810acfa4a290370201ee3f4ea4e62af6b2c3c482","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-05-27T00:33:43.209922Z","times_seen":124,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/uploads/egr_nordics_awards_af48364e48.png","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:23.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /uploads/egr_nordics_awards_af48364e48.png HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/uploads/egr_nordics_awards_af48364e48.png","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:23.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /uploads/egr_nordics_awards_af48364e48.png HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 7594\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 08:05:29 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AFE%2FM783gT2FUxiiq9I%2FFiKFajZjhhDrUB8hjf4bgi0qKlerBm9VFgApoAboDdid0SeOmHSeYsWal%2FDWA%2BoGe1DftfXjtaVRZSdWRdS7Ndu%2FUpcECnlWow8frBpxTH8mBb%2BuhHsMqMK19s7khA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37738348421ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7594,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 200, 8-bit colormap, non-interlaced","md5":"7426478c721e78fef1b095ee7d0af11f","sha1":"ad57eec7e11cf52612bb0419a37a642cef4df572","sha256":"86b54f305a7784a0d1fc197b831c4260d0e6a51f84c24dc480fcb0c7290dc2a8","sha512":"22b0b9760991172c68bee8a9273b0e6ebc57d087c7a238918dbd1c04f65aa7ef10b9d1fc14ab0b5c4cdbf0a22a9b095529b3b236d9bd4f403397e5af7722cc3e","ssdeep":"192:CS860fJ9NTnNjxFs1OY4NSe1lR6LeSPAuZOzgRhCc:d860fFNjxlY4NSeX8NAuZ0m3","tlshash":"cff19ea6c8fc1414a9444ea1cdcff40473d054e383b9b5cf8998ae3184af0dd2956e88","first_seen":"2026-04-28T16:17:22.032581Z","last_seen":"2026-04-28T18:14:38.416626Z","times_seen":8,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/uploads/TP_favicon_6d4f7771fe.png","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:23.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /uploads/TP_favicon_6d4f7771fe.png HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 251\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 08:05:29 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQ0JAPSlgzd26ZQCOLUo4FhnUKr1u5fvMtqjWz9FvbA3d1YCAJMWQojB%2BV7Nsj12LuqZpgQ%2Fu1hPACQXAdV0tMcYOxfY7UuCUESV8f6mSXegvAV3jSMWoMiczBf6TH2PevjI8FPZ6%2Fz%2FD%2FQWdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9f377384b85e1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"4f23e57ac8f1f3865d76a543c5be7dfd","sha1":"ff8bebd8d4511cc7910e2f45fc038cd988a055f2","sha256":"a5a698be35a20f203fb453d7c78316143a060e437d9b9541fe1b8a62170ae716","sha512":"85ee9d5e143faa20680ccc4f79c52d11c3b515a03cd21f2bd5febeb1d4040592c0e50fcf1d1001648412c2ae5ab50a487c279ac41c1946990b561359c0a02a58","ssdeep":"","tlshash":"ebd02ec22074ae2be1898063f2a00a626937898c5822a4054715e434ba1876899b2a83","first_seen":"2026-04-28T16:30:51.461039Z","last_seen":"2026-04-28T16:40:37.634721Z","times_seen":2,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/css/dd79dc2c5a9a9197.css","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/css/dd79dc2c5a9a9197.css HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"a112-19cba34181d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7j1UhdXYVQ0qqZkn0ii4yXbAm7kF1QQu0z4cxEF%2F%2BNSD7tkNp3P8rokQQZRuhNdQuWtXGX2EPXb8DN%2FkY6g%2FQNYgsCabt5jJL5XEJSXu7HECZQlqlRQ%2BTwMP8dO%2FY99B0gM2rSYXwb%2BBY5tODQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37737f8ffb1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":41234,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (26798)","md5":"93e37c199f0ae59faefffcafacc5f00c","sha1":"a18665363dc58467e599d2bd59c1d63443bf8902","sha256":"d91a05b2ad13ad076307787468b87cd94e7dec4beefa460fb9b6c1e13473ccb5","sha512":"22f1cce98b2a8190e8fe8a83f883915899f1eeed64ebc5006757b2e0bcdba68ac5ef53f2f69439648c2dd3a9d58d0cce4585b5e5b79516718e9e2e3d73959d28","ssdeep":"384:gi4OZg6oxkmT0Ew2zXf0MrREq/XisHZ7aVWMMqLswaDGvi1vPTnx6G8S3yvVQW78:f4OZwQ2x8jeDqeTnwVA","tlshash":"4003c921e619702dd8fbcc6732ca7f1766184402f5950d69fa1b866ccecb9271b93bc8","first_seen":"2026-01-03T15:12:30.994041Z","last_seen":"2026-06-02T03:03:59.004085Z","times_seen":256,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/927.a7dc7992c436ba78.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/chunks/927.a7dc7992c436ba78.js HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"a0b-19cba341821\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F6rnBDIIKIZwBuETX%2FS%2FL2FOAz79zNR%2F6X0wEeDoIaKyRewUWvE7kzsiJfKbW%2F9GJPLF5POsjP1jK%2FRIrq6NNZ3JGPMkdylAhk2w0o%2FaLQUCZtmDSKwcadav9zzBICJcC%2Bu%2BlDUylT9V2chGHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37737f88021ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2571,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2571), with no line terminators","md5":"169204fe2bcc42c380af5e1ac2be7fe3","sha1":"8a03ce5223655c895c434033b81080a819fd917b","sha256":"e77204d4fe82687b08d2c78d02e066935c1b0c697a95682b12decbf3776b528a","sha512":"d47937c3eca1582d992d537eaccc779735e73d5450fdacdb27f801abff617ee8dd60a5fbdbde063b15a402746facd53cf439b115e864099f1c7537b218b3aed3","ssdeep":"","tlshash":"905131059986fdf9f9ba0cc9925fd53e762eb40f990c8da8fa7488414c098843603be6","first_seen":"2026-01-03T15:12:30.935058Z","last_seen":"2026-06-02T03:03:58.989391Z","times_seen":183,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-67c545f8362cb3f5.js HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"33c-19cba34181d\"\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wjTL7Yh1s3YvzRuoQZJ%2FjbDEGOfyK9H7DZ0jjdIKNCJ6b9OdIipkYtNj59NugwWS5Fy3RmJFvj%2BzmKIEdRec8H%2BxO099shVZuollmWlJLTwRJAAfM6g5tQdCUN9eocsmX4gU8Z%2B9RfLQKjOduA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37737f980a1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":828,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (828), with no line terminators","md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-06-02T03:03:59.017415Z","times_seen":251,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/i5dK82hpfidkEOetlThun/_ssgManifest.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/i5dK82hpfidkEOetlThun/_ssgManifest.js HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"4d-19cba34181d\"\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ytn4k8a%2FSif0UBNQUFEEwuNPM8SvzrmDV6cjol5b%2FotbEfBeMb4HRxCG9f%2BjRn8ucGGzLHxSmIOMF0KvjGM6UZvBtGHpJ1%2BScxpWEeIAtQZpAwtDvNccZ5hZkygHKPMq%2BWZYZqgsrjkE7QbaRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37737f980c1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-06-07T02:16:15.173503Z","times_seen":232219,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/uploads/TP_slider_459d1aeea4.jpg","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /uploads/TP_slider_459d1aeea4.jpg HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 38452\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 08:05:29 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PaWbj4GXVp35o4SPZLqQfeAO4wyVT7vFzRPzHjyMGcffDvyaVkAzei79OPAIWWmiPwvmOPtEu%2BbljHoIHz2njr9rUQFdSxEPwiEMG58TAIIcMm1qYdjKS8ChLWOKxQlqAJ9jl0DYmVWVVoacJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f377380c8121ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38452,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1920x352, components 3","md5":"51c5cbba2da9572add3d56e5fb49dd3e","sha1":"2fa916bfbdae8d8ce3d4a903ea8e279303eca623","sha256":"044376b921098ce439f29304df03724533272eca814d2ff823823069eee944a5","sha512":"ccc7cc0eb2882fb63cb8327debad688b91c9d7fec1318287f2a3fda332cc66bec21f5968b3179a5abc507d8aba9881041287e3fffdd5e44d42647a22b3934ca3","ssdeep":"768:8qkh7uYQdOLeCA4+RMiGrdDzvlNe1z5FPMxdPx:8xqQiJnPGRD5sezp","tlshash":"8903e181f6831c6ed3c4d735089f5439bfb454b08a9bcbef25a5934c11319a1baa7d88","first_seen":"2026-04-28T16:30:51.467224Z","last_seen":"2026-04-28T16:40:37.665262Z","times_seen":2,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:23 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"89fc-19cba34181d\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s9Utte3Klc0lYZ3AHxR7YUc3SvjXRQxzG32p8OniZBvPIZKKhOrmlJYzuZR%2BdZZqukr%2F8YAftzjqTh5qziy8xYC04JkhZKRNcjNI%2FEpUgyJOFWb7JmWXJs3KOF4RMAJeH5HMmDBo%2BX%2BwqGxvzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f377380e8161ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-07T00:21:57.731919Z","times_seen":1779,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/image/?url=%2Fjackpots-wins-place-2%40X2.png\u0026w=48\u0026q=75","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/image/?url=%2Fjackpots-wins-place-2%40X2.png\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1290\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: DkHvEuSDXRB-vLyYwatTedu5bUGez1prcoJbDhBcn1Y=\r\ncontent-disposition: inline; filename=\"jackpots-wins-place-2@X2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=szVdmMNnu3xVlNjw63gsAzOoAnCDFcIIKOsvAqy5cgESnAxyvScku%2FdiuMVCLG14wKJn%2FdqScYi%2B6i3zZ50tcCt3RhV4AmMGoKH73KOXR%2F6QxSU7Khc2iLQlPOjKbDHsK98qkfN4CGaGCG%2BNUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f377381181f1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1290,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5c9c7c18a4380b493bf276ea04ad4787","sha1":"d72fb256081430ce5f22486d39b79f2f302a5da0","sha256":"0e41ef12e4835d107fbcbc98c1ab5379dbb96d419ecf5a6b72825b0e105c9f56","sha512":"7a917a50029837fde70991553896f2ba46375fb1ce9f2215cfb0c7e28d69014429f616f00b92fb9534aa89e7ee030bdfa2262d543b30efe02b1da082f31aa26d","ssdeep":"","tlshash":"0421c8085ced184ae5821c6ce5b950a7922cacca0a6f461be5e2c9fad148c2c03c417b","first_seen":"2024-08-19T18:17:08.891151Z","last_seen":"2026-05-27T00:33:43.228736Z","times_seen":117,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"1759-19cba34181d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mqp2auBpYyQXMLrXs6Rh5Ls3tw7%2FVhwcLyqzbQBDElpVN0OqQHQxE7509wE5QwzvdkSKN7CcAKn6aaQUipJ9k%2B6WYnpNXyjDUHpVbfC05QO4WdWr5s90UQOm2aGQAOSM6KX6QbV0dDsOChi36Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37737f8ffc1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-06-02T03:03:58.987189Z","times_seen":264,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/chunks/framework-10ae643bd7ba2303.js HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"226d5-19cba341821\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R1BwE2L8ddG4Uyh1pgk6%2BSm9O%2BCLII%2FGVAgCbCa3UIY%2BlnnYuM8lrPvNNSwqOq6IH4QARV9PA4yhu9lIGtMHxl3XABFugQcX9QZuY%2BNERqKcEFd%2Fq%2Fy1XRoLSFgK0grlUpgwTYQZm03a4J%2FBiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37737f98041ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":141013,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65202)","md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-06-02T03:03:59.000906Z","times_seen":287,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/uploads/rng_51a2f61fb7.webp","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:23.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /uploads/rng_51a2f61fb7.webp HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:23.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tropeziapalace-casino1.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:23 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"1759-19cba34181d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 0\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2BXruqYuZm0ZiDNNciFX3bNyO%2FXAf7I%2BtOEtbKYFkI4MufQPbUyNGmMx5gdSXnRdke22CvYC9I9QVFM7CKhL4q2aZHj06WovzUxOA8X9ZEwUURVXJBlwdDP8gdqeDxxqerJzerFUqm9VaLdmdA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37738448541ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-06-02T03:03:58.987189Z","times_seen":264,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/59-523bb81ef69f96cb.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/chunks/59-523bb81ef69f96cb.js HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"3a4e-19cba341821\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rpKpX%2B27xJYZgMinsjcqxX44P7a43SbqwTw5RC6IGiqT8gNUczSxlaMqZYTTanm4oFZWzn%2BwL7dx2dvdht2dYnsLBCL%2F%2Bq59wMdhhazRsB7tBliEYek%2FpdFnA8Ay0vbHht1szz4EMcE9gVmYFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37737f98081ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":14926,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14926), with no line terminators","md5":"6984d40400f0095dee745926190c2edc","sha1":"1d0530bc3b5e74e749b38e788b2aba8c8550c540","sha256":"64c1545405f3195713f83c30914065e10649b0ea650ae3129356d11d5693ae08","sha512":"0cafdae2c3fc0d43ec9f9a68ffdd75e7bacdbeeb2b15c8b3289ba1699989bd2a1b171e24fd14384ba2df9179a3bf9af041ce9090df0e16eecd81023563881e2f","ssdeep":"192:OzBOuoWwKyWpzqXD5yU3W1NEXNZ3k/EP49uxCmAl79uLhmfpcGXOAPYPKF9:OzBOpNJP49wu7sqpcQOgB","tlshash":"d362c56e45424cae9abd94e4c4271108d7ec6606f154bcb0e7a68423b0dbedc62f27cf","first_seen":"2026-04-28T16:30:51.470827Z","last_seen":"2026-04-28T16:40:37.707665Z","times_seen":2,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/uploads/kahnawake_26ed4fd506.png","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:23.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /uploads/kahnawake_26ed4fd506.png HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-07T02:09:46.692243Z","times_seen":16200239,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/4.ba59667ae674f179.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/chunks/4.ba59667ae674f179.js HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"1d85-19cba341821\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=soUFL5WpTyavCe3jWrXoZKFhvMFa924RMM8rYgG5zHAGwPhllSWCB8vOrf3OtCyKik%2FqeE9BcpRvAFbx2%2FSIc05fm5m5hE7K6hWmsB%2FsxAPweqtWTqQOPOCSmOyHmOF722Sw8sqTO1dO%2BKkVRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37737f88011ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7557,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7557), with no line terminators","md5":"9cdd6ad3f4ca408ef5aa4cb828afd42a","sha1":"0e92ec6a36373187146cb50cc3178cbf2b9f5f26","sha256":"49c6655fc02e5ca41d8fda583b637a642687dbd2db162f72600533260fc8e7f1","sha512":"49c4afc202c88c6349c16aee9d5f3ffc18a20a46bf913ee61f6eea7873b1aaffc8c4eec7b053f6df4816c938521a5391f228e4702e6cabc99586cc7d54dd8627","ssdeep":"96:pYin10pfahAC7V+QB6wghii/OS4XcJMDDxCX09aZT1T09aZUwd7+djSvQQV1Oeys:ppifCplh/XFwl+djSvQQV15JsIl","tlshash":"eef19549e087bfb5be7f5842662f850d732e250cce174cb5ea78a8028290cd8b5d67cd","first_seen":"2026-04-28T16:30:51.473951Z","last_seen":"2026-04-28T16:40:37.705342Z","times_seen":2,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/chunks/main-69b63e2e16716907.js HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"17ffa-19cba34181d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cswu6jMscYXANYm7OxkZDVeuuz24qxLzhGnFa3D3DiMz4DoANeDQUsrqXlET3q66F34AfX3hut%2FvFVRQ2Hnh%2F8DofEzJAVplgFkq%2BTNcgwcJMLjPblng%2FAtIThb0UJ4paJ3WURj%2FMN5w50VxMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37737f98051ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98298,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-06-02T03:03:59.004649Z","times_seen":271,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/chunks/492-27fcff75637ccad1.js HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"18017-19cba341821\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U42E9cQdYpDDWZwBE4sfgLttqyAkRWear5%2FbUL2I3Rmj5TBmLwOfgGx4fXKxlql%2Flb4UKnr%2Bv5bnbCBVqCiRaxYjAnLOFBsa3tr5wO1P%2FdnonEmFzamUQ7bllmrz4hDon72JHpiHoO1QXk%2BGnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37737f98071ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98327,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-06-02T03:03:58.991334Z","times_seen":271,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/chunks/966-2601235ce9ca419d.js HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"2000-19cba341821\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5STICkIfSjo0P2dDSzoiaHMoQ1nQwYLfHngExLAZbEEqrYZnbyIyj%2BqnHFKzmeSLPIbNAYwJRjXfKoApWz5nHr6V1I7UqE9dIFG%2F7m%2FP8m%2BA%2FnbS1E5PxlqIdJNUVqkZUeFF7FNZnHwfhxWXxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37737f98091ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8192,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8192), with no line terminators","md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-06-02T03:03:59.001644Z","times_seen":269,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:23 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"89fc-19cba34181d\"\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qQjFyDhwgx283ZMMkbBfC3OebI1wc6C%2BPAKJzhRlL613eD8uyIZhSpcA6gU%2BPvvJ%2FdPhHLBTm3HjFe0ZhHGfj2NyPoCzlNQqINyUUR3xb0%2FWhcTc%2BDjK7rcMIlhQMYWV8I3KuNr%2FhoYWwnEkZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f377380c8141ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-06-07T00:21:57.731919Z","times_seen":1779,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/image/?url=%2Ftotal-1.png\u0026w=64\u0026q=75","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/image/?url=%2Ftotal-1.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3382\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: qtgseq43yCPlc4q7UqXglchdAt0qOBOx8mfDTvJp8OU=\r\ncontent-disposition: inline; filename=\"total-1.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y%2Bsfh6zmJtxNrhNdst%2F%2FBuGxYDoij8IGRQEuJdRmFJ8%2FTTzmNZDLdLkBv8%2Ba6F71lPI8xTHtaZ759hS6OSTgVHtg53C9S1f6EAWDcEPYHVZvErgrAJo2v2tMSVoCEDfaURzqpj%2BwyY1j6yvrKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f377381181b1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3382,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50d69df7565f2adff718b334b2be696e","sha1":"32684076332a394e40ac306390e9ef110369572d","sha256":"aad82c7aae37c823e5738abb52a5e095c85d02dd2a3813b1f267c34ef269f0e5","sha512":"6a0091fdf8e0b8f300404d484bbc5883cd3f7e03a1447acc692b051566490697ba2eeb42be05ac285abda18967cf518a9711bb86ca09bb58e7ff6dcf933b5df8","ssdeep":"","tlshash":"5c617e98605178c1c69be8a146878163d1564650d3c6c874bbf4e62472acc7d4331cf5","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-05-27T00:33:43.215238Z","times_seen":130,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/image/?url=%2Fjackpots-wins-place-3%40X2.png\u0026w=48\u0026q=75","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/image/?url=%2Fjackpots-wins-place-3%40X2.png\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1214\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: ek0UevHZ-FAi0Kfsh5KGMvAuZZH89YxPoXyU38sWils=\r\ncontent-disposition: inline; filename=\"jackpots-wins-place-3@X2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U890W%2F0XcVsvHUA8TDPIx%2B%2BwKyTMiGymPTUW4LOXGEv8o7xwB5x4Z5vyIlRBQZviP%2FDeKfdCW4Iedw8mShiSG2ehS8j7Mmv7%2B%2B7psrDDgg28rf85zJD6dUhtitIx48unJhZNlHgQFqnX4KMgSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37738118201ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1214,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6460dceeec5235200dceacf11eb0b7ed","sha1":"dc487405685aba83b1df520c2aca70571b903f5d","sha256":"7a4d147af1d9fc5022d0a7ec87928632f02e6591fcf58c4fa17c94dfcb168a5b","sha512":"9bc78b3f48c093a1c113f20fc42273c525d9b47d42e29c3d94b363298e4fd865cb62866064fbb2319664bd40b19a196cb664650d405ca3f78496edc15d613046","ssdeep":"","tlshash":"6921e79fe0b1083d0d800023a027016f42a2419e769b0ae034524e520e1f20d4ebb7a7","first_seen":"2025-03-27T03:50:55.648055Z","last_seen":"2026-05-27T00:33:43.230227Z","times_seen":116,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/uploads/kahnawake_26ed4fd506.png","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:23.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /uploads/kahnawake_26ed4fd506.png HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 2496\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 08:05:29 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=waLIIJUAjhjushtYNNAnIJLk2RhkRxGOrU9xC%2BI6iHskD%2F0%2BaPOIpzxDycFDrEoimqrqF8DndGaRJZuM9LkouLOdrMwhkrJomDdPVZKQx7m%2BODyUA2ZzC9%2F2OeCLFjnMpjJ%2BUAvANkta1rRZDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f37738348441ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2496,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 109, 8-bit colormap, non-interlaced","md5":"9d06708299e6939ab78b9b7ce47c91b7","sha1":"c69891589bc6f0fcad0779aec6d8a78cc9b077bf","sha256":"87c8ec2e2f6ec9066a2c4d58edfad25273f76433670cec698d506155ebe1047d","sha512":"955bebc29e6719fdffa89fa0ab3dd41de9310cd3b55048f8ba305a3ae34dab313fb7aede6db52d27fb23a25e268a2d4392f71095bc9c24a286e7b4459f513920","ssdeep":"","tlshash":"90514ae52a073c77c6090da212747a26ea469f77402e64c7206c3cd8de7da768d23204","first_seen":"2026-04-28T16:30:51.478836Z","last_seen":"2026-05-26T23:54:02.116023Z","times_seen":10,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/chunks/webpack-a6cccd69e31e329e.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/chunks/webpack-a6cccd69e31e329e.js HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"1750-19cba34181d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=btxAYLL%2F0SrZpfbPtjZNChoqbKhgqO2S9GrtF5yX77eR2asy%2BsmDcM4JCQLAecBx4MQRUWDIFbbMJVwIagJ0j0SNTA7C3bqscHI6mGfpd4nYIwNjelMU7P%2BPS5rMA5WU7RA00lS7Xwg1aAosPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37737f88031ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5968,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5968), with no line terminators","md5":"983f03427a0cc74a40d95f6f0fd9161d","sha1":"daa55847490d26bb3f0e7e891f055d38ddded69c","sha256":"31b641eea0316b4d7c7fb9f71b5462427de54b425e735c15240755af0758cfd3","sha512":"7d73e5e0ba6a523ce8e2cb013c63c5bbb7fd09df7bd131e9e7ab7a4e2c9885a5f30a1384b43b0084881442e4048603970e2934a46502bb8e1cbb1285736f0c59","ssdeep":"96:6IAgDpEzqynRR3EKjmvFqMug1kkNxNF9VTlVHO/jeE2UjKBOK6nRVG/OGfIfRY8q:64Gzxnj3EMOFLBkQNF9Xe7jKl6nRVG/n","tlshash":"37c1c79e72a4f4b61743a5a0493f9056f13e247b781ed0a0d70ac9b4bc349688533fa5","first_seen":"2026-04-28T16:30:51.480411Z","last_seen":"2026-04-28T16:40:37.685429Z","times_seen":2,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/css/352d5236847d301d.css","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/css/352d5236847d301d.css HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"644-19cba34181d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qMvQAacHbB0%2FsPYYqSTaj27RvnczNHSewXjb%2BC7HAB8osFFTvEu34RmK3uoNDlGY2m1HfzDiEsdadGFX%2BvLaSm5kxPJPXBI1P6gzQLdZFx5CfUTc%2FCBZ0ACz7mli%2Fhg8YCdHKO8OlRjxtWP8Hw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37737f8ffd1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1604,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1604), with no line terminators","md5":"d861c7ab0c20ce2a7a153e0a29f1f60a","sha1":"fc6bd3dab3f134d21c58832d9de3f830d62f1ec9","sha256":"4ded20bf9809d391e7e962e1395b3522283ca30f52fe7a86155d1d5b4b3789d5","sha512":"0f8ba9f03c97e33b8a6a9c2cda9bb1a130f8e2b72e70254c382de16ba63d39be6516245f7e740cb52a947fb85c32939217c29b9d982f330bed19c438322db91f","ssdeep":"","tlshash":"0a31bf1195c2af35f9bba4a95fe0367f7816584887fa0ddac2d5f35582ce0d2831c54c","first_seen":"2025-03-27T03:50:55.637284Z","last_seen":"2026-06-02T03:03:58.995344Z","times_seen":268,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/css/3bda6d4ca9304bde.css","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/css/3bda6d4ca9304bde.css HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"dc9-19cba341821\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lhNPwRPjm5b3xtPOE0tN96ICkaH1ktt2sEWLdIEXQzlOA3y4PK6wsLXRsupaRu9Uu6Qvk14RRtXo%2BiGPrArL3fR9%2BcxWD0Zj1D27sMaIoetjdTo361JzjFcvo3BKaPzvBEI5ulieAmmce3qoqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37737f8ffe1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3529,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3529), with no line terminators","md5":"01ce09a5b03cf044607a0960b19ee68e","sha1":"77ee0c8a2beef0412c1bf25560a9903a8734e9fc","sha256":"460f6f84ac47584af249e7525a01b93aa6fa2589abd99b25861058a10c5ced23","sha512":"428ac46d7d2015690eeec14942ff4a4220d01f83188ba00d1338949b73d9b25f4c2dc8aedb1ff247a20b160dc4847a4e89768245fa3835d1b1a47e5283a60848","ssdeep":"","tlshash":"1471f21a2e9e7b186cffc81765b26748236cd409cd1712a99013d76e49cb3925bf1b4c","first_seen":"2025-03-27T03:50:55.673324Z","last_seen":"2026-06-02T03:03:20.673599Z","times_seen":213,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/css/425cb6e228741817.css","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/css/425cb6e228741817.css HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"eee-19cba341821\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6JJxtUZ%2BThFVdFDFZ0rgpAFCLS5x%2F2zpHPojGEZVP6iK7z1hfkJzoLvCl5F1OmVa6USW%2BruLteCow%2F59D7DqTzogx8Dim79PzaOW9kwxIMKDp9amqTlAA8pEB4yKTXqXvsA0l4c86hgBL579qw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37737f8fff1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3822,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3822), with no line terminators","md5":"18552a6e17838c46016a53e9762873c7","sha1":"3dd15aa95b79296b2894bfbd8fe4a53911f694d4","sha256":"66ecf375917e5eebcf9959e90773c31eff8f779803c5493fc5dd3760600542fc","sha512":"e1e0f9e0f622a0abca95b0eea21d599f23df0abf4d7e40bc5a85c69696ff5c6c97db03271d826ad105410cec045c6f279b66ce0ab29b9b5f4e29065d0265c9f8","ssdeep":"","tlshash":"a371f03a4fd0d438f4eb606f6ba2946d4b18c442ea275bdcff12d82bd1cb3d60562589","first_seen":"2025-04-29T14:40:21.773905Z","last_seen":"2026-06-02T03:03:59.010214Z","times_seen":175,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/_next/static/i5dK82hpfidkEOetlThun/_buildManifest.js","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:22.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"GET /_next/static/i5dK82hpfidkEOetlThun/_buildManifest.js HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tropeziapalace-casino1.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:22 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 04 Mar 2026 18:55:02 GMT\r\netag: W/\"3f6-19cba34181d\"\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yN1bVDNaF6mRVG%2FVByiYMbqLOcYnBw1mGUMYKlYsyhuhnJwUMc%2FGz3qnPnZ2Exx9aqKb9oycAbmggSbPFf7RSGHtMk71P066%2BqcQ0mfagt3wrPsBItpxKkGmdr7fMcqwhDUIVN7zmkdWDj8mkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f37737f980b1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1014,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1014), with no line terminators","md5":"c028a41e561ad15098a0fd6f8fb47e83","sha1":"70483ff83288d80a9c665b72bfe100040ea1c094","sha256":"b1b1bf7396934f970dac9e70613d24ca80b3fc579b30de25036c5c5d2f4f5551","sha512":"ce9fa7f699c884c1ccf0f1a8acea76cd2e30579b5d536703c7ce8d067b7528d58fd1ba721a662bb917062922938281918b9a9501693de2e1ffa5bde2fda811c7","ssdeep":"","tlshash":"0011bd82010ae61a2ce8ed47373f13a3af528036663c0ab68fcc1d6c55904675f3a862","first_seen":"2026-04-28T16:30:51.485604Z","last_seen":"2026-04-28T16:40:37.655527Z","times_seen":2,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tropeziapalace-casino1.com/api/report-error","fqdn":"tropeziapalace-casino1.com","domain":"tropeziapalace-casino1.com","tld":"com"},"ip":{"addr":"104.21.8.130","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tropeziapalace-casino1.com/","date":"2026-04-28T16:30:23.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tropeziapalace-casino1.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 04 Mar 2026 12:47:14 GMT","end":"Tue, 02 Jun 2026 12:47:13 GMT"},"fingerprint":{"sha1":"30:60:3E:A4:DD:0C:11:75:AD:AB:85:EC:95:6F:0F:02:D8:64:CD:8E","sha256":"64:58:54:D6:55:FF:AE:B8:D1:AF:D4:2E:13:02:D9:F2:4F:C9:73:84:0B:B3:A4:D5:DE:57:EF:CC:8B:A8:69:26"}}},"request":{"raw":"POST /api/report-error HTTP/1.1\r\nHost: tropeziapalace-casino1.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tropeziapalace-casino1.com/\r\nContent-Type: application/json\r\nContent-Length: 93\r\nOrigin: https://tropeziapalace-casino1.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":93,"data":"{\"text\":\"https://courage-dream.top/m4r2mz?aff=max-chi\",\"domain\":\"tropeziapalace-casino1.com\"}"}},"response":{"raw":"HTTP/3 403 Forbidden\r\nserver: cloudflare\r\ndate: Tue, 28 Apr 2026 16:30:23 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding, Accept-Encoding\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9uvnjbgSWfAgQit7Mft%2FGwcQv0I%2FpTZvmVy9T1Y5fFv27X0wdUrO1fWmvyV3AIxxKcDrokp%2FVmL0M0eXiwZn5IlOYvckRqwSCxQUb2XVpiTvgKgH4iZUizPUa5pj9kvIqPMX%2BS9vQMjkG35wGA%3D%3D\"}]}\r\ncf-ray: 9f37738348461ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9fe3cb2b7313dc79bb477bc8fde184a7","sha1":"4d7b3cb41e90618358d0ee066c45c76227a13747","sha256":"32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864","sha512":"c54ad4f5292784e50b4830a8210b0d4d4ee08b803f4975c9859e637d483b3af38cb0436ac501dea0c73867b1a2c41b39ef2c27dc3fb20f3f27519b719ea743db","ssdeep":"","tlshash":"2cc08c26351e2c0c96a322b402c36a50d092c3304c5a19004600420371c31168ac3315","first_seen":"2023-04-05T07:27:09Z","last_seen":"2026-06-07T02:19:04.579453Z","times_seen":95912,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-28","alert":"Sinkholed","trigger":"tropeziapalace-casino1.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}