{"report_id":"e5b7b7d4-6828-4106-98a0-e24feb7bf2bd","version":0,"status":"done","tags":[],"date":"2026-06-08T13:31:03Z","url":{"schema":"http","addr":"casinoseon.com","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"104.21.17.143","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"casinoseon.com/","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"title":"Galabet Giriş Adresi | Spor Bahisleri \u0026 Casino Oyunları","dom":{"size":302029,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9937)","md5":"3ec93a689748c3d226c47d2582dd9f03","sha1":"0e18251bbc02d49fca4b3b2521aaf293534be7da","sha256":"0cb5c5b8007f77d085e7ffd83c54403c30114febecdbde4c8f7c014c0a8ffe17","sha512":"d5655487da4510bcbc8743e28c5ba3e9a186f15fcee12689e7339053815aa4c064854950537c389201600299f6c4cc63729561b1dd1f261eb66ba1b7f4548b4c","ssdeep":"3072:HihzkxXKxUqxRgpVkGhzeLDaex/toxFVQ8MK/IZAhS2cfl6T8wAzN7V4g2uTyhvO:kkxXKxUqxR5aeLDaC/2IeSFll","tlshash":"12542b733788165a076752c3244633dcd43b896a6741b8d1d0ea4229a6e1ff37237fea","dom_hash":"domhash01d8b02ebfce56327c45c9f6a00b1d92","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"casinoseon.com","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"104.21.17.143","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-13T13:31:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-07T22:18:26.533791Z","alert_count":0,"request_count":3,"received_data":98760,"sent_data":1674,"comment":"","tags":null,"fingerprints":null},{"fqdn":"casinoseon.com","ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-26","domain_rank":0,"first_seen":"2026-06-08T13:28:58.528411Z","last_seen":"2026-06-08T13:28:58.528411Z","alert_count":171,"request_count":57,"received_data":2454111,"sent_data":28779,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Magnific Popup:4.1.6","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Elementor:4.1.1","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:27.7","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-07T22:22:03.23237Z","alert_count":0,"request_count":1,"received_data":8307,"sent_data":611,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/pro-elements/assets/js/slides.c0029640cbdb48199471.bundle.min.js","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae71a8c3cb52a02986809bf59779d6c6","sha1":"cb1d11633cf0501ab1d312547da0cb9317038515","sha256":"d0b9db79b39bab8409fffaff2f1a771e63763921fee49c268cf71a5e436d9dc7","sha512":"401bcc5fc89004872c3ba4f5294be17aa2258571172723c69302129b35bab7792da997e5d7d4eb93abd23972f7704dc04821ef2aa3c176f9cd2a2f151ea909b4","ssdeep":"","tlshash":"9481978230413c7719ef89a7301680619fa107c47902b2fe79e9889ed0bb9a6136f7f4","size":3926,"data":"","first_seen":"2025-10-08T10:41:46.053886Z","last_seen":"2026-06-11T21:52:50.201369Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0174a320c4dd06b3f2871de897acba21","sha1":"b9ff75dc08d6030996eba8e3bef085303297360d","sha256":"1d231f080d1df633865e5a079d8e4e377a6c6b13b3a67be8e271b848eca1b05f","sha512":"936bd3b0db0b0a33d20758b6067b838ec36632b08d58f6a8aa7345cb738ecee15340711a396f592c7f046b1b69a6fc312f76a5708bc5809dcf5d4564de7f47ef","ssdeep":"96:pu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:pGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"34a151c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5015,"data":"","first_seen":"2026-04-26T21:57:59.026054Z","last_seen":"2026-06-19T18:48:42.614195Z","times_seen":19680,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/pro-elements/assets/js/elements-handlers.min.js?ver=3.32.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e703ba9afa170cc3375e74e51004c0ed","sha1":"ea6ae4c8a369b823f3a67e98eb541359ee7c0a76","sha256":"ae0ba39eefd6a2d0c3316019404685adeed50f31db022223d19953f3e1cb84b9","sha512":"2dbae32a1e045f24d02a0c6e7ec53061908b22a54bcd889e8297ee63fa8a8787d811fc822a2c044ec9aa40910418d74414af1f9950f3c18c5c5910446ae95672","ssdeep":"768:C5/bt9JJD1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFgm:CVt5D1+WE9A5yLcWJ9mBtIoERuWfRMBg","tlshash":"6f13a511716aca6945cf84abf463164fb7225cacf413f0e67afc8d82b464e87a394731","size":44670,"data":"","first_seen":"2025-09-30T20:29:17.495625Z","last_seen":"2026-06-19T15:53:02.062566Z","times_seen":1270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ce5b006aaa6e40afd26c302e63a0924","sha1":"b7720f03b83bccb5b3bc03966565a4985b8fea33","sha256":"757c2fe99b10b9d16adb452e471a2139c30ac31ff817936d2acb26ca50d93ef0","sha512":"48d2d780dd3c7dc356405a4d33085e87fe308f5701d20bdf8ebe3b3171780b68724bb7f412d23a3e4ca6d69c45ece48d1f046cf4f96f23d2029053940d7e9adf","ssdeep":"96:MvcHtHRA5NTDXnM2E0+1lfYsPHgRhR3SlT:pN0LE0+1lfYsvSK","tlshash":"32b1969ae77638dbb2f900f2697e0d47eb614435d6c8d038c9bea3141cb5893c274b46","size":5172,"data":"","first_seen":"2026-06-08T13:29:08.280589Z","last_seen":"2026-06-08T23:09:24.349336Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","size":5520,"data":"","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-06-19T18:45:40.814564Z","times_seen":187551,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/vendors/magnific-popup.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2578a786b481cc3f0f602615ccdc871","sha1":"6b2e182c99a0065ba1708446813683acc6e66202","sha256":"5a25fcee2abe666889666a26a4ee6b0eb4e2a1a7684e3a5f60be9b4e35d71c2b","sha512":"83d456ffec428055c28c820fd036e629c821e301ed147e2dd5f120270594342e4e7159fcead6740412af1fcff8f49bfe289484e72a91a2e731599c9e6acb3975","ssdeep":"384:yK+Ypwhc1sBEVEtk94tBnKIO46FbUkOK/NF0Sv/lZzZyQtdhTZF5ZFB:yEl73MoUkOKv0GMAdXF59","tlshash":"dc922ca4f161b27397e361b4188f382c367a9922cd078412b65498d4adf8fd89237f7d","size":20864,"data":"","first_seen":"2024-10-11T08:17:09.441057Z","last_seen":"2026-06-19T16:29:07.365063Z","times_seen":5459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/ow-lightbox.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71c31400a12073b7c576c903dcd8cea5","sha1":"2f048a9ca8727b169e761033b80209f53ffbf9f4","sha256":"6678f5308a4fd9620f440c3e6433920f9a09a9d6465a13888d9638aa23d70191","sha512":"98eb2820f7c92a8f0e01e1ea87ffffb6cdf19311d4f5dc697e0aaafa58a55180351a25776f2a8996a231a044f9d6317b09a1e910edac2c97a6a6f2eb4491e347","ssdeep":"96:wmwS3E/clNZ6/BVcqHAAdMJ+T94MWSocn:vwTUHP6S24Mdoc","tlshash":"7781b5c9769070f603e34779807bd35263f5e4588a45ecb26ba8c9a92afcc1d0163f64","size":4111,"data":"","first_seen":"2023-03-07T01:18:55Z","last_seen":"2026-06-19T16:29:07.390559Z","times_seen":8869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/select.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c14a78cb669b0192e5770f44af6fb88","sha1":"0f39839abe6b82e4cd2be4f4619ab9b29e6d5b06","sha256":"5e0ffb478350bca8d1f575673f7ba980c8b865fdc01a47b9a6e01fd2baabdac8","sha512":"b7552e2992af6067f0b1b1046b57ecd95cd246d30a463ce51110d3612ca1a2371a11a23e01a9919bdb1f7e77627086a4c664b7f24b935ed5db5dcca2981fbcbd","ssdeep":"96:MnYMEIBo58Jfj2IG1vAhTb8GntQMQMP1P+:hBh58Jf6IG1vAhznthQMV+","tlshash":"edb1528970d1b4f502a7c2a1412b9048fae2981d0554f8e07bf8c7a56ffbc4c66b6f76","size":5343,"data":"","first_seen":"2025-06-19T00:16:51.384208Z","last_seen":"2026-06-19T16:29:07.376968Z","times_seen":4389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83e9b29f0086bba50d653f1cb8dedc3c","sha1":"f8f89387c9aca9d524bb638eae457d4659efca52","sha256":"2ac3af00c283c0b2ae6108fa83a2053e51274a2a812fb063916cbe19bc4f96b5","sha512":"c8018876ee96b4600ae32342ec6d21b452ad4109d605fb838f146b734de274ef5e37179567a2c67ec828dc1b673364637fc82e7dfe8f7adbb18e20555577160c","ssdeep":"3072:pJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/Yvr:pJLC4dkEUYnafpl9v8cIWybV4y+oGMMG","tlshash":"fce3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","size":143709,"data":"","first_seen":"2023-03-14T09:12:04Z","last_seen":"2026-06-19T18:36:02.058146Z","times_seen":94074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/pro-elements/assets/js/webpack-pro.runtime.min.js?ver=3.32.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"43abd82aa881007971771ac49d630bda","sha1":"2f5ef2649aa46e4b5d287fcb1dcd7e2978794867","sha256":"08dbf7f9cc229ef82c0510efcd13959cae41e3194cc9f598623bf083eaa91dbf","sha512":"38f1d6d468b4e604c7e243fb549f815b160d07980ea78803af551cc33feb22a343bc21c1ce6d3810c3ba62bfad8d0fb3b67845bcfea6d106100af968e9c02ac6","ssdeep":"96:CFbdxwrudvR4x4boFkEO/HfOYAWY4N53hsstJQPCl2e/VtFVKdpYQGK0Vz38k2:CBTXdve4boFemUN537MPa/pMdOQ8Mk2","tlshash":"0dd154980548ad2b26e43ad8b19b6b741a3dd0323c5ad991e611eddc18fcfd183ea532","size":6248,"data":"","first_seen":"2025-09-30T20:29:17.493917Z","last_seen":"2026-06-19T15:53:02.039446Z","times_seen":1267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-19T18:48:42.607756Z","times_seen":843399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/oceanwp-main-js-extra","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1160feb28cb272dfc9c7f7100ad7b1cc","sha1":"73449753d750f339e8dfba953f1c7747aaaf01d4","sha256":"ab02555b66153af8bf3603042fe30402dab6f45002d8e35269c519a9ef796a0e","sha512":"e62d75d0ccca9f6e4c0eb760c8ccfd25c97819f9728388e1ee3a58e55327cbaf71d15d0cdde52c99567acc1b43e113b5a410b762f2b98851880afb40ee265088","ssdeep":"","tlshash":"bc519e22f07bac792e1f6ab2e4dd35cb799e849dd08195d5dd2db24d03491e9024142a","size":2674,"data":"","first_seen":"2026-06-08T13:29:08.277465Z","last_seen":"2026-06-08T23:09:24.355305Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/ow-slider.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f249575b37232d51921e82536004592","sha1":"5799b78581ed5968346cade85389b82b2d6a304d","sha256":"b817c9b9bb557b34222c4598548f3569a7c8f2bb30b796a6c92d47dd740e4271","sha512":"63db83f3e2126724bbc68a12f3bded2b8f0eeae4216ce21c94f8774aa2f4a507ab097910937e5f541298ec7a01ad2f5eca36adedab07ca967706cc501e0d55b4","ssdeep":"","tlshash":"5a41318f71e074e6035752b401afd24666b1ecad5206dce2d36857f829e8c1e4293f79","size":2002,"data":"","first_seen":"2023-03-07T01:18:55Z","last_seen":"2026-06-19T16:29:07.409304Z","times_seen":9101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/elementor-frontend-js-before","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94339635fce0b5e9a7087d6483035280","sha1":"5724462d4aa87380a6ceee24fa0816b71d02d4a7","sha256":"bd0275106b54c59b472d883d9fada1b9eeca5295ffd87ee36e5120d7430749f2","sha512":"6dbcd9e6cae785d3836f8fe659169dce10bfaae20e25eab2acca0c9255f4b2d231f7e319767bfaf5f6b20610227da0d6074ecb41f15f4c39797df068e15b2811","ssdeep":"48:C4AFkPuRv/1rOZ4dXHpMut3IZPeCWP5JixJBts9/f/HGRA3MIwELHhyps:C5qPCuUUeXRJwJBa9+RAlFyps","tlshash":"daa19321fa456e7f83d3dbb43d27be07986c0925d04078a4f8ec886c10f69693207e97","size":4884,"data":"","first_seen":"2026-06-08T13:29:08.281938Z","last_seen":"2026-06-08T23:09:24.350574Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/elementor-pro-frontend-js-before","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"74b3823313b8d97c1929ef7bb527ad24","sha1":"952da49585716efae1b4323edf4081d8e1471b3e","sha256":"38d8907639f01eafd1672fea5a4fde42d427b49cd7a91db7f75891f76fb68df6","sha512":"67f1bd242b3b86abd90f586ed29bb7c6210103b55fc0c78418f11d59c7c01f6c000b6d35cc3cad9b1b6f9049d4dc4efb34d7896c56de42f70971b8a4ce962a44","ssdeep":"","tlshash":"af719c56da215e2493dea7f871ca3a6f88800732d5d4b90d56dae06041f7cdef0562f3","size":3530,"data":"","first_seen":"2026-06-08T13:29:08.283142Z","last_seen":"2026-06-08T23:09:24.348774Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb723d749493893fef00de4a102d5b14","sha1":"83e4d476c5ce53d9fd2a5f07a72db8395c5be20e","sha256":"5025f2112d7c4786e6cdd0d8becf512b1a989a81c5f37fa072c3ca944ca9211e","sha512":"bac6e6754071aa4499cda15909e69619377a5f862a69a99ad4b5577143b8bcadac6ddafbd243f0754f6602063c5bc3c629027c5f767c90d71861b7952764d479","ssdeep":"","tlshash":"c411ccf3b7dd907fba9e6d66593402cd5a1d90735c110a5bfeac3575cc8442534b1d40","size":913,"data":"","first_seen":"2024-04-17T16:07:41Z","last_seen":"2026-06-19T18:47:25.168215Z","times_seen":14739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f43cdbd498db48b651f7e099db687d93","sha1":"d72c0c17963d9c0adf407bb5078641c0fc611ddf","sha256":"4b693088b5d178c1f65372b7c06024a7740684faf65a98b2a722a8b857f5feb8","sha512":"05a9a402c51d94b8a306158b3342a761ffdf6c496798a4c201a0604ddabc7a54a2a3988d28930e368ae42dd0d73c6d0c43e179006e0d425816fc616b67376f55","ssdeep":"","tlshash":"30f09e22b07bac792e1f26a2e4dd35cb795e849d908195d5dd2db24d03491e9024142a","size":506,"data":"","first_seen":"2026-06-08T13:31:06.17796Z","last_seen":"2026-06-08T23:09:24.351595Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"15234b2530d3cbc177db0ba3fac51f66","sha1":"dac6cc12ea277e436c4600bb1475304fdd89f257","sha256":"1b8ecaeb849632fba885f47d33bd77bcca4173e44de4076640cf0e2908676b68","sha512":"10020b5d7ae766f2707346dcbc46775dbc9f6ab5f50ecbf6681872f868a69ce846652f906c51c7e4813b3415dc978f8de1a445bb510d7739e4199c76f0fb13ca","ssdeep":"","tlshash":"9451c4217a456e7f83d3db843d27be07987c092590407ca4f8fc886c10f69693207e97","size":2699,"data":"","first_seen":"2026-06-08T13:31:06.181956Z","last_seen":"2026-06-08T23:09:24.352546Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-06-19T18:51:22.428798Z","times_seen":9196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"287d0ea0e60c56ecd329b63dbec58354","sha1":"6c5573f525a6df6dca8e53c46dd9ed30a65653ef","sha256":"8112a9fd6f56eb636e9eff46a47e93db2f07c01a2e6a196b6905dee876495c03","sha512":"2d4765f7d77eed166419e92f69af0d7ddbc00ee807a5a63c042ec570a837baa3379de87a1af78018b3ed9dfd47bc495cad4327a85916c7871dad56ccdb176428","ssdeep":"","tlshash":"6d21b8562a215e2493eea7d871ca3a6f8880073266d4b90d56dae06041f7cdef05a2f3","size":1332,"data":"","first_seen":"2026-06-08T13:31:06.183353Z","last_seen":"2026-06-08T23:09:24.354321Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/theme.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"39c95a10f0a6498ddf094b00fceaab43","sha1":"3a6034a6441bad661c50627f5c7b3136ef3ddc48","sha256":"68918493fab5f333343716eae17cc90f989906c3021984e9ad5e95e36aef4a63","sha512":"91a56c1bd397b58b782968ae76db62cd21a3ff2beac13deebbfacd47f20d3f49533321efa24ad0ed881973c5d84616028232215d629150d30ef04a2770f2aea0","ssdeep":"384:XSmyITkZy+KMzEF6CCIbYrAcIy3UFxVjxRnRx8:X0O1MzqCIbtcb38/8","tlshash":"a3926384b291b4f101a7c2a541bfe24163b0ecae1506f86177fc8b616bd7d4d22b2f76","size":19719,"data":"","first_seen":"2023-11-07T13:49:14Z","last_seen":"2026-06-19T16:29:07.412149Z","times_seen":6787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/drop-down-mobile-menu.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81ebdc3c76ba496273d4546b35572548","sha1":"e0c60aa28b1e19af241d7484f3ac8666b9224034","sha256":"244fc0d1bd29eae154fa9346040f14aad289c584856a7522e25ea1d3ba34780f","sha512":"83fca1a749a2e1c1cab0fae02ac39c5d78725b39147093e12d24da8202a46d9e1ba432d172fb03b9c8fb5da5f0f30ff8ee87b8caa1088edb3b0f8c07eeb5ff0a","ssdeep":"192:vwf7yntTLIZyXqzzDeIHf/J9RAwtgdPsRWcOUOIYXkKitb7Mb9oFZEvX2g:vC7ytTkZy6f9RtOUKy0b9cg","tlshash":"6662ca49b251b4f100d7d2ea027bd20573f9ac6d1406e09073b89e687ba5dde63a3f36","size":14581,"data":"","first_seen":"2024-03-16T19:45:20Z","last_seen":"2026-06-19T16:29:07.364533Z","times_seen":5335,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/drop-down-search.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7fa7b324baead665d76a2ffeab04152","sha1":"a955c9646a728f8250f30e13772d129a3e0e2877","sha256":"ca63a56d305249eb4cddeec8a6501010e206e110445f46572be1f2d56a1785fd","sha512":"28f9f7809accbed5769e8b94bf76910efbc48e13d68752de27e012c3a73af25c2d29c7ac69f98fa533986a41df5fc492e6c8351e463df43e895d3e01a927cff8","ssdeep":"96:ng+t3RyPsefIJ4W58JbTfkpPbSrM2L5oCqMC9ZqTg:vXf8bQdbwM2LrgZEg","tlshash":"01f1368bb4d0f0f2039791b8423b81466af1987d154ae8e12bf88af13bddd5d9153f26","size":7540,"data":"","first_seen":"2023-03-07T01:18:55Z","last_seen":"2026-06-19T04:20:28.941114Z","times_seen":5646,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/scroll-top.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"679293c5f2184c6a335f0ee58d691af5","sha1":"2c93237d0e23d4ac94be43320b581a50365bd959","sha256":"b27375090fa7a6b1b7953505ccce5ff008db3c23196579db5749f71f0f485304","sha512":"02455439ad845b00c2586ab46fcfccffbd53ab29d4fcf938f03272ba64c598be62390a4ad5c4e56a057bf6d323d539f32e5332b64e02371f11d0f2947f08928f","ssdeep":"192:iPtdryDtWLIZys25zcqKjW5dOM9a6NMYREX:iPtdryhWkZyR9v095","tlshash":"c602964db381b4f112d7c26a427fd30671f55c5e1a0de1d0b3b8aab22654eae6223f35","size":8989,"data":"","first_seen":"2023-03-07T01:18:55Z","last_seen":"2026-06-19T04:20:28.816605Z","times_seen":8310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/pro-elements/assets/js/frontend.min.js?ver=3.32.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b77664ebade4127a4534d187d1bfe44","sha1":"e46448f4d96507dbb1b98e1607b79cacddddfa26","sha256":"f0484fe31f9121c5a76875d2726b841b6d9fc5802d9c8bad0119bb21a888f851","sha512":"2ef6042eeddd5bc9c3ee0f588954c3d29adb6f28112556696eac3ccfd68114ae3c6bb0b8a7732a18fd59e31a16f35df8126f31716f2f9430db091e37b9977d22","ssdeep":"384:Czxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+TSQDTWmMo7YtDTVHJiMqkoh+vFWNJ:Czxw+EVxFm6cKikdHd7taQtHuGJswg/J","tlshash":"67b2d9023163ac7a50cf815be467420e7b374895740570ed7abc6cdba5b8e9a33ea335","size":24288,"data":"","first_seen":"2025-09-30T20:29:17.485827Z","last_seen":"2026-06-19T15:53:02.017001Z","times_seen":1272,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/pro-elements/assets/js/posts.aec59265318492b89cb5.bundle.min.js","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa4c92a0f0338712aef385eb27e7af9a","sha1":"8de23ffbedeac7747d2e33786cef86d3ca64aa3d","sha256":"a8ad381a9c6dc02de2a0278e3a3b4d1ee15cdc87c7dcf94baee84d156cc64efa","sha512":"e2e5e853dffc94bf73ca5ad58f8924b3926288e8acdd2ebcd45f161c3f7375f734fdd7be698329395ad2cddf5a7c06e9dbde3ee70d216e9ad2961f4ce9e5f009","ssdeep":"","tlshash":"9f61865535966c35ea8f41c7b80f010e6e022bfaad0570d9ba69d8d68af0fc73361b70","size":3317,"data":"","first_seen":"2025-10-02T23:58:14.339914Z","last_seen":"2026-06-12T08:09:06.259255Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-19T18:48:42.64376Z","times_seen":916116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.1.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d490d1bad7e9038b5741f77a7bcee6c","sha1":"64f3096d6f0121949d2b88ef19d4b9adcf38fd89","sha256":"8dd3674bae946e2e04bc962443f0994d736a761bb28e816c20aee6391ef242ed","sha512":"9860efe572a0bda18b274965bc81ae0f513a1c826eeaf9b67cc7b6cec2b78164a67ee15f586e63905cf6b8cc520b00039ff7e9e1460b32dd0977dc4a85cd24b2","ssdeep":"96:+nsL0Z9Z4JfrjqyWiNDy9XOWZp5Rm4leN8EVrzLyVx2UlKBKGarNcl8/2:WsLGyrjiiNWZ5RmHFJW6x7G/2","tlshash":"1cc161941a54fd2b21e139d8e01ba775253ec0373c1af981fa32eced54e4ed087aa531","size":5819,"data":"","first_seen":"2026-05-12T16:52:28.591446Z","last_seen":"2026-06-19T18:51:22.379753Z","times_seen":6091,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e73824b7ab9a4f88f98e0530b43ede25","sha1":"e95c97fa934f0cef056cc9d7be3aeacaefbbfd33","sha256":"46668f561bd01aaab7c0f42be3d045eb9c3eaab6b9f5ae4a9f6bcf28fa22c679","sha512":"973a620e6d69dcb9b528f6a446f977cb8401dbf0b7b8df3aebd58e8198ab301331195a02967ef260ac44754058b6b9d82b7c61d4832e55d6ffb056f64656b9d7","ssdeep":"96:0E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:bhgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"8bc1a7c975daf056235910a594afb005e134be2870deac00aae0c4957eb44cdb1b7fba","size":5697,"data":"","first_seen":"2026-04-26T21:57:59.028052Z","last_seen":"2026-06-19T18:48:03.550507Z","times_seen":19286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-i18n-js-after","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"744f07adee2cc87e96a5502c8c56f350","sha1":"b6e21c206cb410f740c00d3debc5dfeb013222ab","sha256":"45ec4f4347432285b3825e9a9ca2ba1c7c9f93ca9cafb6119139fb41f8ab9fa0","sha512":"24310efa0195f545993af9a5bd5dd752e9b66ebb40835ced7b012e88a90b15e09c8f7ca1c679f1756307cc4e925192c7a7f3d16d0b03326be29a21db640555c5","ssdeep":"","tlshash":"754112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":2291,"data":"","first_seen":"2026-01-02T09:54:04.633336Z","last_seen":"2026-06-09T18:46:03.906203Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","size":8481,"data":"","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-06-19T18:47:25.064233Z","times_seen":128423,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.1.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c6aa09d0faf7577c8ae64d43b8241ad","sha1":"9d31e838cc042539556ca9223a635349f6e4af35","sha256":"1842d6e4d3c7399fdb01ab4b0a7dd5c1d9c096110de0532181ed581f14e9e813","sha512":"d754acb067d44f5fd9648cc63b6da0e95166a48d50a25dcfb378a6a5cd8c94334413c4466e598d01830a1cab6b183cf4812ac68500ac8e6d64ceabe45f5c46f3","ssdeep":"768:D1c+6idHZRdzM4ZBOBTmduNFXaz1EfcJR8RjDKv//Dk3iHVgbpMYMLKEnzBc5Gkl:ZcURdzMMBOB0mFrcJR8RjD8/xHVlqEni","tlshash":"0de208523296e866069f48a3f0231119f3775dd9b80af0d5b2bcdce5a471e877362b34","size":32098,"data":"","first_seen":"2026-05-18T18:48:00.243251Z","last_seen":"2026-06-19T18:51:22.361619Z","times_seen":5940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-19T18:50:16.776882Z","times_seen":275273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-06-19T18:47:25.047242Z","times_seen":306206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/pro-elements/assets/js/load-more.8b46f464e573feab5dd7.bundle.min.js","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"57c31334586e6038b0d341260ee278a6","sha1":"c502a0c613689023ad52b8bf96f1e812a30d0230","sha256":"0949addfa283eabdec86c8ed468a9698d3c6d137ff08fe68378d345d03faaa8d","sha512":"d65c2d19d1811c6a6d3d6d77c80d16e17406e439177d889555468b6fbe1fd07e3f049be2ee843a6fad4c3946c8b244cbf143cff156cda1d6f0cee2680da05a75","ssdeep":"96:CFJdUscSAlxkdTRTgnwblr4nAV/N2/k7QTFdoBQZtNsaXC5C72ZscsDRsEQ+tw0H:CXdUsc7lGd12UNgbXo6tNsaXC5CyZsc+","tlshash":"a4b1df58f056ac39554f41fea04a3347a5252a7f5090d9bebaa88cdfc139ec432393bd","size":5346,"data":"","first_seen":"2025-10-02T23:58:14.575281Z","last_seen":"2026-06-18T05:44:14.791154Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/vendors/flickity.pkgd.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a54e842e3e395e6b9fcf6893283a105","sha1":"e96d27e9c036db495b6fe00cfc8a0371d7aadd74","sha256":"472c7748607b5b76986bb54ffe3fe79ea954f61705aabd2a0fa80d13b2eee46b","sha512":"700f20720b5827e258a947be8f625797a2778db6a670c41f3ded093a64060deb1c77ecea5f0c209de0f39e239dde4f0f70eec4b535ba8c0ecbe01871d37497a0","ssdeep":"1536:Xugq120spmYjfsSqxHowWtsSvURPQH0vE6YxkDda3x1KxuCYOjF4kN:egZ0AOSyRPy+0Oh","tlshash":"a843b5493281393981dff1b7212f860ab2b7a4ad2441819cf9a4ecda5cfcc49547bf79","size":57513,"data":"","first_seen":"2023-03-07T01:03:46Z","last_seen":"2026-06-19T16:29:07.400654Z","times_seen":9212,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/scroll-effect.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc80a85d2d00a0f7715521e51bcc7ed0","sha1":"c5571ce8b1a3159023525f102033c9cc271a1087","sha256":"bfcb7a468fc42a0754f4e0b5e9962badbb4ef44ffcc4f24bacbd150f98afd9e2","sha512":"18c1511ba273b1ad27b91e260951e97738272699d1ad511f5422987f7dd8d3192c13e705cef34496cab93e3581dea70e5f5a9c87e3ddd113bcac189f4e931c9e","ssdeep":"192:vQkEXyrtuLIZyN5zzDwjLcNVBoUsawuQjM4i0yju2993uwGQwbIyTQqXAeMZaLEV:vLEXypukZyrK00ac+Ogt","tlshash":"b142dbc87281b4f101d7c2aa017fd341b2b5ec6d4909f490b3b4caaa1b90d9ea363f75","size":12387,"data":"","first_seen":"2024-07-15T17:43:34Z","last_seen":"2026-06-19T16:29:07.412655Z","times_seen":5817,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.1.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3543601e9c09c9b8554ec6f6c8a2174","sha1":"8b05f21356996037f9d17fd012f43393238ac53c","sha256":"c66f47147d5fe3cceeaa47a93ff7440a328f859b049deec2f9d8f414e9137474","sha512":"3b5d80182a9b187171ceb59b4d384ad6b5e59dc0f5890cbdc0fb01109423a3ed847cfa88d67a0db8c84ed163985fb035b069f0530cf9b7a579c4ed47e67f56e9","ssdeep":"1536:yCyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:s+uhIAu","tlshash":"7633d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","size":50602,"data":"","first_seen":"2026-03-23T23:03:30.149895Z","last_seen":"2026-06-19T18:45:40.836332Z","times_seen":38572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://casinoseon.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":0,"column_number":0}]},"http":[{"url":{"schema":"https","addr":"casinoseon.com/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.533Z","timestamp":1780925437533,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 21 May 2026 14:19:05 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8k98w0KIj4aImvOIBozmiXEnKdBWulkhuPTIa7LYw4eoSL7tmvNdf03xe9Hd8zjZpLbnB0V4QoXtEEJkIWN0I8m9xnufyTpe%2Bt7VfnB1ekG5j8dCoOdsIgg6oP%2FpyhUaQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1712\r\ncf-ray: a08840909c6556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5015,"size_decoded":2529,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"0174a320c4dd06b3f2871de897acba21","sha1":"b9ff75dc08d6030996eba8e3bef085303297360d","sha256":"1d231f080d1df633865e5a079d8e4e377a6c6b13b3a67be8e271b848eca1b05f","sha512":"936bd3b0db0b0a33d20758b6067b838ec36632b08d58f6a8aa7345cb738ecee15340711a396f592c7f046b1b69a6fc312f76a5708bc5809dcf5d4564de7f47ef","ssdeep":"96:pu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:pGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"34a151c43542b830e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-04-26T21:57:59.026054Z","last_seen":"2026-06-19T18:48:42.614195Z","times_seen":19680,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/pro-elements/assets/js/slides.c0029640cbdb48199471.bundle.min.js","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:38.720Z","timestamp":1780925438720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/slides.c0029640cbdb48199471.bundle.min.js HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 09 Nov 2025 06:13:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:38 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fN5qWr7dZYpD%2FAHHJXyxDcm2ujg26CqZgCaoeUiNBfXtH5fmGEBj0B1WYWxZN0hv%2BQbMTBv2cXDPbze%2Bfw2%2Fr5oNmoBOA7Bl1CHTSGTG%2Fp7fZbQeaEncg3ptX8zU0bdQLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1363\r\ncf-ray: a0884097fce456be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3926,"size_decoded":2186,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3882)","md5":"ae71a8c3cb52a02986809bf59779d6c6","sha1":"cb1d11633cf0501ab1d312547da0cb9317038515","sha256":"d0b9db79b39bab8409fffaff2f1a771e63763921fee49c268cf71a5e436d9dc7","sha512":"401bcc5fc89004872c3ba4f5294be17aa2258571172723c69302129b35bab7792da997e5d7d4eb93abd23972f7704dc04821ef2aa3c176f9cd2a2f151ea909b4","ssdeep":"","tlshash":"9481978230413c7719ef89a7301680619fa107c47902b2fe79e9889ed0bb9a6136f7f4","first_seen":"2025-10-08T10:41:46.053886Z","last_seen":"2026-06-11T21:52:50.201369Z","times_seen":99,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1744188347","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.504Z","timestamp":1780925437504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1744188347 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 09 Apr 2025 08:45:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=76S%2Ffpmc0pewSSdcS%2BSwr78g0YTAiPHFOo1FdzJHNn0MEuqs2D%2BDjtqz8vYUA5qKDuTW2myl4Eqp%2FRNOtugJYbX6eAhMX64VF74l%2BXD8pJhR%2F%2FN8vV6p9NqP6t%2FhzCgUwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 705\r\ncf-ray: a08840906c4e56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24759,"size_decoded":1519,"mime_type":"text/css","magic":"ASCII text","md5":"befec88c3aa3103e8f382a40186f1173","sha1":"6d61375cbbdbc11b2e19bafbfa192348eeb0330d","sha256":"2da17f8132dcd4320e8ea65efcb8d51f15f114f89259d8b7ff7864c9ca8708b9","sha512":"efbd0f942f5a2c7d1907b0467a3daddbe7a9a0546217e074f4a9c4088ed67f23f4eb342c3315b1bdf56c45f948aaf8afd14e73330fd1a2862d38da5e28bec8c0","ssdeep":"768:brPrDryrorkrRrM4kVTn6dJVkaOzKei7t58D37icoNYsQBnTup9BQOaHWie3xFga:Xjv2ocZM4kVTn6dJVkaOzKei7t58D37y","tlshash":"a2b2a980548a1101a7978cc573de7f25e84d5085b080d5ee5ffe1cd8adebe2232a27de","first_seen":"2026-06-08T13:29:08.244082Z","last_seen":"2026-06-11T21:52:50.23626Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.509Z","timestamp":1780925437509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 09 Jun 2023 09:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lL8pZTyJb9SodYQkrAICGBzcvUhPfEZqj454gSetRa1gVL0bZe1FhOOwVfu7iHRqdt9NF4%2BCw0e8fgfpHxrDkfMtRdLuBCkTN%2Fb1DFcz%2FmL2FeCahpvmjZKQfRmdQNKR0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 4678\r\ncf-ray: a08840906c5156be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":13577,"size_decoded":5497,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-19T18:48:42.607756Z","times_seen":843399,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/uploads/2025/04/cropped-Casinoseon-min.webp","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.510Z","timestamp":1780925437510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/cropped-Casinoseon-min.webp HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sat, 12 Apr 2025 13:33:10 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wx0fpH%2FjWZivNe6nFobvSCH0ckmn5yfldrZkdhFkTUHNgC2gZSs0sxrSNJMZzura3alxEV6otadniBXZosKx%2F6f7oYMun9DGtgUhrldmFWbtVIYOvI7Cxr3QiSElvZCCjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 6602\r\ncf-ray: a08840906c5256be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6602,"size_decoded":7359,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1ee895cae93af40fd9001cb9d030007b","sha1":"5592cf622ee0cd5a68366666f77bb53f7e2ff6e0","sha256":"dd2a1ddb83de8806a1a66e559af2b6cb8cb6a8d110e675443ff38a744dc8f269","sha512":"2e34f35adad2d9ba0280b1a804b0fbe84824ce06df05d1d02e9226158107c6e397d9ff77580a901c2d8bcaa65acbcf22f8b3106ee0c9655d394f18986e8cb621","ssdeep":"192:YwTWsQrodoF8UWyPDRp72xVcHb8tOschWF:YwTWsQro6XWejQt7chW","tlshash":"7dd1af1637776c06f6a30770620d1a8eb3974b9de23bb409d0446b9c84758d2efce4a8","first_seen":"2026-06-08T13:29:08.252808Z","last_seen":"2026-06-11T21:52:50.198106Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.512Z","timestamp":1780925437512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 11 Aug 2023 22:18:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17888\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lVu5n%2BdeeGMp4eSAompvxuT429KEMnL7Lw%2B%2FQuYi6YCWakTGY%2B7fw3s0m6dUm13YB46ANXDs0aoxaPuRTWkFzpK046i3U%2F6C5Xj9m8nMS%2BOaAZWed7rs2zsxEMi%2FVtgwGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1687\r\ncf-ray: a08840906c5356be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5520,"size_decoded":2514,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4358)","md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-06-19T18:45:40.814564Z","times_seen":187551,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/pro-elements/assets/js/frontend.min.js?ver=3.32.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.535Z","timestamp":1780925437535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/frontend.min.js?ver=3.32.1 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 09 Nov 2025 06:13:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K2RwtOQXMA3eS1ODINuKoB9rMfUm6ItBqszrGXHJOoHyiribxebJIT9y4H%2FkhlR7Fzr7LTN3G3TU9%2FQ3tfziHaPVSaRNwF4iEquIhBKO3u3d3BYroBDxQPXWo6epmmaGVQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 6325\r\ncf-ray: a08840909c6756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24288,"size_decoded":7142,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24244)","md5":"7b77664ebade4127a4534d187d1bfe44","sha1":"e46448f4d96507dbb1b98e1607b79cacddddfa26","sha256":"f0484fe31f9121c5a76875d2726b841b6d9fc5802d9c8bad0119bb21a888f851","sha512":"2ef6042eeddd5bc9c3ee0f588954c3d29adb6f28112556696eac3ccfd68114ae3c6bb0b8a7732a18fd59e31a16f35df8126f31716f2f9430db091e37b9977d22","ssdeep":"384:Czxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+TSQDTWmMo7YtDTVHJiMqkoh+vFWNJ:Czxw+EVxFm6cKikdHd7taQtHuGJswg/J","tlshash":"67b2d9023163ac7a50cf815be467420e7b374895740570ed7abc6cdba5b8e9a33ea335","first_seen":"2025-09-30T20:29:17.485827Z","last_seen":"2026-06-19T15:53:02.017001Z","times_seen":1272,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/uploads/2025/04/5-min-18.webp","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.571Z","timestamp":1780925437571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/5-min-18.webp HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 16 Apr 2025 08:43:20 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2BunZJBqNsPyLbcD2%2FKGIu5oXN9rxqQBqu9hswS9M4Wzss2u9FjFKQy61iuLGm6OF9LvMBY7IyvxS66JEhUjEIQwbwQWyX90gI0cUZnoR9VlF20g30H0qFQgsiELbtVhyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 125438\r\ncf-ray: a0884090cc6e56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":125438,"size_decoded":126197,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"98bcc0c6799d59f5aa701ce1a1e0f7b7","sha1":"16c6fb87a45e634cf8369d8919e04fc2c35daed3","sha256":"c74c44608c84a3ab704582146a272416158ee561a9f87420edad5d6f88686c74","sha512":"2d2a693d70caa3d87ab8fe5609772d22d774585cfcdbf0a022698b37627a7d14f99ea7814ebdda68b2722f49ac7f95fbb6869aa48c0657d1937fc9d3d6f09125","ssdeep":"3072:Gj0OgHebjSzSyZksgL8xTclMDTlPvdGiii2sB:Gj0ObfStkrL8P9vdPFB","tlshash":"cbc3121e22587dd6d70cd27bbd53d3c26c723426f07e3b58898de78a18c6a18868f56c","first_seen":"2026-06-08T13:29:08.241896Z","last_seen":"2026-06-08T23:09:24.340097Z","times_seen":4,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/uploads/elementor/css/post-10.css?ver=1779954721","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.499Z","timestamp":1780925437499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-10.css?ver=1779954721 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 May 2026 07:52:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yTJIqqBY7NxFwUrUFqS1RK6quL2uXVixRd6yaPZOGcNiz2QlarKndsB2aPIflixD5i0L4moNF6bjdr7h29LZ4klvWpw7QgxdDwlCU6zgeci7R5gC56rVGVI5Y2lEiad0ag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1916\r\ncf-ray: a08840905c4a56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14893,"size_decoded":2715,"mime_type":"text/css","magic":"ASCII text, with very long lines (14069), with CRLF, LF line terminators","md5":"8930472f7bebfcd19f272e075ce66c62","sha1":"6e3c907c7f3dbfdaaa19c97638befb7e64f4da2e","sha256":"723c03afebc98ac831d1d2ef0b4dfe88a5b1393804b924a0dded4d27400c62ff","sha512":"81bbfeab89331e32ca8810e8331b6d89b1291d3a7c029d8c25b9d7e268089240249bfe73a0b647191d8fb9e5ea294f102bb3b6b59a21d70b430b5c3d93221925","ssdeep":"192:QJK0jCuyuAajXYwJq0WFJA2tXqCGKktJW3TtJXY+tJuhZ0euGqCTnxC8qCFaU56i:QJrJaJMaA6mt1RMmDmWcax1126mc","tlshash":"1c62df947c479025b53f085fa003f5ec38a898cd942ebbe6f466501bf8f6ea573d4a18","first_seen":"2026-06-08T13:29:08.251963Z","last_seen":"2026-06-08T23:09:24.327099Z","times_seen":4,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Outfit:100,200,300,400,500,600,700,800,900,100i,200i,300i,400i,500i,600i,700i,800i,900i\u0026subset=latin\u0026display=swap\u0026ver=7.0","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.484Z","timestamp":1780925437484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:22 GMT","end":"Mon, 10 Aug 2026 18:37:21 GMT"},"fingerprint":{"sha1":"09:D4:FC:2F:81:37:26:42:91:15:6F:27:1B:72:A7:D2:1A:FC:31:72","sha256":"E9:45:95:A3:A1:F2:6E:F0:08:73:C1:35:32:67:E6:72:BB:89:C7:27:C0:8F:D7:48:6F:0A:88:7E:8B:00:2F:B9"}}},"request":{"raw":"GET /css?family=Outfit:100,200,300,400,500,600,700,800,900,100i,200i,300i,400i,500i,600i,700i,800i,900i\u0026subset=latin\u0026display=swap\u0026ver=7.0 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 08 Jun 2026 13:30:37 GMT\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7623,"size_decoded":1180,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f80b14ecf598320f3d430b18d1be789e","sha1":"819789473d87048f10ed3e7a9505478fd898371d","sha256":"0bef3f11e881c01a307529245da7d8387a1488babb6f5c2ce2793da47851f76b","sha512":"c03c6548b84c32015aa4927a3804d1449387c6d6d5018cd353a75625a6c6af79497ae1fcc1e3b959e3793033db54af101ca9801336d30ea2c5abd7493cb15796","ssdeep":"96:cOS0aRJc+uwOS0aKNNO6aRJc+uwO6aKNNO1aRJc+uwO1aKNNOEaRJc+uwOEaKNN1:Iphzpnh0AhbNh6OhprhwEhXxhWCh1V","tlshash":"a2f1eda1082ba144df970cc222ce7e33ef5f62516444d934affe1899ac6bd5a835770d","first_seen":"2025-09-05T18:29:33.889482Z","last_seen":"2026-06-19T12:39:44.50726Z","times_seen":1127,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":35,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=4.1.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.486Z","timestamp":1780925437486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=4.1.1 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 02 Feb 2026 14:52:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=98EO%2BEA8fzvutcqxWaOrDcjO3j%2Fp521JRnhE8Au%2Fs7VCd6XgTLBpJwItebYYuxgW1JSfwItJcM12auzfKoWh8ld1Sr6b4QxEt8C%2BCNW3%2FTjarAah8kSC8uzTkbgwIvtvkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 6613\r\ncf-ray: a08840904c4056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54666,"size_decoded":7422,"mime_type":"text/css","magic":"ASCII text, with very long lines (54666), with no line terminators","md5":"4fb5f7fc5e41f736ec0527b162519d52","sha1":"33697641c940c68153509fa7c9d7d0c3c760ce2d","sha256":"0a5d398672e25dc7f020f69df92a985481b248a60e301fee232d0c8afd648dc5","sha512":"5da1e9708bfdbd38beb7cee98d806ebc84b4d8337ce638a363d28461ebd9fda5189618bfa62167a5261ec2e98b02cb88ee4ff7bd5ecdd2d2facd480965e0c7a6","ssdeep":"384:Ws4J/8DEksCoI+SBQYO22/RmRs5Cz9TQXPTkvmGkvmCFldtraiIks05ArOk:dFLh5mP3RbrlDdps05Xk","tlshash":"17330da23d13b269226f442b82c7364c526499c1ee0375d9f944c523dafece63b36c5b","first_seen":"2026-01-29T13:38:24.653388Z","last_seen":"2026-06-19T18:47:25.065408Z","times_seen":53065,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/elementor/assets/lib/animations/styles/fadeInUp.min.css?ver=4.1.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.490Z","timestamp":1780925437490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/fadeInUp.min.css?ver=4.1.1 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 25 Aug 2024 17:59:38 GMT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JWRzjELzmwKq2R05hw1JHju2grZRtqyTfq7%2BMm8USM73biL3h%2FuSSvLoKCsJCVO0YRa%2Bb%2BLoKgFPHPl%2Bqcaou7mFLr%2BHKo8vfrz1Wy6sGIpqYq9sDWeu4sCceSVmfJxpuA%3D%3D\"}]}\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a08840904c4356be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130,"size_decoded":852,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"18b6260305b3bdc5100c937971d28906","sha1":"12c44b736a53dfa11c8286fe3ef05c2f64f47a47","sha256":"7263363f11b6184fe306b05a849db2de5a674258610578e594068bec72b4f2a9","sha512":"2c1751f012fd78fdf93ee1700536c117a4d9eac6fb442f3386aea7339f72ad2fcdf4835b309eafc6214da2c584bdfb47680291e191ac4b3721b21c32e5cdd2d8","ssdeep":"","tlshash":"78c092488aa4414d029a05fabcc4a951c53acbf6e9732edf7294494b4b81aad13892e3","first_seen":"2023-10-30T21:54:19Z","last_seen":"2026-06-19T18:51:00.769041Z","times_seen":41100,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/theme.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.513Z","timestamp":1780925437513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/theme.min.js?ver=4.1.6 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Nov 2023 11:31:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17888\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qEp2OG%2Bvp9ZNWyhKDKPUGW7f4mccTUDcxBaFWNjkQu7bu9ypbhxjGtJqdB25IpcfhuYEnzwn%2FFWuQqmY4XdOUfHRI91p8bj7dzpM5wWU8S4%2FWvvTq%2FXdpfwVhf9srj32mA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 3985\r\ncf-ray: a08840907c5456be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19719,"size_decoded":4806,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19719), with no line terminators","md5":"39c95a10f0a6498ddf094b00fceaab43","sha1":"3a6034a6441bad661c50627f5c7b3136ef3ddc48","sha256":"68918493fab5f333343716eae17cc90f989906c3021984e9ad5e95e36aef4a63","sha512":"91a56c1bd397b58b782968ae76db62cd21a3ff2beac13deebbfacd47f20d3f49533321efa24ad0ed881973c5d84616028232215d629150d30ef04a2770f2aea0","ssdeep":"384:XSmyITkZy+KMzEF6CCIbYrAcIy3UFxVjxRnRx8:X0O1MzqCIbtcb38/8","tlshash":"a3926384b291b4f101a7c2a541bfe24163b0ecae1506f86177fc8b616bd7d4d22b2f76","first_seen":"2023-11-07T13:49:14Z","last_seen":"2026-06-19T16:29:07.412149Z","times_seen":6787,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/drop-down-mobile-menu.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.515Z","timestamp":1780925437515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/drop-down-mobile-menu.min.js?ver=4.1.6 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Mar 2024 14:13:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T1116rTBs1scaSRN1zcQjZCoxx0VfC4UDgTCb9XeOCXulBnpuAaawReWMsZW%2F%2B6qVRBHUvm71JYEmMjba2Ld37fRUgKnbrgkDZT6btQiHQ%2Bg91pwX%2FBYRq6F6Bs%2BRGV4sg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 3542\r\ncf-ray: a08840907c5556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14581,"size_decoded":4365,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14581), with no line terminators","md5":"81ebdc3c76ba496273d4546b35572548","sha1":"e0c60aa28b1e19af241d7484f3ac8666b9224034","sha256":"244fc0d1bd29eae154fa9346040f14aad289c584856a7522e25ea1d3ba34780f","sha512":"83fca1a749a2e1c1cab0fae02ac39c5d78725b39147093e12d24da8202a46d9e1ba432d172fb03b9c8fb5da5f0f30ff8ee87b8caa1088edb3b0f8c07eeb5ff0a","ssdeep":"192:vwf7yntTLIZyXqzzDeIHf/J9RAwtgdPsRWcOUOIYXkKitb7Mb9oFZEvX2g:vC7ytTkZy6f9RtOUKy0b9cg","tlshash":"6662ca49b251b4f100d7d2ea027bd20573f9ac6d1406e09073b89e687ba5dde63a3f36","first_seen":"2024-03-16T19:45:20Z","last_seen":"2026-06-19T16:29:07.364533Z","times_seen":5335,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/scroll-top.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.523Z","timestamp":1780925437523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/scroll-top.min.js?ver=4.1.6 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 02 May 2022 11:58:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ch4u3mmcschc8Vvf0xzQhRFCD%2FV7qX1CXjhPtTMUBENZeRjL%2FHzHNpFhiayg4NHG5rMnGU%2BKgV0wF%2BXm48DzpxFZiM8KBgHLgYjSKrSv5lWclntVGRR6DrZWHGnSDSq9g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 2145\r\ncf-ray: a08840908c5c56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8989,"size_decoded":2966,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8989), with no line terminators","md5":"679293c5f2184c6a335f0ee58d691af5","sha1":"2c93237d0e23d4ac94be43320b581a50365bd959","sha256":"b27375090fa7a6b1b7953505ccce5ff008db3c23196579db5749f71f0f485304","sha512":"02455439ad845b00c2586ab46fcfccffbd53ab29d4fcf938f03272ba64c598be62390a4ad5c4e56a057bf6d323d539f32e5332b64e02371f11d0f2947f08928f","ssdeep":"192:iPtdryDtWLIZys25zcqKjW5dOM9a6NMYREX:iPtdryhWkZyR9v095","tlshash":"c602964db381b4f112d7c26a427fd30671f55c5e1a0de1d0b3b8aab22654eae6223f35","first_seen":"2023-03-07T01:18:55Z","last_seen":"2026-06-19T04:20:28.816605Z","times_seen":8310,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=4.1.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.487Z","timestamp":1780925437487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=4.1.1 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iuq25ko9pX9%2F5f3hDwBBWM6JalcBmDAEJeopjVvONZ8kain3CDnksbJIrtpJnqs2jG1wz5oxy%2F%2Fuy%2FO2u%2BnXVSdx3w3hYGxvgzWf3dNcaRR0FQPskGxpNMZQlKqSY8U3Kw%3D%3D\"}]}\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a08840904c4156be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214,"size_decoded":868,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-06-19T18:47:25.061546Z","times_seen":99875,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/vendors/flickity.pkgd.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.520Z","timestamp":1780925437520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/vendors/flickity.pkgd.min.js?ver=4.1.6 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 06 Sep 2023 12:38:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17888\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w8DCG%2B2hnE%2BmemG7MPT5g7dKhVQxET04qsMUFpOwTjbza13%2BHwcI7s4AcH7KPaq35ZxQrSISpNLHGFPDLl5irVPeT2De3ZAQOOXpyt3afPKtMSObXr%2FXN54FCpRrrEyEPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 13608\r\ncf-ray: a08840907c5956be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":57513,"size_decoded":14430,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21914)","md5":"0a54e842e3e395e6b9fcf6893283a105","sha1":"e96d27e9c036db495b6fe00cfc8a0371d7aadd74","sha256":"472c7748607b5b76986bb54ffe3fe79ea954f61705aabd2a0fa80d13b2eee46b","sha512":"700f20720b5827e258a947be8f625797a2778db6a670c41f3ded093a64060deb1c77ecea5f0c209de0f39e239dde4f0f70eec4b535ba8c0ecbe01871d37497a0","ssdeep":"1536:Xugq120spmYjfsSqxHowWtsSvURPQH0vE6YxkDda3x1KxuCYOjF4kN:egZ0AOSyRPy+0Oh","tlshash":"a843b5493281393981dff1b7212f860ab2b7a4ad2441819cf9a4ecda5cfcc49547bf79","first_seen":"2023-03-07T01:03:46Z","last_seen":"2026-06-19T16:29:07.400654Z","times_seen":9212,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/select.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.525Z","timestamp":1780925437525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/select.min.js?ver=4.1.6 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 17 Jun 2025 11:06:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H3lb6sWSICnOwitfe3lmkKSRCYvztlpBGyXAzzwe%2Fi3b68P3I1vMhHBWfvyzzq8Gd7%2BXlyLhy6%2FRCK0uBs4f1OFtoUHvDWtOKG1zqok4VrBkPKOOWd8sm2JWXxCTbJlFUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1409\r\ncf-ray: a08840908c6156be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5343,"size_decoded":2228,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5343), with no line terminators","md5":"7c14a78cb669b0192e5770f44af6fb88","sha1":"0f39839abe6b82e4cd2be4f4619ab9b29e6d5b06","sha256":"5e0ffb478350bca8d1f575673f7ba980c8b865fdc01a47b9a6e01fd2baabdac8","sha512":"b7552e2992af6067f0b1b1046b57ecd95cd246d30a463ce51110d3612ca1a2371a11a23e01a9919bdb1f7e77627086a4c664b7f24b935ed5db5dcca2981fbcbd","ssdeep":"96:MnYMEIBo58Jfj2IG1vAhTb8GntQMQMP1P+:hBh58Jf6IG1vAhznthQMV+","tlshash":"edb1528970d1b4f502a7c2a1412b9048fae2981d0554f8e07bf8c7a56ffbc4c66b6f76","first_seen":"2025-06-19T00:16:51.384208Z","last_seen":"2026-06-19T16:29:07.376968Z","times_seen":4389,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=4.1.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.494Z","timestamp":1780925437494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=4.1.1 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Dec 2024 19:19:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H1jm%2Fg8HG3JOLLCfq%2FaO3LSIkxOhMnuTZeE2Q2AJt5AyyPQxxpMzS6tHWdFHGnpVneJzgNh2S95xL5NExr%2F77FmPhxWKWJPyrvdHLUwHLpybFJ0%2Fy5gpuQOVBdZO94xZsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 699\r\ncf-ray: a08840905c4656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5486,"size_decoded":1505,"mime_type":"text/css","magic":"ASCII text, with very long lines (5486), with no line terminators","md5":"f8ab0c98754e13666d2cd378bd023dbb","sha1":"a5226ce1f5dd1eaba7a6d2490eb081bfcc861a0c","sha256":"196f351ce1a780302b50e7b2404023102d7f555aa518d62ec678829c4b7b1185","sha512":"4d78e7fa90bccdf3ac5c09bae6cf94f7f249df6dabb23a510962d1b96072de072a6f81ada0e70f9087a6c38d909aaa42fb5350f7c8d1fa7f90be7578fb2698be","ssdeep":"48:VbD0j9UWW1KebuS9OwVFd4Rd8JN6JnDYQ1I1kFYFsFaFbdFvFblFaFbpFvFbX:Vf0RH1f0qYm6qg3B703VN","tlshash":"adb18c823f830123635f4e67292357bda2280dc44997b6aad2e1ac87e2b5cf5375f854","first_seen":"2024-12-17T09:11:11.376513Z","last_seen":"2026-06-19T18:51:00.778956Z","times_seen":77070,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/uploads/elementor/css/post-18.css?ver=1779954043","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.501Z","timestamp":1780925437501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-18.css?ver=1779954043 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 May 2026 07:40:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:38 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a4ePMa8WyS3ElEwHyfXS1FkFaDeK8vjLNy1%2B1qJpj%2FEMKS5AwOVQC2lrXkYcT4bLg4qgUUyCEQjnF7NXvdiOPUUxotZnF6cqoBs4MjlCiqKr0575L7fRrryFrBVmQlCsuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 968\r\ncf-ray: a08840905c4b56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5302,"size_decoded":1770,"mime_type":"text/css","magic":"ASCII text, with very long lines (4622)","md5":"d69188ff77986e9189499188724a017b","sha1":"dd3afb81d803eb6e84f3d38d461de4c3fc02d58d","sha256":"e3eaacb83c7b1614b8a89210365869af3e107aebaeb06d2974749cb1e9593eeb","sha512":"3f22c617f5e1fed41cede59e98cccd0c550e18924c4d8758898c19f255fe0a007edc48cd90103eee7771d5e80a5b92db8fd6a34f9eec114a0fbe6c768d1d5537","ssdeep":"48:8VZ91Vh7V8LAnNVc/yrrVTVWCR5qCsVMR5xdDRV6Vd5HYVaR5xdDRVAVH5HCWV1R:qqLAnvrDqCbxs7xOXY+7+Ixx","tlshash":"39b18d703c03522ab23f409f14136a5c2518dccbd52e2ad9fd6d6663fbf9d8137a0998","first_seen":"2026-06-08T13:29:08.239851Z","last_seen":"2026-06-11T21:52:50.216099Z","times_seen":5,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":580,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/vendors/magnific-popup.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.517Z","timestamp":1780925437517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/vendors/magnific-popup.min.js?ver=4.1.6 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 08 Oct 2024 12:29:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17888\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fFjkvxpbdJlwkTfj0kTH%2BaGN72uA0GU2zCwX12YyteLrtaXmtJ94h%2F9DDVr%2FOWJLi6JWV1Q6bb1t%2Fv%2FQID%2B2rldHv5TYdsu%2FgldGYvqmXspiHrmiwePrA0XEI6YLFmI2kw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 7209\r\ncf-ray: a08840907c5756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":20864,"size_decoded":8036,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20735)","md5":"a2578a786b481cc3f0f602615ccdc871","sha1":"6b2e182c99a0065ba1708446813683acc6e66202","sha256":"5a25fcee2abe666889666a26a4ee6b0eb4e2a1a7684e3a5f60be9b4e35d71c2b","sha512":"83d456ffec428055c28c820fd036e629c821e301ed147e2dd5f120270594342e4e7159fcead6740412af1fcff8f49bfe289484e72a91a2e731599c9e6acb3975","ssdeep":"384:yK+Ypwhc1sBEVEtk94tBnKIO46FbUkOK/NF0Sv/lZzZyQtdhTZF5ZFB:yEl73MoUkOKv0GMAdXF59","tlshash":"dc922ca4f161b27397e361b4188f382c367a9922cd078412b65498d4adf8fd89237f7d","first_seen":"2024-10-11T08:17:09.441057Z","last_seen":"2026-06-19T16:29:07.365063Z","times_seen":5459,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/scroll-effect.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.523Z","timestamp":1780925437523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/scroll-effect.min.js?ver=4.1.6 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 12 Jul 2024 16:11:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17888\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lwFx0xpkUnQGFUk7UPG97gQtyLIo654yW8Onxp27DqjAcMr3m7J13Yf9sj3ghP5%2BnX%2F%2FmhR7BCeIoFINeqrnN3FjU6TRcvDVKnqN5%2F5KlrH62pySJ4CwvTX4rksL3e%2FiLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 3014\r\ncf-ray: a08840908c5b56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12387,"size_decoded":3837,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12387), with no line terminators","md5":"cc80a85d2d00a0f7715521e51bcc7ed0","sha1":"c5571ce8b1a3159023525f102033c9cc271a1087","sha256":"bfcb7a468fc42a0754f4e0b5e9962badbb4ef44ffcc4f24bacbd150f98afd9e2","sha512":"18c1511ba273b1ad27b91e260951e97738272699d1ad511f5422987f7dd8d3192c13e705cef34496cab93e3581dea70e5f5a9c87e3ddd113bcac189f4e931c9e","ssdeep":"192:vQkEXyrtuLIZyN5zzDwjLcNVBoUsawuQjM4i0yju2993uwGQwbIyTQqXAeMZaLEV:vLEXypukZyrK00ac+Ogt","tlshash":"b142dbc87281b4f101d7c2aa017fd341b2b5ec6d4909f490b3b4caaa1b90d9ea363f75","first_seen":"2024-07-15T17:43:34Z","last_seen":"2026-06-19T16:29:07.412655Z","times_seen":5817,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/pro-elements/assets/js/webpack-pro.runtime.min.js?ver=3.32.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.532Z","timestamp":1780925437532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/webpack-pro.runtime.min.js?ver=3.32.1 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 09 Nov 2025 06:13:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17888\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R9FYj2r8RvVyhFkBO7k5P4WoG9t0jC%2FMwpzMF9fsGnlGhxUCeO1pF9T86%2Bybe42iNaWgCX5pnL08m07P9B5qPg03TJ3o1pdRRYCoBsRldhqDuWuUe54ANCmjp4eX6HKeGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 2625\r\ncf-ray: a08840909c6456be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6248,"size_decoded":3442,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6204)","md5":"43abd82aa881007971771ac49d630bda","sha1":"2f5ef2649aa46e4b5d287fcb1dcd7e2978794867","sha256":"08dbf7f9cc229ef82c0510efcd13959cae41e3194cc9f598623bf083eaa91dbf","sha512":"38f1d6d468b4e604c7e243fb549f815b160d07980ea78803af551cc33feb22a343bc21c1ce6d3810c3ba62bfad8d0fb3b67845bcfea6d106100af968e9c02ac6","ssdeep":"96:CFbdxwrudvR4x4boFkEO/HfOYAWY4N53hsstJQPCl2e/VtFVKdpYQGK0Vz38k2:CBTXdve4boFemUN537MPa/pMdOQ8Mk2","tlshash":"0dd154980548ad2b26e43ad8b19b6b741a3dd0323c5ad991e611eddc18fcfd183ea532","first_seen":"2025-09-30T20:29:17.493917Z","last_seen":"2026-06-19T15:53:02.039446Z","times_seen":1267,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/uploads/elementor/google-fonts/css/outfit.css?ver=1744188352","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.506Z","timestamp":1780925437506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/outfit.css?ver=1744188352 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 09 Apr 2025 08:45:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SzfkikuT7eAAOruJsXzESj9v5IdiXC%2BoPBHKsdhgRiINrZthqlq7AYo4HszVU2otu1C0cu9VZNmxJ3De1%2BD5dDqwqki4XGmvwGYS0DNsEHuJEgXPReUqqQXQ5Kxc7xJtFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 397\r\ncf-ray: a08840906c4f56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8163,"size_decoded":1199,"mime_type":"text/css","magic":"ASCII text","md5":"be75698ed90c84d049ba2cc957be7474","sha1":"ce2e6e52fae0417d2b6e54cffe5cdcb606a555b3","sha256":"302577f32b74dfe1dbca5f9b942acc1a12205db41c2ddda70c20f76db6dba6fa","sha512":"4996db739dc20b4cbaaa4d7979f68aa5449383441405c2ef4aeafa0957cffda5b153f84337e0514670a5603b62ffb2c94f45ac424ccd3295bbfc1a7cca47af6f","ssdeep":"96:cOS0ahDJc+uwOS0ahnNNO6ahDJc+uwO6ahnNNO1ahDJc+uwO1ahnNNOEahDJc+uO:Ip5zp850D5bi56R5p45w/5Xu5Wt51U","tlshash":"66f1d290089ba200e7974dc131de7e26de8da185b0049a646ffe08c9eca7c09636775e","first_seen":"2026-06-08T13:29:08.256363Z","last_seen":"2026-06-11T21:52:50.195926Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:38.922Z","timestamp":1780925438922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 03 Dec 2025 16:23:01 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:38 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F8rYWaq2j982WjtJpLkOzU7L8aoBQz%2FdtjbsNQJTGb3WDyuMkVHviXyVm2NFJZSxXfFMblvQQ7JXPNMcg90H2tbc0X6QQ2ffSbWCBD2ZF5r9YSDec%2Fr14FDeG4lytL4%2Bpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 4949\r\ncf-ray: a08840994d2156be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":5768,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-19T18:50:16.776882Z","times_seen":275273,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/css/third/simple-line-icons.min.css?ver=2.4.0","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.320Z","timestamp":1780925437320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/css/third/simple-line-icons.min.css?ver=2.4.0 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 17 Dec 2020 12:47:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nN1ZWM4J7JtwXhIYQcJLg58peUP1JB31Jz3pZLBPWRDkzaFjPHshFdDFoTplGjdLbgvNPU3EhJ815EjdFg6hGOqJhjIXD9y%2BMBzEpKuOaeMud6cgcpS2p3vadAXMhK165w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 2313\r\ncf-ray: a088408f3c2856be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10927,"size_decoded":3114,"mime_type":"text/css","magic":"ASCII text, with very long lines (10927), with no line terminators","md5":"848b3d98a919b181ad03d17478e97b80","sha1":"e05bd451823b6d37654fa624f3becde80dddd939","sha256":"fe41a7936fba4a26a21face5fbb35961e74b9b11eb9e78fa26560f6986be6ed8","sha512":"1c7fd5664b71767e3279eede498872380a85d5347ad1a395da9376a2f0ea455b419c7b2558dc9080bd134b79819f88fbbd3c3c65f9222548dca7b22c1d051f08","ssdeep":"96:XWPv3fQEKIPm+d9uGiozV9Ks29ZbBSNUgr0DXi1MkSP:XBEKyuCDK/Zge9","tlshash":"713264e4e50d41ca3722c407c786b309ec99f221dde15c13f1af999c5ff136aa692a78","first_seen":"2023-04-05T08:14:09Z","last_seen":"2026-06-19T16:29:07.374735Z","times_seen":9097,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/ow-slider.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.521Z","timestamp":1780925437521,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/ow-slider.min.js?ver=4.1.6 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 07 Mar 2022 14:31:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17888\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVeT0ILN%2BjN%2BuK2T34xq7DnsZhVSe9Dwl4C76ueLl7qM7%2Fx3ynb%2BXLST2i6GNW%2FVcoKwb3q7EgWL4OAmclUmxT%2FFBro%2FyCfyiQL5iXm84geJHttVhPH%2BPukR7RVT7hmUhA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 815\r\ncf-ray: a08840907c5a56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2002,"size_decoded":1643,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2002), with no line terminators","md5":"3f249575b37232d51921e82536004592","sha1":"5799b78581ed5968346cade85389b82b2d6a304d","sha256":"b817c9b9bb557b34222c4598548f3569a7c8f2bb30b796a6c92d47dd740e4271","sha512":"63db83f3e2126724bbc68a12f3bded2b8f0eeae4216ce21c94f8774aa2f4a507ab097910937e5f541298ec7a01ad2f5eca36adedab07ca967706cc501e0d55b4","ssdeep":"","tlshash":"5a41318f71e074e6035752b401afd24666b1ecad5206dce2d36857f829e8c1e4293f79","first_seen":"2023-03-07T01:18:55Z","last_seen":"2026-06-19T16:29:07.409304Z","times_seen":9101,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.1.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.526Z","timestamp":1780925437526,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.1.1 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 20 May 2026 16:19:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17888\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fzfFxKuwBOqAkMlK0sOU5ILOYwOPOAsZ2p5UPl68gI9iPEAJmuGUqSwePzGzt5wZWhKV%2FyG3Jpdq2fBuUm84ZT8gCMNvQWQ1GS%2B7HUEfiEJC5hcqckfM93r9RWDeXqXrGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 2338\r\ncf-ray: a08840908c5f56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5819,"size_decoded":3155,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5819), with no line terminators","md5":"0d490d1bad7e9038b5741f77a7bcee6c","sha1":"64f3096d6f0121949d2b88ef19d4b9adcf38fd89","sha256":"8dd3674bae946e2e04bc962443f0994d736a761bb28e816c20aee6391ef242ed","sha512":"9860efe572a0bda18b274965bc81ae0f513a1c826eeaf9b67cc7b6cec2b78164a67ee15f586e63905cf6b8cc520b00039ff7e9e1460b32dd0977dc4a85cd24b2","ssdeep":"96:+nsL0Z9Z4JfrjqyWiNDy9XOWZp5Rm4leN8EVrzLyVx2UlKBKGarNcl8/2:WsLGyrjiiNWZ5RmHFJW6x7G/2","tlshash":"1cc161941a54fd2b21e139d8e01ba775253ec0373c1af981fa32eced54e4ed087aa531","first_seen":"2026-05-12T16:52:28.591446Z","last_seen":"2026-06-19T18:51:22.379753Z","times_seen":6091,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.529Z","timestamp":1780925437529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Feb 2025 22:27:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17888\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v5W%2BOjrorJwBLW5qQpmcPaDIRjTht%2FDzoLkJeJlXQ43hN%2BMq2nGMGxqyg9XI6i4iW%2FjfQ2VI47v8cBzNNYTZ3WUvJhZSrfZQGeZL%2FHqSpXSydTfyo%2Fl%2Fx4fU45ECN%2BnAcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 6812\r\ncf-ray: a08840908c5e56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21464,"size_decoded":7641,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-06-19T18:47:25.047242Z","times_seen":306206,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/uploads/2025/04/4-min-18.webp","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.569Z","timestamp":1780925437569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/4-min-18.webp HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 16 Apr 2025 08:43:19 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4FnQnIumFWv%2FCfyrTmnKqd2uBBJOhqO4uONH86uYvd5bX4ILr1pRsw3Wc%2B7%2FnIOxh1pxLP5t%2B5OXWWdGHtiofnREIKcMvA6VoIk4ZJaIhKKr7j4lA1yd503OAzAvUXXLjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 127854\r\ncf-ray: a0884090cc6d56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":127854,"size_decoded":128617,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"219e2cee6cccdf2856a6148b67088a06","sha1":"705bcb9202276b5b4f20db66d663fdd059319ddf","sha256":"c3cf6175f8b3e7a1cec5ee36bc48c09ffba1cd0178bc58efb3744fa5099e833b","sha512":"9c11c7838ec783519f91e4b2e761af7a13d530f7dc6e4fc0e11ed627070c05c2f605fb5052f39327e723e3a35edaad93ca9ee697a60a1c49f10266c3b37c6592","ssdeep":"3072:S714GPTclZhYRuwSvymIYJ70TVTi7gd12rCsJAT+xynC:Sh23wtm50ZiFrCgVynC","tlshash":"9ac312eda8bfaa36ded98874c8d4620f132c7d9d5c97e2d750e87108c8193f7b812526","first_seen":"2026-06-08T13:29:08.257256Z","last_seen":"2026-06-08T23:09:24.345715Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:38.470Z","timestamp":1780925438470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casinoseon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 07 Jun 2026 15:28:34 GMT\r\nexpires: Mon, 07 Jun 2027 15:28:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 79324\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32108,"size_decoded":32920,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-06-19T18:16:01.715879Z","times_seen":21660,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":1,"connect":0,"send":0,"wait":22,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/uploads/2025/04/7-min-14.webp","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:38.558Z","timestamp":1780925438558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/7-min-14.webp HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:27 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 16 Apr 2025 08:43:23 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ndate: Mon, 08 Jun 2026 13:30:38 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5IVWng3BkjeobDXXennvgu6XUvOQoTn16npEBLdc7NdPcOwg8UmtoIg9q%2BvxSYxfZ%2BJ5C0OipiaCh4sVlYaB3g%2BxnxquJP7gBwLXHk0IXB7NVc2A%2FpISNZ4ssxs%2Ft6DAEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 162508\r\ncf-ray: a0884096fccd56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":162508,"size_decoded":163273,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a8866081961052d0acd9259692b01b2","sha1":"4855c904ce4a085b95b0da40e3d29db3886e4140","sha256":"3ef4f64e9d9cc4a9b775f25159cb4dc629ad2e01d7133ac02e7020c350976976","sha512":"ccb3b69096e2179e7d4796d36518a7c92ef17a443c0307bdcde0e0f45f9721ba66d6b08abfd245cc851159777381e7d964d0803694d00039a1e95f26586c362a","ssdeep":"3072:CPnt/Cj6npBMRkIho90V/f/oQSe8h17b+TGPtwXCSHqp1:CPtVC/e90Vvole8BbMIwXbHY","tlshash":"10f31213b46007e6ccfd17faf8064204f379b1655cafda205028499fee70a0b582a9af","first_seen":"2026-06-08T13:29:08.254691Z","last_seen":"2026-06-08T23:09:24.3323Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/uploads/elementor/css/post-8.css?ver=1779954043","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.489Z","timestamp":1780925437489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-8.css?ver=1779954043 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 May 2026 07:40:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2BvHHl0vqn7IOgaBd4Gn73BK3qvCvCHCmc4gtKtZw38ePMTsQRvEET0IWAjL7MXHYUBJI9UiEMrspqcrwzbmU4g%2F%2FBI%2B%2FhGzyeA%2BoX9W2WnknIVB8EzvzmxmfCI2OZUZ2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 342\r\ncf-ray: a08840904c4256be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1225,"size_decoded":1152,"mime_type":"text/css","magic":"ASCII text, with very long lines (1225), with no line terminators","md5":"46b0d660f8eed73aee006f153adbb414","sha1":"16c3e86b7161098203cf6d5dce98de818b0440e5","sha256":"bf4ce1bb45eddf623a700ea87747c85062748c49a6184cb519ee8fb5b95d88e0","sha512":"106c47eed9034369d4742063d7b2f9c33329874a9fffa70a311ea477bbb715326a387219a345424a796e968d649232429d8b2e82bee6bf371e5460f1155c810c","ssdeep":"","tlshash":"f02136457a23d432e07b092f91c3b02c112cd85fa25f8adff41d9649f9bea4a2228643","first_seen":"2024-12-26T13:52:54.087622Z","last_seen":"2026-06-18T14:49:15.839903Z","times_seen":709,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1744188343","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.503Z","timestamp":1780925437503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1744188343 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 09 Apr 2025 08:45:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hvqda%2FIdOUVDaCWP9b7pKQwgzXc4oLbfQ3NRgWIfDh%2BFjjupEEhZB3A906oZy6H%2FDfMmHmPxxmoAJndlLdjaorwOSMlkpnv2KSdQDj4nyBcmRLKrTruV8HeH%2FK4MNQ8pjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1871\r\ncf-ray: a08840906c4d56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":106920,"size_decoded":2678,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"62c45dc8c51ba0e978a737cfdd293a9c","sha1":"948f90c6484a93c8dabf1235f6181ac0cb91837c","sha256":"db0a00eb07d482622ee8fdfb9a04eec26943ed81a9b1555a65c9a8a67e54c374","sha512":"e797d85d953867c19adc231ece62c585e8e2bbbc633a7cf2c35129dd0dedb7de6552c0e7260a0772af5f7cb886a56bce5d668ae12529f40889c726ace0f46e14","ssdeep":"768:yPXOfWBiKFpH1c6QbMwApk+4/00arklhS4TL8cDbBSD9VsbfZGTxlQa:cPOJIjy9cHyVUH2BoDP","tlshash":"20a3429100470101a3979cd233cf7e28fd0d92517144d1b9abfd4babeedbd6162a93ad","first_seen":"2026-06-08T13:29:08.236896Z","last_seen":"2026-06-11T21:52:50.238976Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/uploads/2025/04/2-min-20.webp","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:38.565Z","timestamp":1780925438565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/2-min-20.webp HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://casinoseon.com/wp-content/uploads/elementor/css/post-10.css?ver=1779954721\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:27 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 16 Apr 2025 08:43:16 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\ndate: Mon, 08 Jun 2026 13:30:38 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AL59uVpMdUnS2pdP4yqD%2BoQpCDBpJQRowgIsesyWBqACxFVwEIyI8TRhScIIE3LzeceZBYvIvoIejkvNuRd4e7nX%2FlVZGSU0j%2FTwcV5bw21uDAC%2BwGy5gqWVqmGXNXVCCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 142822\r\ncf-ray: a08840970ccf56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":142822,"size_decoded":143585,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"760c860587e6d614c441ef1365e5ad90","sha1":"5ab1f50cba3a4328314284f347b79c4ff9d9626d","sha256":"443213f54c7e08c98b4eab82b5ff9da1b9788db7840292b530ba6242afadd2a7","sha512":"7c65e97a0baa79a1da80833a7c140b6710c82d2ba583f31fc7f525c506f6c47ad5f16b181bcb224743e56c6b57dedd90f571b8d99869c5d58a476f3783acd772","ssdeep":"3072:7bl+FWl+J8LVgdksv7+V9eXWZyL+AcmP1+gxxWxk:7blXRuD+ze11+gxxWxk","tlshash":"00d3120a49fe65dbc38023f952c49a3eda7941e80c0f8470ac6b5a6c79e486f252f717","first_seen":"2026-06-08T13:29:08.253744Z","last_seen":"2026-06-11T21:52:50.220284Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/uploads/2025/04/3-min-20.webp","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:38.566Z","timestamp":1780925438566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/3-min-20.webp HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://casinoseon.com/wp-content/uploads/elementor/css/post-10.css?ver=1779954721\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:27 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 16 Apr 2025 08:43:18 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\ndate: Mon, 08 Jun 2026 13:30:38 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zkLXP4rwh6g3fI0oyyYXl4alajmQg6uH6M9cVsbm06u4%2B6ivKC%2Faj6Kc7fHL3PJiNGeZ7e4aLWu0ukDHOvr54ApwKw3H%2Bia43gtSwTJOLN9a7j2QrSsT047W%2FNjW5CTfxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 132270\r\ncf-ray: a08840970cd056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":132270,"size_decoded":133033,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4938fdb7a0475632e02084efcb7cd285","sha1":"2d5e00a9b6fb3188128daa4d6e83cfcec60ea413","sha256":"1c324299ddee2832a2797b5a1454c23ee8354152f79f0e3f9635764f28bd1253","sha512":"ea1d25f5f4195ab136be21fbd48026980db3e7a8297d8fd2b0f5dcea9aa57544aa48cf22c6536c167c44a2f58281db2cfbf4a8000c357dd7370d994ffb816f0b","ssdeep":"3072:u4ZxOZRGkRvqNxSOkAUtFblLwS4gMo+dmUNSWVPNl:0S77kXXRQPmULR","tlshash":"91d312d1ffb2e58ecba25974893f3e06ac7f8747460f8585e060e09c9ae0db5342c964","first_seen":"2026-06-08T13:29:08.272926Z","last_seen":"2026-06-11T21:52:50.200431Z","times_seen":5,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/uploads/2025/04/6-min-18.webp","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:38.557Z","timestamp":1780925438557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/6-min-18.webp HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:28 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 16 Apr 2025 08:43:21 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\ndate: Mon, 08 Jun 2026 13:30:38 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fEVQmnj1NSfCq%2BMs2IIYMQYqoRvspnB%2B%2FlxRFm35oX2R2VPpxbQ9ypkJX4dKxTi1mTsvPE7px0Rwv4cbdS%2Fbq7rdWvrqOBrg1FPYao87zYgr6D%2Bec2QuHrBMr3sBkICrGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 104088\r\ncf-ray: a0884096fccc56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":104088,"size_decoded":104853,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f3ff2f0493cc4173c81039f6bc3d307","sha1":"055d867d3d412c0af72b02fce25704467d16b14e","sha256":"237547e51d6f0efe66dec51bcefc8ab5d75268532c7fa78d8759a01e51b2a487","sha512":"8da67206d5727ba13ccd589dcdc7f89660ecad1b0e7a175aa9da426535129d580c2618261e1020909795f96c28b9b99fe7ae27d54535d79ecc44d6712428e372","ssdeep":"1536:+nou/JBvQGo+JpzI2sle5hIUxDe0gH/vMorHVKSMPKvGCjrIAQE8SPmkYmi8bjZT:+nou/skNh7xSJfkoboXdSIxV+jZT","tlshash":"0ca3122cc873162ee57939bde4ec48881631a9c90c25d81ca19424eacd19fcf9e5ddeb","first_seen":"2026-06-08T13:29:08.25984Z","last_seen":"2026-06-08T23:09:24.343176Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/ow-lightbox.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.518Z","timestamp":1780925437518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/ow-lightbox.min.js?ver=4.1.6 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 07 Mar 2022 14:31:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17888\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rH851lc%2Bo9k2JcBXYpQGp3UrOuIH8faejZ5j11SrkIL7vmsNKzYNxbfMoPhc8K7IZdzs4gx9coq49Ls0f82lXC1bFa%2FyLhOwEfvwK%2BpEkPNIKeNgA8XzqryPniqnAbjhAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1327\r\ncf-ray: a08840907c5856be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4111,"size_decoded":2146,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4111), with no line terminators","md5":"71c31400a12073b7c576c903dcd8cea5","sha1":"2f048a9ca8727b169e761033b80209f53ffbf9f4","sha256":"6678f5308a4fd9620f440c3e6433920f9a09a9d6465a13888d9638aa23d70191","sha512":"98eb2820f7c92a8f0e01e1ea87ffffb6cdf19311d4f5dc697e0aaafa58a55180351a25776f2a8996a231a044f9d6317b09a1e910edac2c97a6a6f2eb4491e347","ssdeep":"96:wmwS3E/clNZ6/BVcqHAAdMJ+T94MWSocn:vwTUHP6S24Mdoc","tlshash":"7781b5c9769070f603e34779807bd35263f5e4588a45ecb26ba8c9a92afcc1d0163f64","first_seen":"2023-03-07T01:18:55Z","last_seen":"2026-06-19T16:29:07.390559Z","times_seen":8869,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.1.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.527Z","timestamp":1780925437527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.1.1 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 30 Mar 2026 13:49:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p26FfOwetSogqQTCfh10L9FHD6HREXxDvx60f9RcJDXZkG%2Bw2t8E3hglT61pB8bMs4X%2F2FVHDLjjU2epvKPDUkjoedN%2Fwfu8KhVsjmglQmut9wppxkd%2BzozQ%2BR0ib0rA0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 15445\r\ncf-ray: a08840908c6056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50602,"size_decoded":16269,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50601), with no line terminators","md5":"a3543601e9c09c9b8554ec6f6c8a2174","sha1":"8b05f21356996037f9d17fd012f43393238ac53c","sha256":"c66f47147d5fe3cceeaa47a93ff7440a328f859b049deec2f9d8f414e9137474","sha512":"3b5d80182a9b187171ceb59b4d384ad6b5e59dc0f5890cbdc0fb01109423a3ed847cfa88d67a0db8c84ed163985fb035b069f0530cf9b7a579c4ed47e67f56e9","ssdeep":"1536:yCyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:s+uhIAu","tlshash":"7633d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","first_seen":"2026-03-23T23:03:30.149895Z","last_seen":"2026-06-19T18:45:40.836332Z","times_seen":38572,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.1.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.530Z","timestamp":1780925437530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.1.1 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 20 May 2026 16:19:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qcXaYVrYUBAHmfLoR%2Bu1hfjoqMLXsKYlFnDwuHKFuDzHrOikO1iIoPdltRmjo6rcSYqugNI7yW2Xelwmwh8UcMYY9qDFIe6ogYh0XbJe%2FKJzkaV9KPIkiJnurghCiA81XQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 10124\r\ncf-ray: a08840908c6256be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":32098,"size_decoded":10942,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32098), with no line terminators","md5":"1c6aa09d0faf7577c8ae64d43b8241ad","sha1":"9d31e838cc042539556ca9223a635349f6e4af35","sha256":"1842d6e4d3c7399fdb01ab4b0a7dd5c1d9c096110de0532181ed581f14e9e813","sha512":"d754acb067d44f5fd9648cc63b6da0e95166a48d50a25dcfb378a6a5cd8c94334413c4466e598d01830a1cab6b183cf4812ac68500ac8e6d64ceabe45f5c46f3","ssdeep":"768:D1c+6idHZRdzM4ZBOBTmduNFXaz1EfcJR8RjDKv//Dk3iHVgbpMYMLKEnzBc5Gkl:ZcURdzMMBOB0mFrcJR8RjD8/xHVlqEni","tlshash":"0de208523296e866069f48a3f0231119f3775dd9b80af0d5b2bcdce5a471e877362b34","first_seen":"2026-05-18T18:48:00.243251Z","last_seen":"2026-06-19T18:51:22.361619Z","times_seen":5940,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.531Z","timestamp":1780925437531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js?ver=8.4.5 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 23 Apr 2023 15:22:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17888\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mdjSS6EbaS9bO2lXJkQHaNOBOEv4v%2F3ZEdugjkzbvBYRnNVBLTWsYLZ089LWMQBvTRRym%2FR6OHktoda7aX0rTifj5iZKFAaJJEXRt1kr3hAdekmr5B3y8OtCm7x5jyRMdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 38152\r\ncf-ray: a08840909c6356be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":143709,"size_decoded":38970,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65279)","md5":"83e9b29f0086bba50d653f1cb8dedc3c","sha1":"f8f89387c9aca9d524bb638eae457d4659efca52","sha256":"2ac3af00c283c0b2ae6108fa83a2053e51274a2a812fb063916cbe19bc4f96b5","sha512":"c8018876ee96b4600ae32342ec6d21b452ad4109d605fb838f146b734de274ef5e37179567a2c67ec828dc1b673364637fc82e7dfe8f7adbb18e20555577160c","ssdeep":"3072:pJLCyDdkEUYnafpoy9v8cIWyUaV4y+oGeJM91EfrNK/Yvr:pJLC4dkEUYnafpl9v8cIWybV4y+oGMMG","tlshash":"fce3f8896360b1a552e3268b93a9c651e3b51400b409c4e871bd0c9b6d7ed9813ffffe","first_seen":"2023-03-14T09:12:04Z","last_seen":"2026-06-19T18:36:02.058146Z","times_seen":94074,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-08T13:30:36.168Z","timestamp":1780925436168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=UTF-8\r\nx-ua-compatible: IE=edge\r\nlink: \u003chttps://casinoseon.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://casinoseon.com/wp-json/wp/v2/pages/10\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://casinoseon.com/\u003e; rel=shortlink\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-litespeed-cache: hit\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D1WJfZ6wmCKB%2BI5bRhElpNgWJBgIY6UcOxMzn3XhSPVXl1k6MbNQN4gIZmpagb%2FVZy9Ay%2FQDRnL%2FTEdp3D6XtFG9tCsaqGfa350K%2BasPZQbUQiC6ewXng8eOOP9eYFMVfg%3D%3D\"}]}\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a08840882bce56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Magnific Popup:4.1.6","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Elementor:4.1.1","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Yoast SEO:27.7","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":299201,"size_decoded":76087,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9937)","md5":"cfdabce0091194f3ef286e8261ebed27","sha1":"2543e1b3386c874498b967627733dce7d65c5137","sha256":"ad1c258ba2bc902e5c7f05e5417901b64ddebfb710be4fb026b4df53bc8a188b","sha512":"4652cdb9607893e234e65cb1272267cc624f526f16b61d8c9081bcd02cc2aadc0fc641d055e9b5b83e5a662dd28ee33ebde52e1325d2920ae89c6c346cf67910","ssdeep":"3072:ricXwBPyAhXMr5iuVll+x9Vw86ElWDAh0ycclXNLT8wAzN7V4g2uTyhPsV+3Ggoq:vzKMr5iylY8e0SlV","tlshash":"f2541c7337881a5b072742db204532dcd4378a4a5741b8d1d0ea492ba6e1ef37237fea","first_seen":"2026-06-08T13:29:08.249549Z","last_seen":"2026-06-08T23:09:24.318998Z","times_seen":4,"resource_available":true,"data":null}},"time_used":919,"timings":{"blocked":-1,"dns":4,"connect":16,"send":0,"wait":895,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/css/style.min.css?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.482Z","timestamp":1780925437482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/css/style.min.css?ver=4.1.6 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 20 May 2026 12:50:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tfe07zo9MFPOYzxdARwcrLyjb49RvhMR7sPsj71nb7BExJtQn12vMaEmQ3zKxN%2FJjHigXHQy9e%2BOCkdpEYSs6mClYTj9%2Bln7FJJA6L6au290MHAuId0%2BZvBL06K5crMC%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 26188\r\ncf-ray: a08840904c3f56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":186024,"size_decoded":26998,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"dff315912206cb614a6aae054d0e0edb","sha1":"e7f8d1950c20825715c344da12ff61536022576b","sha256":"5505d8ffff916749019fe691b9203d8519f85c1cb5e3bfcd9175be827e72b87e","sha512":"6d61501a6b0ef05f8297578d80ed6bd0fffbc745ebf5b769d52e28eb55e6fffbce75dc8287e69162d937561d18f15062e0acb7f90d374a2cc6bbb4c038676e79","ssdeep":"1536:fs5VAf7WPrStMBxB4mFxGo7WPrItMBxM7u7WPrctMBx0x4O/k4yjvPTrfxdNxR/7:OAG9X3TA9n61","tlshash":"a904eaa5f1a1226c9133c73ae6c87658573cc651e70307daf967612e87c63ca12e3b9c","first_seen":"2026-05-20T17:10:24.834427Z","last_seen":"2026-06-18T23:33:02.932831Z","times_seen":151,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/pro-elements/assets/css/widget-posts.min.css?ver=3.32.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.497Z","timestamp":1780925437497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/css/widget-posts.min.css?ver=3.32.1 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 09 Nov 2025 06:13:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z2btG7dzy4kJBBcYWBoLD1P6OAGcHjDyquK1diuy4%2F1OBy7UGliOL4sYxafV0w2ymM7GJDtkgocX7UlZN6Bv2afwzuFUy9QaRuXhgNCLkrHzh15FxaJBHZSKaMTuy10%2BOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 2298\r\ncf-ray: a08840905c4856be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":16967,"size_decoded":3101,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (16917)","md5":"f3e6868f6e619a3612f1653d690fe627","sha1":"8fe57d1ad1bffc64555bfa92bb8ca6022dab5c73","sha256":"9cc7a43742012913a40368c7356b32dc6bdac05bfb08dcf18e5bf722b20f9787","sha512":"45b9e4973e30e4c0d785cc7286bee4308097085aa8e06d24020114061e7695cef71af57ac96830fc6af21c945d3bf75b84c600ae465e93745096f5873975177c","ssdeep":"384:CHo2+K9RI1whgqkxk3kSk+B1eHE6Ye0yx+AdnxI0y5syiJU9jYT1ZMDiUjpIxUBg:CJ0y5syiJU9jYT1ZMDiUjpeQ34aeQO6M","tlshash":"bb7255017d1b9464ae4f055f605322cc2e94c1ead186f8ddedf1e28b8bface53324969","first_seen":"2025-10-02T23:58:14.355043Z","last_seen":"2026-06-12T08:09:06.263678Z","times_seen":89,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/uploads/elementor/css/post-147.css?ver=1779954043","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.502Z","timestamp":1780925437502,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-147.css?ver=1779954043 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 28 May 2026 07:40:43 GMT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hu4bIhJlx09sGkpsLq2DOCgsJz1zlCm7JwoemxMCYQhQBRSG0TUwuHuOBM6JO1ke6cWDbZF9qM0aavx%2FtO%2FId2CbIinrD%2FclMoocAqjHi14GY%2BT8YDDZJU%2FhlFCLKwF%2FUA%3D%3D\"}]}\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a08840905c4c56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":234,"size_decoded":890,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"e2cb685b7fbf054dc4f2810eb3ffcbd4","sha1":"f1391af0560f079243059f9393310a98148ca247","sha256":"4838bcf88fa26ae903ef690937f480015f557730fe206e8d8f1d010da0295caf","sha512":"1f314b0d3530899bdde3e08ba69b0a843d3e0bd9957f06cd18f1b30664e6874dd26eba46d9704fe9e358af814179c468f534d2313b1bd7c5a88952a023f9b493","ssdeep":"","tlshash":"28d0a7b73d5717e0127fc90354132b1c4121a8d6c15326e4fc59900b00f6d093b41e24","first_seen":"2026-06-08T13:29:08.243285Z","last_seen":"2026-06-11T21:52:50.21933Z","times_seen":5,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/js/drop-down-search.min.js?ver=4.1.6","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.516Z","timestamp":1780925437516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/js/drop-down-search.min.js?ver=4.1.6 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 07 Mar 2022 14:31:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17888\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9xt632GV%2FAIv%2FcRnudjvrHaqfznfOcfx4Qa2qLY36RLi9MtvC0S1VF72cHVTYCFsHQ3u0zy5siUCa34r4Fm%2FJc5mpxHKn8EYDw1H57XzH0kQg%2FH0JcnYEpJFq8F%2FjPZw5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1935\r\ncf-ray: a08840907c5656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7540,"size_decoded":2758,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7540), with no line terminators","md5":"c7fa7b324baead665d76a2ffeab04152","sha1":"a955c9646a728f8250f30e13772d129a3e0e2877","sha256":"ca63a56d305249eb4cddeec8a6501010e206e110445f46572be1f2d56a1785fd","sha512":"28f9f7809accbed5769e8b94bf76910efbc48e13d68752de27e012c3a73af25c2d29c7ac69f98fa533986a41df5fc492e6c8351e463df43e895d3e01a927cff8","ssdeep":"96:ng+t3RyPsefIJ4W58JbTfkpPbSrM2L5oCqMC9ZqTg:vXf8bQdbwM2LrgZEg","tlshash":"01f1368bb4d0f0f2039791b8423b81466af1987d154ae8e12bf88af13bddd5d9153f26","first_seen":"2023-03-07T01:18:55Z","last_seen":"2026-06-19T04:20:28.941114Z","times_seen":5646,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:38.701Z","timestamp":1780925438701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:38 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4p2%2BCXe%2FCNy82BSZGHdLCyhjx139bzAPtbeOdKljg5mNrZoKaYOCOM5DJ3hOSOyyXm%2Bbl2sF5XJ6RNBYhxhhTg3PzNEDUq0KvCKoLsRy3lyugm9dDTq0%2FQ2uVyBi6plPJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 2511\r\ncf-ray: a0884097dce256be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8481,"size_decoded":3332,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8481), with no line terminators","md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-06-19T18:47:25.064233Z","times_seen":128423,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/pro-elements/assets/js/load-more.8b46f464e573feab5dd7.bundle.min.js","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:38.726Z","timestamp":1780925438726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/load-more.8b46f464e573feab5dd7.bundle.min.js HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 09 Nov 2025 06:13:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:38 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XvtbdNOxaJGNRS5SrPtYg3DIblOyodnIfMKjAe%2FJwNhPXmlaS3AvUlBB9Ja4cpnNBr3BlqKyLS5RgHhxWg%2FgU6L%2BlyzwuT5i2qdwlxH6qZ%2FX1Z0eYZHcAYnSGLAuW5gj8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1486\r\ncf-ray: a08840980ce556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5346,"size_decoded":2307,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5302)","md5":"57c31334586e6038b0d341260ee278a6","sha1":"c502a0c613689023ad52b8bf96f1e812a30d0230","sha256":"0949addfa283eabdec86c8ed468a9698d3c6d137ff08fe68378d345d03faaa8d","sha512":"d65c2d19d1811c6a6d3d6d77c80d16e17406e439177d889555468b6fbe1fd07e3f049be2ee843a6fad4c3946c8b244cbf143cff156cda1d6f0cee2680da05a75","ssdeep":"96:CFJdUscSAlxkdTRTgnwblr4nAV/N2/k7QTFdoBQZtNsaXC5C72ZscsDRsEQ+tw0H:CXdUsc7lGd12UNgbXo6tNsaXC5CyZsc+","tlshash":"a4b1df58f056ac39554f41fea04a3347a5252a7f5090d9bebaa88cdfc139ec432393bd","first_seen":"2025-10-02T23:58:14.575281Z","last_seen":"2026-06-18T05:44:14.791154Z","times_seen":133,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=4.1.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.498Z","timestamp":1780925437498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=4.1.1 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGpT%2Fwd1OZsonytShxJiIOqTsjel1z84TY74hV%2Fz9cKiC%2F5D%2Bck7yYYBacZ6ePJAAgdgSU9cCGJawt63kCGDJBPCcpBCCpR2WWJWy%2B0OYVwncnEz%2Facu91OgwNDYUYXTiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 126\r\ncf-ray: a08840905c4956be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":560,"size_decoded":936,"mime_type":"text/css","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"c3be9e612baf8fc4af612de8af4c0864","sha1":"f6b1366e30a459deefca035c5563f1c929c8ed10","sha256":"f68e889145cb0e47b7b190b2fdf087a9213a264ad33951512880c9f8bb6d0cd8","sha512":"aee455fe10d8126deb4d1015b6b4450ace4851e5b32890505af619f7863469c56b788b5d822849986759aa85efde260da77ed12bbb236ce2bf6629bf6759f4ca","ssdeep":"","tlshash":"f2f0c0237e4b94aa383f1d571083337c74944ec893a0a8d8e9fa91435cf4cb27330622","first_seen":"2023-10-14T23:00:09Z","last_seen":"2026-06-19T18:47:25.117705Z","times_seen":103364,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.507Z","timestamp":1780925437507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 28 Aug 2023 21:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6mLSIf6ncLjnY%2BW8xrj4Kmpnil1wJ384KzPw0h06AYo7dH%2FShtW22GPuqipqQJHC9eiGaP6YbjHqbk2fCGNjKm1HsnyhLdftFTaAuq1HedcdBSO51pEyrqsTI5mNFALxoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 29744\r\ncf-ray: a08840906c5056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":30562,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-19T18:48:42.64376Z","times_seen":916116,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.534Z","timestamp":1780925437534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 21 May 2026 14:19:05 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dlsM%2FCt1Ah94ZTg4cYA9u5mVQY5H3C0SAlZ3Bpe0bqpgxPuVARqnGy9FUFSeU1E%2FXgTTbr4sfk9QDSCmmcnoVm0k9kCCCjnpvermWzs2tVZgDjYiphwswBwp2Mww0F4rQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 2330\r\ncf-ray: a08840909c6656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5697,"size_decoded":3147,"mime_type":"application/javascript","magic":"data","md5":"e73824b7ab9a4f88f98e0530b43ede25","sha1":"e95c97fa934f0cef056cc9d7be3aeacaefbbfd33","sha256":"46668f561bd01aaab7c0f42be3d045eb9c3eaab6b9f5ae4a9f6bcf28fa22c679","sha512":"973a620e6d69dcb9b528f6a446f977cb8401dbf0b7b8df3aebd58e8198ab301331195a02967ef260ac44754058b6b9d82b7c61d4832e55d6ffb056f64656b9d7","ssdeep":"96:0E7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:bhgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"8bc1a7c975daf056235910a594afb005e134be2870deac00aae0c4957eb44cdb1b7fba","first_seen":"2026-04-26T21:57:59.028052Z","last_seen":"2026-06-19T18:48:03.550507Z","times_seen":19286,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:38.468Z","timestamp":1780925438468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casinoseon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 07 Jun 2026 15:28:34 GMT\r\nexpires: Mon, 07 Jun 2027 15:28:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 79324\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32108,"size_decoded":32920,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-06-19T18:16:01.715879Z","times_seen":21660,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":3,"connect":30,"send":0,"wait":17,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/uploads/2025/04/cropped-casinoseon-removebg-preview-min-32x32.webp","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:38.593Z","timestamp":1780925438593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/cropped-casinoseon-removebg-preview-min-32x32.webp HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:28 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 16 Apr 2025 07:02:16 GMT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:38 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9WBoqUwcO8ycsP3TYWPpTLP3ooWhqZj4jnzTzs%2FcrDg4NDYQ%2FfFKU6gTrb5xg8bZmYYZbXtpH4%2BHaKBkzUldfnW9GooZD79ilTn8Z3EOv%2BwniFq%2FBZTvHm7CLlSJY6LBJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1244\r\ncf-ray: a08840973cd356be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1244,"size_decoded":2010,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10930efc59cce31220a85501a0fd8043","sha1":"f253600406e6e064b334ed97d3267b5d93b70146","sha256":"77e818c0fc1c7b9ec8802eeaca0601bed62dd538700e0ee2f39339a15b2bdb39","sha512":"7828d2f826ccd4c19e6bb106b783ee2573fdec302766ff9207d65c8a96e1903af34307f2e9a750c6d0aee3453e51f6335240c000157d8ec49f418e2855be4f5e","ssdeep":"","tlshash":"2821b63897242394ee51773574e50b8297e93d134a1b5e7ac39146201f245c52d4d38b","first_seen":"2026-06-08T13:29:08.270077Z","last_seen":"2026-06-11T21:52:50.213322Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/themes/oceanwp/assets/fonts/fontawesome/css/all.min.css?ver=6.7.2","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.318Z","timestamp":1780925437318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/themes/oceanwp/assets/fonts/fontawesome/css/all.min.css?ver=6.7.2 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 27 Jan 2025 17:04:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nuKkprB0e2Tq6ZKm%2BETC4PTwtCGNPqPWAw8YXCZwBWAS4VpEl3%2BIciFjIceYlvVmBKr9q05fg2fCmS45J3Lp%2Fvc76mV%2F%2Bi5HixsCLr2GTtDDm5S6C2aQB20rWCsKi0opzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 20961\r\ncf-ray: a088408f3c2756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":73890,"size_decoded":21771,"mime_type":"text/css","magic":"ASCII text, with very long lines (49899)","md5":"7441465cab20b640d4156626d19cc63e","sha1":"8230c4590eee915e9b587a08f6e593fb77fffeb2","sha256":"74005d7c17d4a02f2f25404ec0655d9bc2fdaa53166874c87d7b7eec69d9088a","sha512":"12fbfce0caf892a54644d4a02062ff17f6880ea41bef1436bdcadd230c5f8d38521fc09247b3c111a902af9d4293ec3efd4eacc14d889b5bd55f449593d00186","ssdeep":"1536:/bM1MvMaMfMRQZm0grfT/QypZhzZHpcjA691m:SlgrLXzZJ2191m","tlshash":"14730f12ad84019bb4568d7f3895bf34a6f2eb28aad14495e4344d847ef28fd314fb32","first_seen":"2024-12-23T14:25:51.255422Z","last_seen":"2026-06-19T17:10:05.894621Z","times_seen":28420,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.492Z","timestamp":1780925437492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 23 Apr 2023 15:22:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RrzhQuJXanh%2FHRkeKgtOi04oJI9op2%2FISP%2F0h97FPGeNAl2VNKqLxT1xJfePT4j936dO9hC3idPEVI0ZHVAPQHYHexIYmTPZjeefuV8YsoHUcCiliKjZ7Ts%2FczHJ2cCL0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 4248\r\ncf-ray: a08840905c4556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16471,"size_decoded":5055,"mime_type":"text/css","magic":"ASCII text, with very long lines (16214)","md5":"a2431bc290cf34e330e11ec4cfce1247","sha1":"32a53342901fef5f4f4dbb26a555e730f84437a4","sha256":"c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196","sha512":"87aef045472db25020faead697ec02813ba38d4e313caf437b4ca5cadbb7a7495805ac0b74e5de60cd84ccecab290b76d003eb1fadfcdaa70e650a597658ada9","ssdeep":"192:IbgmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IdUbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"fa7234681340282753274f374b71cbb9d9b444d24b93896e91c0ee88d7b6cbd236f6e9","first_seen":"2023-04-05T10:48:11Z","last_seen":"2026-06-19T18:51:00.787866Z","times_seen":128187,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/pro-elements/assets/js/elements-handlers.min.js?ver=3.32.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.537Z","timestamp":1780925437537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/elements-handlers.min.js?ver=3.32.1 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 09 Nov 2025 06:13:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17888\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0a1WCuFWQCFEI6VMAUTb75l26aIhm83om7j8AONa7S2skwdhiMxjwP3I81xjfp4tZBKeFmTHdgvgwTij0vZVO9zpMvCMO8cuhSziJUcwVA909Z%2B%2F8nPIh939nHHiN2yINQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 10188\r\ncf-ray: a08840909c6856be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44670,"size_decoded":11006,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44626)","md5":"e703ba9afa170cc3375e74e51004c0ed","sha1":"ea6ae4c8a369b823f3a67e98eb541359ee7c0a76","sha256":"ae0ba39eefd6a2d0c3316019404685adeed50f31db022223d19953f3e1cb84b9","sha512":"2dbae32a1e045f24d02a0c6e7ec53061908b22a54bcd889e8297ee63fa8a8787d811fc822a2c044ec9aa40910418d74414af1f9950f3c18c5c5910446ae95672","ssdeep":"768:C5/bt9JJD1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFgm:CVt5D1+WE9A5yLcWJ9mBtIoERuWfRMBg","tlshash":"6f13a511716aca6945cf84abf463164fb7225cacf413f0e67afc8d82b464e87a394731","first_seen":"2025-09-30T20:29:17.495625Z","last_seen":"2026-06-19T15:53:02.062566Z","times_seen":1270,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:38.547Z","timestamp":1780925438547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 May 2026 18:37:21 GMT","end":"Mon, 10 Aug 2026 18:37:20 GMT"},"fingerprint":{"sha1":"C7:04:EC:03:CB:34:6A:7A:0E:8D:12:AC:D9:6E:0C:1E:55:11:32:16","sha256":"0F:52:5C:58:54:41:2C:98:66:96:39:47:DA:6E:60:9C:3B:CB:A3:E8:B6:42:AB:BD:CB:29:94:AA:03:FE:9D:54"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casinoseon.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 07 Jun 2026 15:28:34 GMT\r\nexpires: Mon, 07 Jun 2027 15:28:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 79324\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":32108,"size_decoded":32920,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-06-19T18:16:01.715879Z","times_seen":21660,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/uploads/2025/04/1-min-20.webp","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:38.564Z","timestamp":1780925438564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/1-min-20.webp HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://casinoseon.com/wp-content/uploads/elementor/css/post-10.css?ver=1779954721\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:27 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 16 Apr 2025 08:43:14 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\ndate: Mon, 08 Jun 2026 13:30:38 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NCZxcta3wktIiTc0DfjzOlSg4WCWkTcMD8TfchDLY7LAszjIExS7uD4XkgGGaGzUHzxTUGi40soDBrltPk0gsCBS1QUycP7DsPq6mQ1jYL0H8ap6UvVgmXbDWXs4vp4YXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 128032\r\ncf-ray: a08840970cce56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":128032,"size_decoded":128787,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a86dba00c687e7f2785adad7ae06d431","sha1":"5c5c0df1fab17c95831aba9d4f80d748ab26257d","sha256":"329952418831525b980675cb6d0a4afa6590098e8f1628b2699c563d63fccfb4","sha512":"74c5bbcf3e1544d15205719ecd723ae3bbe1571c37ca6a94f8e5dbd985f6406b5b4495790f372ab9154767e8714852d5361cb52b4b0024f02f97ababffc7b398","ssdeep":"3072:lW277yte2AEJ0QxkwjKnY0NrKAKdyVGcs9PecQ+r:lW27+HAEJ0JwGy5tR9r","tlshash":"2bc312aa36f620e2e64da2793de454c5af0ca31d81180657a43d9b04ce9afc637fc741","first_seen":"2026-06-08T13:29:08.258411Z","last_seen":"2026-06-11T21:52:50.243302Z","times_seen":5,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/uploads/2025/04/cropped-casinoseon-removebg-preview-min-192x192.webp","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:38.591Z","timestamp":1780925438591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/cropped-casinoseon-removebg-preview-min-192x192.webp HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 13:28:25 GMT\r\ncontent-type: image/webp\r\nlast-modified: Wed, 16 Apr 2025 07:02:16 GMT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:38 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 132\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fF8UE0qUWDhosGmujotH3mf6YiXe4zQqbcXD3qTxZySWVvR4itYOq8ecxKdzDLlK1YshOE1LGqFhk3oDAAWFyow1V8Xr8gHa2aXuTsCvVRCLepeTBT6qI%2BxXSty0FIJCnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 5904\r\ncf-ray: a08840972cd256be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5904,"size_decoded":6660,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2bef0ee09944096988240497a526103d","sha1":"8c1d2bdf4166dc8a43ca4da6f4b2240da4505d44","sha256":"85ada45fa37a3b0e2ddb4a3c31bac63fb3feddc6d56e5629c6da66ea67600c20","sha512":"d2da7a924eace59867102181b578cf2e0a8cda2a474006b5fdb14bfa8477caa23b0ae7deb1df95b54a5940b8e04fc8ddd99d14f8083b3bfd26fc704b916cf7a9","ssdeep":"96:aElbw+iXAkOZiFP3MWF96H/kqQYkx1JvoZRguHXSVWmd5Z24IjHA2WgEwVpF0s:/wTpFP5v6H/jVsiRgu3md5Z24y70","tlshash":"aec18d6386291a0df2e70b383ac32340f99d3d3a8b10051d462f5da55aeac9ae65fd51","first_seen":"2026-06-08T13:29:08.26075Z","last_seen":"2026-06-11T21:52:50.210655Z","times_seen":5,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/pro-elements/assets/js/posts.aec59265318492b89cb5.bundle.min.js","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:38.729Z","timestamp":1780925438729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/js/posts.aec59265318492b89cb5.bundle.min.js HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 09 Nov 2025 06:13:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:38 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17889\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ME4BqP4agAkOlRYTOXucIQvJw9PcZa9n8SvvwpFlWeaBxbioLad585GJpllXvdtl44MOvDiJG6UlmQtS26dC1FQ1vcL2EEtqDj8PsiPkwrdHeQm5UKBaF0r9jpujBiX1%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 1179\r\ncf-ray: a08840980ce656be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3317,"size_decoded":1994,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3273)","md5":"fa4c92a0f0338712aef385eb27e7af9a","sha1":"8de23ffbedeac7747d2e33786cef86d3ca64aa3d","sha256":"a8ad381a9c6dc02de2a0278e3a3b4d1ee15cdc87c7dcf94baee84d156cc64efa","sha512":"e2e5e853dffc94bf73ca5ad58f8924b3926288e8acdd2ebcd45f161c3f7375f734fdd7be698329395ad2cddf5a7c06e9dbde3ee70d216e9ad2961f4ce9e5f009","ssdeep":"","tlshash":"9f61865535966c35ea8f41c7b80f010e6e022bfaad0570d9ba69d8d68af0fc73361b70","first_seen":"2025-10-02T23:58:14.339914Z","last_seen":"2026-06-12T08:09:06.259255Z","times_seen":96,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casinoseon.com/wp-content/plugins/pro-elements/assets/css/widget-slides.min.css?ver=3.32.1","fqdn":"casinoseon.com","domain":"casinoseon.com","tld":"com"},"ip":{"addr":"172.67.176.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casinoseon.com/","date":"2026-06-08T13:30:37.496Z","timestamp":1780925437496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"casinoseon.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 20:56:21 GMT","end":"Wed, 02 Sep 2026 21:56:17 GMT"},"fingerprint":{"sha1":"C2:04:3A:97:4F:25:74:D9:BD:2D:66:FC:1E:34:CC:BB:EF:C3:AF:D9","sha256":"9E:3F:5E:A6:46:4A:C0:F8:AB:E5:1E:D8:D1:44:47:91:2E:0E:58:5D:25:EC:61:E9:16:3B:D1:A3:8E:E0:54:E1"}}},"request":{"raw":"GET /wp-content/plugins/pro-elements/assets/css/widget-slides.min.css?ver=3.32.1 HTTP/1.1\r\nHost: casinoseon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casinoseon.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 15 Jun 2026 08:32:26 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 09 Nov 2025 06:13:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ndate: Mon, 08 Jun 2026 13:30:37 GMT\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 17890\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dsl1%2BBsoE6wsDVnMRQ1pMEkbUiEvEzca6eieWzBPxB69X6v2wqNCcBfGQwVq%2Fc4r6sCupTyVr5pUuZMb%2FsKwsjNSIol7QuukF4bu0p5z7FvfEgsXPsJOzCP3CKWUNw3GjQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 517\r\ncf-ray: a08840905c4756be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2342,"size_decoded":1321,"mime_type":"text/css","magic":"ASCII text, with very long lines (2298)","md5":"52f7ebbccae211d3fe2f0729426c818b","sha1":"cdb0ee8911ffdaf7294abce3051b9474088330b3","sha256":"28b226109d8a76f9b8ea75871590344df8d18a21f8655bac7a5054eba78d3ea9","sha512":"33657dc01ea4ee2cdb1696b8ac8371511e3ade583e4baa5f1696573a1bb55ea5802aafbbcdc03c826c35bd146a781dc702d33f7e002cd072b7bb0b9e734dc28e","ssdeep":"","tlshash":"8a412910fe43ac6a61bf4a13781be16c30d840c0ca1625b5eae51adef2bd9d1321d7ed","first_seen":"2025-10-08T10:41:46.107807Z","last_seen":"2026-06-11T21:52:50.19521Z","times_seen":77,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-08","alert":"Sinkholed","trigger":"casinoseon.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-08","alert":"Phishing Block","trigger":"casinoseon.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}