{"report_id":"0092e8c0-3807-4854-8d94-4526545b89cc","version":0,"status":"done","tags":[],"date":"2026-07-12T21:56:05Z","url":{"schema":"https","addr":"tuno.mom/","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tuno.mom/","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"title":"Tuno: Most Popular Online Crypto Casino \u0026 Prediction Markets","dom":{"size":392605,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (48697)","md5":"ac5886aa8f94cb749f2996efe6d48132","sha1":"1dbba6aece00ea8cb28a48a028ab2bf855ee43e0","sha256":"0b6cacc3ab50c3e97cb2d414c020dfb797adb25f2ce744cdecab5648feb7cfd2","sha512":"20bd4e3901ce420607f8590fa78c0aeb849b059ee677ce74e208779c16fabf5f81ecb30c994aad67a0b08994f0dfdfd402183a1a2288b534aac926c57d733769","ssdeep":"3072:veFA1FPZFHGy8aaQ0k2w/VP7pPs2v5GnRy:veeXaqdkk5GRy","tlshash":"04842cbc120116be706b87e5fa50f39ea12fd259de93cd0df3ac82862bc6c98cd54594","dom_hash":"domhash6da2638ea41dbd2d1895036dbb3e6d04","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tuno.mom/","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T21:56:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"op-api.gambl.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"tuno.mom","ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-25","domain_rank":0,"first_seen":"2026-07-10T22:59:07.170633Z","last_seen":"2026-07-10T22:59:07.170633Z","alert_count":39,"request_count":39,"received_data":5594444,"sent_data":24075,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mycasinoapi.biz","ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-04","domain_rank":0,"first_seen":"2026-07-10T22:57:00.871632Z","last_seen":"2026-07-10T22:57:00.871632Z","alert_count":0,"request_count":43,"received_data":4012730,"sent_data":23365,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":2,"received_data":61088,"sent_data":1128,"comment":"","tags":null,"fingerprints":null},{"fqdn":"op-api.gambl.bet","ip":{"addr":"172.67.140.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-10T22:56:41.726368Z","last_seen":"2026-07-10T22:56:41.726368Z","alert_count":2,"request_count":2,"received_data":2402,"sent_data":1130,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-05T22:22:24.069932Z","alert_count":0,"request_count":1,"received_data":4464,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tuno.mom/assets/index-Cht9A9cj.js","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"278a482bb3027275ea10bec92e0bb366","sha1":"32aab18bcd9acb27006a84024951aaa15b8eec60","sha256":"c0e656c43b6016dc47aa09b23e98cef32852f650dcb08eb335dd466920d4a90b","sha512":"04b8473eaa38ff69aa31482ff0002e0da0ad1706d6424c4cf07d3cde0b51fcde60f4415dd564d91960628c91e9aa604e85339bc94e10be2921da6e5714e0c148","ssdeep":"49152:HHrY0IoeS1FPCzn2oaXXBRHjJgCTTaBOpkL/SwxNnlgsJJG0tf07xw4RGUWe3/An:mnbBvtf0d8UWe3s6rpGpj","tlshash":"d9b5ae4cb386b6bd576b66d4749e543eb03c1a38f56ec440e0fca82a24f5850a17bf9c","size":2445112,"data":"","first_seen":"2026-07-10T22:56:48.124091Z","last_seen":"2026-07-12T22:22:18.581291Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-07-13T15:18:44.651864Z","times_seen":356436,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"info","text":"🌐 i18next is maintained with support from Locize — consider powering your project with managed localization (AI, CDN, integrations): https://locize.com 💙","filename":"https://tuno.mom/assets/index-Cht9A9cj.js","line_number":9,"column_number":70797}]},"http":[{"url":{"schema":"https","addr":"tuno.mom/fonts/Proxima%20Nova%20Extrabold.ttf","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.501Z","timestamp":1783893335501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /fonts/Proxima%20Nova%20Extrabold.ttf HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/assets/index-s28uPECG.css\r\nCookie: __ddg8_=7jV1YtkJ9WErIr9H; __ddg10_=1783893335; __ddg9_=172.64.209.62; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=EfZVfF2QcLFDAV8S; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=172.64.209.42; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93d-1f9a0\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:17 GMT\r\nage: 0\r\nddg-cache-status: MISS,HIT\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gcOulvfjbeX%2FvQCReFai71DJtM0vtv3CjeIymT5tF%2F9ksxC6GxiAU1RGSbldVLtvfYonJJpCI9esqN%2BPc8uT7gvtuLGgJsL6sgqPLcQuFGQfm1S4fGkyrrnI2w%3D%3D\"}]}\r\ncf-ray: a1a34b02ee27568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 129440\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129440,"size_decoded":130507,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 30 names, Macintosh","md5":"ecce738438b07e0f2700c264633fc55b","sha1":"8d0e90e6a0f9dbe299f7f07c765df1626c1fdd20","sha256":"6cd9cca7999d5953f3c596cd7b4822d1a871a2d3b8b85823243ab1368a2234de","sha512":"5441a6b93c92e27fa185349be7289859eb7701537245b89ee5fd2bc221e46305bdbaf6024e7c9d8c11ea94a27f51036f5e0a76aad96335dfee7bb2f372c3c9a5","ssdeep":"3072:gcDXjxKwoaX0gLZOVKk/PoSR0Y5CURdoM2E8H7O1j7B3+gAyR1S:gxjVQSR0YjRWgS","tlshash":"33c34b43e383cf5edba999be9d31f3753616e67d6f6a330e63402079f50b2a8a050185","first_seen":"2026-04-14T01:08:26.757884Z","last_seen":"2026-07-12T22:22:18.497434Z","times_seen":29,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/windows_image-D9HcJYU_.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.656Z","timestamp":1783893335656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/windows_image-D9HcJYU_.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=sfKlBanJwrTZlnLf; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.61; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-7160\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zbIQbLhebVR4gmtUTPQaDE1bfhJkZ9%2F5zsWDirmO%2F01XT2CHaiNxQzbvYZkof%2FaFU8uXr2WV8l1TE5GHFK2gigoqV4vLnZtzQ1UbfmbZU9dkfFMXMdbZOKxtiA%3D%3D\"}]}\r\ncf-ray: a1a34b03de61568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29024\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29024,"size_decoded":30098,"mime_type":"image/webp","magic":"PNG image data, 163 x 149, 8-bit/color RGBA, non-interlaced","md5":"749266b689ad7b0c9fdc4c43f9edda9f","sha1":"c7cddfc35c93bad203b4a046961e764c1368369c","sha256":"f15cb414f6facd1e665acf00fd7c4038655381954feb698d39b28fbcb98837ee","sha512":"9f8ec6f99e532aabae086f285199cd1db67a2c82301531b9efca3ba85332c68abe3cdc0cdb7a60abaeecef04c1cb197ac218ed7dfd15b121cef8f931b12d4f19","ssdeep":"768:ua5svhEeoLABwYYJxsrf3BbHWadRubuVq:PYOe4ABwZJxyfRzW4q","tlshash":"acd2d1402bc0b619a40b0fe12557e607cf732ffa5005eac091bd96e554a91baab2bfc1","first_seen":"2026-05-03T09:25:58.530823Z","last_seen":"2026-07-12T22:22:18.517975Z","times_seen":24,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20olympx.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.366Z","timestamp":1783893336366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20olympx.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"7606-19e87ec8ba7\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:26 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TwVmcHQ%2FX7DQoYkdLVaXEyvXbKV48MIMgnfXWV%2BEUFDFjDNsN6ogv4JV3xQN8B4n43o0lmma8jceqyG48zXLnTC9HcEJcx9anIi0EM3GXnVYA2WmANWDbRnBC4VDu0Uqxlo%3D\"}]}\r\ncf-ray: a1a34b0849b535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30214\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30214,"size_decoded":31614,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9514f4cf62ac519e1be2aa9c0c76aa36","sha1":"6e303bdd882e0a4b82139db82429a5282f6e303c","sha256":"d3ff28472bdabcf09e6429242c9320e819e993cbe0119c667e11a834235ae783","sha512":"65afd430152c1f5e3aa462ffff635e36653111d1d61b0c22d5675dd7eaab99583ad3392a2b7ad63daae10f448ede601aabb7603e041c61fd1c2e459fedc4627b","ssdeep":"768:PYAFoDRfzqaU0msv6kboS2FA+2DMAsKR5FucxI0c/liV:DFq+aYsSQoSH+2D5qcaj/","tlshash":"47d2f1c1a9326d244f05ee992bab0939d8c03e25b5452ccde23bcec6735d6f6837125e","first_seen":"2026-07-10T22:57:05.857918Z","last_seen":"2026-07-12T22:22:18.509381Z","times_seen":12,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20wwgcluster.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.369Z","timestamp":1783893336369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20wwgcluster.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"64b4-19e87ecca23\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:42 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7AlVTv8AKSiHKV%2BEzyZGZWLONMvHJ4%2FL83BJP%2FfIdwnUfMZVro2n%2FdsMWB0tTq7Movg7mK4b8g%2FYHMlwkOrxJ7bye1bqMjI23ntp41IQZ7pkZ37%2F04QLbmCoKwSj%2B7prrGw%3D\"}]}\r\ncf-ray: a1a34b0859b635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25780,"size_decoded":27190,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"466585300847fa0e13987ef5dca6b7a9","sha1":"90fca47f54ecf010dd26cb69ce2865921c028dce","sha256":"9ff5266fea78992d2da49b274dcaad4c97241690a59d0d532e1b3c28090fc815","sha512":"ff9d83dda4da71c8b00c3bf981285093a45f7f48740845a72719f038a072e340284e0750e2662395cb2f1525d423cd5072a388a734139f7e56b62aaa10ea2a81","ssdeep":"768:6Krbogtb1sc931tNEV5/iP7cTPTGfdYjj9g/HhsgoayC:6yMgt5/fyqPvfQj9DEy","tlshash":"03c2e1630732b2b96d7aa69cf89e2bdb115f6011b38d107750a2387dc016eb734242f2","first_seen":"2026-07-10T22:56:48.045744Z","last_seen":"2026-07-12T21:56:13.975494Z","times_seen":19,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/fortune-tiger-pg-soft.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.379Z","timestamp":1783893336379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/fortune-tiger-pg-soft.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"2c576-19e9f3746e7\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:20 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p7ejmv2hmK%2F7ycQOEl9WwCXDcQEX1927r5um4pL%2BH2ootqrZKoe41ups4mDktoD4aYiA5sRaT%2BnlJ9ZhHuDPWUuS4Gwf934WKO%2BUFFmNDNQLLKp3qtYOOkMmhEW7hYVymCE%3D\"}]}\r\ncf-ray: a1a34b0869bc35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 181622\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":181622,"size_decoded":183028,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"99aac2f45cba52a0def8db674c0f9838","sha1":"6705d3749b573a2b8d6bde3c442f9504bdfa40a1","sha256":"6f144c10c96b38072b03c2e48db04c6c2ef2bff25040c444a2265b4fe1c12f30","sha512":"ad96314ff6a420426915e64f3d6c5a7aef7561dca3888d4c4c306866b6d4cf61fe44c5e1940ab995609664b9a673194baec7b4229bd13e1020f2a046a2e65a44","ssdeep":"3072:syoRKgdJ75VrUb2JCqvdjNWerJsCdEnRyFB2yb8vFg3/U9geulpSOyydXLe:slj5VhHdjEwJF0CBHbF7lLDd7e","tlshash":"8704123e054c51bfbcfecc87ba986dc88be553e2424c2a93744b660d563392e91f84d9","first_seen":"2026-07-10T22:57:05.835099Z","last_seen":"2026-07-12T21:56:13.976605Z","times_seen":6,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/ethereum-D8eyHuXQ.svg","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.640Z","timestamp":1783893335640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/ethereum-D8eyHuXQ.svg HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=kLhTRA5j4RpOyYLL; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.66; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/svg+xml\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"6a51f93e-236e\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gLkBSOEVWPUTxAqUYRMH9A7rXL%2B3UbKg61MNKgemrQ6R2czODtIK6lU2tfIc37wVxtMa6Gm3Go7P%2BAdYFHOBOGc5u957WZQaJ3fhJz3jtnF3dz7zx48X4Rr6kA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1a34b03ce56568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9070,"size_decoded":4740,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3600c0025adc4a693fd9f69754a4290d","sha1":"68bf3099d8d50df03c01b81aed41164057af8809","sha256":"c48b1716c803c5bfbb672750b82165c8f130ad4d44812624664675ebcf69cf8a","sha512":"80af010cbbcfef04cd08a93fb2911771b19a5a20b6c48c46e27d9a30fbad65f6ce1d77a0aa881f7073eec8348ea3846a706986abf9ad88e528f2c9383b0f8be6","ssdeep":"192:ZRX+G88rKrcEShs9phbnhLCkZmNxDdtjK829vA+mCNCU1x87jFm4TGgBh2:F3KrcWaws4dCUgU4TZ2","tlshash":"9012c6ec5bf882d8f442e3eadd3684983aa39afb3791ce25c3549e05b41105c5896ed3","first_seen":"2026-05-03T09:25:58.499Z","last_seen":"2026-07-12T22:22:18.514328Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/yakuza-honor.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.398Z","timestamp":1783893336398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/yakuza-honor.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"28ce2-19e9f36e960\"\r\nlast-modified: Sat, 06 Jun 2026 23:13:56 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yazZojzZav6kEvQ0rYzlI3RGZQtVb7tRi6RQVLwBQP5YzqWuuk6p4Lo3LaKlXpe3TEDJhVixc6xEc7pWa0YRfaLeIA7tYa7ff12TkPCtSDpKk6KsqWR3b8co97YRy%2BSWIf0%3D\"}]}\r\ncf-ray: a1a34b0889c835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 167138\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167138,"size_decoded":168538,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dc64adbe3aee7856fe50553a8fea2a25","sha1":"f3bc2088f13de5372680029541b23fea4c3c554a","sha256":"fafd1dfa6c36d17040d28ea9b506d44fac84fdb8e4a5d4728664e87a5643e184","sha512":"3d0d015f25ec79dc4634eb61505cf8996414e55e48ae8c020afd87ab8d2ff476111a2684daffcb5cbed3984d4596d27bb32db390424c2ae19657b5a7c9b715b9","ssdeep":"3072:RVT3sDAMjIgaQd40nkeB4yNoIahz5AZIyhhQxpTtLOL3JmKYYRvOqOgtEP43:RVTWL4mGI458gLu3JmKHvOjgtEA3","tlshash":"fcf323c5c84b05c797fbaf927c341a285fc27289157d8af5ca339919f9db8e81095382","first_seen":"2026-07-10T22:57:09.571411Z","last_seen":"2026-07-12T22:22:18.532337Z","times_seen":13,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/fonts/Proxima%20Nova%20Regular.ttf","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.492Z","timestamp":1783893335492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /fonts/Proxima%20Nova%20Regular.ttf HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/assets/index-s28uPECG.css\r\nCookie: __ddg8_=7jV1YtkJ9WErIr9H; __ddg10_=1783893335; __ddg9_=172.64.209.62; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=SpfTpOZ92M9DRJFP; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.81; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93d-2d120\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:17 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vd1H%2BgbHMxEFSAycgIG2G5aBfkhd76p6wcfsMUFJhWkhUBVotI9fxsblIX07W4XwbIusRFsCPmIYKDk%2F%2FN0%2F68nMLjKVj08SbWv9lt4QF3MeslkcnTJ6aZseoA%3D%3D\"}]}\r\ncf-ray: a1a34b02de23568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 184608\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":184608,"size_decoded":185651,"mime_type":"application/octet-stream","magic":"TrueType Font data, 17 tables, 1st \"FFTM\", 30 names, Macintosh","md5":"386c8ff06aaa9d3ea14528a5703b6ec5","sha1":"7174dee37d9851739eb6e9f24152a91e1024c9bd","sha256":"f715d9c3a8a59c2f8079955680d811dfdf069f769d8521d830c85ae3393dc6a8","sha512":"7cb4238a5f19b76ce505139f6e99de9d2e835d2049ad95bfa2ffbb352213dd6be6143bdd6659cd5e81cb7903dc253dc6fe5750330cfacadf7de5690c4a8f50cf","ssdeep":"3072:txztObnQGIaqRnDzM2bxreVW+KMY+Qc8FT69FNpp3JtGQY8E8VoLw2E8H7O1j7Bb:tZtOr/A+g1c8taZTJVoLoD","tlshash":"31049586eafb0e2fe3564af8dee6967a0765b407ef3135893d80e540d2d72602843dd4","first_seen":"2023-05-24T17:26:21Z","last_seen":"2026-07-12T22:22:18.525272Z","times_seen":306,"resource_available":false,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":510,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/live?limit=8","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.608Z","timestamp":1783893335608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/games/live?limit=8 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tuno.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: W/\"b46-1Ji6s9WiN18QFXOB+0WP8IkTtew\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UuqXW4JMvJBlLvMRG%2FzZxZnQVDLbSVzj5f41M1YzyM84PufkP6r%2FN1ZmoD8TCdtZ6aB%2FNaXQKl4MtTRfiHpAozYKXkCM8MLXhhx8Tc9syj76QOpoCyxddt%2BMBagM5q5B78s%3D\"}]}\r\ncf-ray: a1a34b03892135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2886,"size_decoded":2349,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4c3f1f25c7cd4007c6b850548808df3d","sha1":"d498bab3d5a2375f10157381fb458ff08913b5ec","sha256":"42f76c5309593ff64830c3cd2ed0f8cc7ec60932edd2ba0925eabcc8a13bc7d3","sha512":"0e534d75c3620e041cd1126317b411dfc3950924c362784aa1f0521e64294c6ee85767ac077169566fcf4ed4d64c9c7385fda43aa6e0488d155b11c3477fff7b","ssdeep":"","tlshash":"a551012f54542df8d7351a905409b49decedf27b45d00808849b8c3bcce4ad639bc967","first_seen":"2026-07-12T21:56:13.98068Z","last_seen":"2026-07-12T21:56:13.98068Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/bitcoin-mljS7kJq.svg","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.638Z","timestamp":1783893335638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/bitcoin-mljS7kJq.svg HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=gdupKbrUaXsZaa7k; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.76; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/svg+xml\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: W/\"6a51f93e-2238\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KjMzRBrqfjQpZzzxQY2EUK2x%2BnAsAuKXn2fZr2qCW3f8a8%2B3IK65zeHA84M%2BiPfs9J%2BgeIX95dbe8TSb%2F14li9OSLvubXbVvx%2BjAgXa4NzxaVbFRmPnzaOB08w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1a34b03be55568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8760,"size_decoded":5019,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"710d57e714cad5fc98006574c6d725d7","sha1":"2bd571b41b7de877bc6d90b2dfd7fb5e6693402f","sha256":"13ec9cdc689bf43163ffb90f01fbe8f21fa52f8682df748a0a07d712a6d826cb","sha512":"65be74910f381df417e37ea166c8d7b489534e4b87cbfdc27677c26e491c23b4aa10fa1d35a611355e6d71d437e3c4f65d19cf821527e08de90943a46f5880e8","ssdeep":"192:Xw2tvul277dypCfZp6XozrP6wJ+Lc0rFvBD:Asx7ZfZp6fDLcAD","tlshash":"8202d8dd7bf456e0f842e3faca2340a6352334fa2691ca58c39ded45a6511ae4c59cc3","first_seen":"2026-05-03T09:25:58.573157Z","last_seen":"2026-07-12T22:22:18.557673Z","times_seen":24,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/tron-BZApJ2eW.svg","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.643Z","timestamp":1783893335643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/tron-BZApJ2eW.svg HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=tiQTR9zVMqFreLM2; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.223.18; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/svg+xml\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: W/\"6a51f93e-271b\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MJACUwj7AP9hZIximSoHt88qjO4PDmQaHlhmvOCu5XkRP8lkzGwnhldI1TOEgxJX7Pkw7M%2BDFxSZlv%2FZGCiYB4mHfPD5IMM5O92immpTo5r%2F6sFEa9p6eItQUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1a34b03ce59568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10011,"size_decoded":5304,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6240b2bcb50d109a6e30c90d5b4c4a2b","sha1":"b9ac50ac536b859bff64ac6f811726ab0b189698","sha256":"209fa71e5bed05604e1c6aaf5e49788ac77a338aee22c651c69f0221677ef501","sha512":"8f301595be83c08f9b4462ab8d562e832ae4f7d6c7b61622a369badd44afbb3a101f26a6b4a7861b7b49c493e95b43326b8f2126c5dfe99565d99bfc5c1635f4","ssdeep":"192:71jYen8OoOMx9CQk+PMnqIRcgqxv8qqQX0:hjC0+PMZRqxHqQX0","tlshash":"5222c5ce67f5a9f0f006f7d9ca620479311b68f93a02ce5bc7e90d89a11185ed586ccb","first_seen":"2026-05-03T09:25:58.539074Z","last_seen":"2026-07-12T22:22:18.498271Z","times_seen":24,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-vs-zombies-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.348Z","timestamp":1783893336348,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/chicken-vs-zombies-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"49ec-19e1889e2b0\"\r\nlast-modified: Mon, 11 May 2026 19:35:50 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iwgTm5kovkiNFzjLkgaXqX1NbU%2FzeIZ5DUBhN8zeBVL5fjFj4RebRrS%2FQnk6DsqLLFc%2FkxpZyZlh5H%2BzF8tGv%2FDijSGjslm63dpGVlllTKrL9I8xcM1HADojs%2FCFG8Db3C8%3D\"}]}\r\ncf-ray: a1a34b0829a735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18924\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18924,"size_decoded":20332,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3c496079d347b741f8a61c9ff13e5f25","sha1":"d34e547f81a344f52f32078078090b0e6dd0c549","sha256":"6b61c65973ee02deb325d6cb91f24c3201e376b4fbb3bd25c7dbb14ebe1b28b7","sha512":"a1030c0c003398488e2b35d4e0777a0f7de2936831b2ab3fe0f21d64290e84db39fd293b0ea1f8a0ecc35e99e0e7c927d8699f0cec504219d226e1c13464f488","ssdeep":"384:zGjo/RN/ZF6TOfWpzF86HGv3QVv/bOwvJ9WHV82zghRHl3Kb7+q:zGcZVZZfy587vYvyw3S82u3KF","tlshash":"ee82d1e92fa5f094e296772451135350523390a01d40de8bfdf9e27f2932e509caefad","first_seen":"2026-07-10T22:56:48.11117Z","last_seen":"2026-07-12T22:22:18.521189Z","times_seen":23,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20fparty2.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.364Z","timestamp":1783893336364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20fparty2.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"5de2-19e87ec4fab\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:11 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XzvEy6wbvmsYZ68Mkv8e0RSunkBLitRS0NQGWb0ORcy46UeJWfbW%2BXJFOIXMYCkqAIS8h%2FTkWBQ%2B1tpiUhlDYTJ1q2d9kIT3zSPg2VV9sw6x4WBXucdB%2FNnMMoZA3YWWrcc%3D\"}]}\r\ncf-ray: a1a34b0849b235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24034\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24034,"size_decoded":25438,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7161f3dee408d108342e9e493f909cb5","sha1":"4b222932bfc1c35565091316edd289960b13b60d","sha256":"15238cc480c000b408607fcbfd0d3cc978ca6ed13f08a450f75f3b6de8a5eb02","sha512":"24930bfdc8ae5dab65139966a3b51428bba54ddcce47d52c9aadfcb41409030c0f9a8b1510a493fda7768cd4b56bf611c9f3a1e774cf96b14228739d142f3ca1","ssdeep":"384:yUTyQuU+GCFhCtevu528zIqnolnMB0LhogwGx4OPd1+/HrkKKsTOOpzCEj:yUTyQOjC+u+qnolxd6OPT+/HrnTOOdnj","tlshash":"16b2e1d0a815d71e990222cca66c1ee7ee6ba58b7bc00331cf3890e6dd18857a759cb5","first_seen":"2026-07-10T22:56:48.070404Z","last_seen":"2026-07-12T22:22:18.541646Z","times_seen":20,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/10265.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.403Z","timestamp":1783893336403,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/10265.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"345a0-19e87ead964\"\r\nlast-modified: Tue, 02 Jun 2026 10:39:35 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qg2%2BWpsncqw2%2FByUI%2BShBXTe54cQ7%2BRcGI1sQxtjXLLLbfIAgM259%2FIk6x9%2B4k7HTD0KLlOCQy850bx3Jbs3XWOiqtgecevK27%2FBhk%2BmBshFdUV4LYs7NmeUZ%2BFdfVUpks4%3D\"}]}\r\ncf-ray: a1a34b0889cc35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 214432\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214432,"size_decoded":215848,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"35f8dfce34c3fd974b882ce9fcabbbde","sha1":"d85ea4d5146aea144ec82168be5d693c31d994b3","sha256":"573260e91bd7da49ac5ae0603fe2763d55e1ace65e5fec91c9b73582d4fec6d2","sha512":"6fb26c23a8a4f1f4819a43285438baf9b8a2e8d81e4c191f9b152bf0ddc4a3782e0db3ee57403b243fc0f0608d9ed808c1564be340703dba5aca898ee348a564","ssdeep":"6144:jeq4YoDepa6I02nKpe5EztGWeI3NUWpb12:a8Oe06IxKplxt7dUoR2","tlshash":"ab24237d9267201d75ebc907b15a8e29378b3d2964b81bf29e7d88c873072567220ec6","first_seen":"2026-07-10T22:57:05.882541Z","last_seen":"2026-07-12T21:56:13.986573Z","times_seen":10,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.495Z","timestamp":1783893335495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tuno.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 12:47:16 GMT\r\nexpires: Mon, 12 Jul 2027 12:47:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 32899\r\nlast-modified: Wed, 10 Sep 2025 16:42:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29732,"size_decoded":30544,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29732, version 1.0","md5":"9591efe1be62434d2d107e2b19702029","sha1":"6438e7de08adb0a989e1947ff06284771f884eb6","sha256":"99d6c78e043710d4f83ed90716779798b7b04eb690f73e0ad0e8f32d1f0e98c2","sha512":"3cc3323210ab19dc07513ef4df0bc9eb7b85b0143fa39c37d79b6fdb1b8309d34b96c452f264d3ab3a409b5a75c6872d48c22f54aead05e78454004106546067","ssdeep":"384:fNPmz/ALfS8CKEhoIqMViQziPMBdrB2PasMyqhdJf00dHmgJIW+uvTVsRZBhW7AC:8zoRCKEhTkQJdrQXqJf00GpubVsRZtI","tlshash":"0bd2f104c9605335c6ec64b69b114a7bffed488265e2b9d520a8eea61761fc8e09053f","first_seen":"2025-09-12T15:30:51.751475Z","last_seen":"2026-07-13T01:21:40.47903Z","times_seen":755,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":31,"send":0,"wait":17,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/fonts/Proxima%20Nova%20Semibold.ttf","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.500Z","timestamp":1783893335500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /fonts/Proxima%20Nova%20Semibold.ttf HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/assets/index-s28uPECG.css\r\nCookie: __ddg8_=7jV1YtkJ9WErIr9H; __ddg10_=1783893335; __ddg9_=172.64.209.62; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=UxcE4IPprZSbUbPb; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=172.64.209.34; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93d-1fec8\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:17 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NhXdD%2FoOakGW4mbih%2FQhWkZh4TQ0JoSkQqeOn%2B5tERUBSDlIpr66lGjl1EoukLZXPeaolLfnPUh554rrAip%2FDwxe%2FquaZJnknR4TH1%2Bn%2BNTCyIJ%2BQ%2BPDy2FG5g%3D%3D\"}]}\r\ncf-ray: a1a34b02ee24568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 130760\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130760,"size_decoded":131812,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 28 names, Macintosh","md5":"3510e34fcc8e060e13e69a6e9272ba82","sha1":"76dd51cd14bacf7f8a4c3be19d58de6e4c55dd03","sha256":"c6588560d54a7b904bbc04ca47495e897dd6e9bce843d37757da566e5089cd63","sha512":"72754ace481a7bb50bdeb1545f53abd9846d217ac4a3c5e8a2d40dca5293c5db67efc99225d1f454d98960473388b4b82120d51529fb237028d2994674c9b08a","ssdeep":"3072:0HYa7NyOQIyhKsNBHcdGF/XmHuXo2E8H7O1j7B3+gAyR1K:0bcHPWHOcK","tlshash":"7ed38d4ff383dbffde55257eaab0f7b5325ae53c1a5d330daa445179e0190e8088068a","first_seen":"2024-02-19T16:27:02Z","last_seen":"2026-07-12T22:22:18.542909Z","times_seen":44,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/mainpage","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.604Z","timestamp":1783893335604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/games/mainpage HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tuno.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: W/\"e478-k8PU+/NrgkVe7jSchk9iWTnu07c\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gazCVhpDLHRPrVGQOgd5rkoraOe5Y32e6hYhy%2FAwyeOhyv8zmN8aPrxTQVzuRB%2F5EzUzhgM6HEM%2BmuJ%2Fonsv%2Fc45xvIFkTeWuanALucrvMH9ILQB9NX1EtlFvOybXQumwQc%3D\"}]}\r\ncf-ray: a1a34b03891f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58488,"size_decoded":5759,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ec0c8355db4a0c9a23946870700412f2","sha1":"93c3d4fbf36b82455eee349c864f625939eed3b7","sha256":"9e4ace1aaed41277138b5b9c4335cb4042ba9a5ce4984d2fed36b902175d66a4","sha512":"bd2e36f342cd5859f49cb6d98aefbe13e4f1ae2272eaf029aa67ef2e68239a25f2f3c61478fe4ca437b7a68abc0ea6c165385ac9b8eaf34777a00a534a0e62f6","ssdeep":"768:4/hyhl5vyTOlj+lH8S1qlmLtHLmsIPT7vJOM7JfNynohNvHOvbbtWa+nIPvtrizY:VvBNJvqLOgNx","tlshash":"b143f07e4b6c7c34f230029ac54e71d6b4c9b13fcd85560cf3b84a65cad59ea2a9e01e","first_seen":"2026-07-12T21:56:13.988921Z","last_seen":"2026-07-12T21:56:13.988921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"op-api.gambl.bet/track","fqdn":"op-api.gambl.bet","domain":"gambl.bet","tld":"bet"},"ip":{"addr":"172.67.140.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.783Z","timestamp":1783893335783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gambl.bet","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:26:36 GMT","end":"Sat, 03 Oct 2026 15:26:35 GMT"},"fingerprint":{"sha1":"C6:89:9C:7F:59:81:87:BB:1B:D8:C8:FE:CF:81:CD:0D:A4:E4:D7:DB","sha256":"48:E2:DA:EA:3D:13:BC:5A:36:A2:07:52:61:24:2E:FB:51:32:16:AD:7A:57:1D:93:D7:96:51:0C:D4:12:39:FA"}}},"request":{"raw":"OPTIONS /track HTTP/1.1\r\nHost: op-api.gambl.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,openpanel-client-id,openpanel-sdk-name,openpanel-sdk-version\r\nReferer: https://tuno.mom/\r\nOrigin: https://tuno.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=3DTmmSWP1HWMHEE6; Domain=.gambl.bet; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.gambl.bet; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.97; Domain=.gambl.bet; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg1_=hPEufoLQWkvq4gSlWszU; Domain=.gambl.bet; HttpOnly; Path=/; Expires=Mon, 12-Jul-2027 21:55:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccess-control-allow-headers: content-type,openpanel-client-id,openpanel-sdk-name,openpanel-sdk-version\r\naccess-control-allow-methods: GET,HEAD,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 604800\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\nvary: Origin, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=66tYZyxVih%2FNxUe1ekmRp3CFCYHcpVmtPFFeJzorBzS7XWEyWVJl3gOdwAEWqpkyVZvOX%2B4nTKLHWyc%2B1zR5eSayoo2DxIWXOg5OmvyP%2FXcOoNMNQ%2BcBEqnPPLsLMxhAgAG1\"}]}\r\ncf-ray: a1a34b04eb27b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1225,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T15:17:53.208588Z","times_seen":17215495,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":26,"connect":15,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"op-api.gambl.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/mine-slot-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.346Z","timestamp":1783893336346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/mine-slot-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"1b448-19e188c4ea6\"\r\nlast-modified: Mon, 11 May 2026 19:38:28 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4GJwZbIu3PRbmAuRoOHDIEpxtqtZ9Mal6apILP1O3ApYgj01rjAMt8jJl%2BchBfVLknjmXlQEnRiEFJuEoFsufn9TJ62tn3ZuE%2BXEtbs6RtoTmsEN0p9PAO3OzQ8Hjd845nM%3D\"}]}\r\ncf-ray: a1a34b0829a635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 111688\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111688,"size_decoded":113090,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7406dba4e1b62922d069c29462970e92","sha1":"2bb50a426fc171056758c2f1fe4da069bd317a55","sha256":"a1a7495aee2e2ec7e96d71aba77df32c181435df6daaf59f1f0dfbcbb1a89397","sha512":"f5624722848711d80f1d17db89bd6f160f8e8535f5c6e5b397925b686dea04c0239eca11ccbf753ffdc1e97d2c5006356d4ddeac83501b989309a8a3c62ed43f","ssdeep":"3072:PBZq2UAp8x3gncKwSfB6eC3QxHPq4Sh27r2neBIQWzUomhHVD:a9Ap8x3zS7CDt0PmeBIRt01D","tlshash":"04b31242f3751568dc6d93f93589eb067297838883476aa6ae233256d409470b78cbcf","first_seen":"2026-07-10T22:56:48.049907Z","last_seen":"2026-07-12T22:22:18.558552Z","times_seen":23,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/live?limit=8","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:55.925Z","timestamp":1783893355925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/games/live?limit=8 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nOrigin: https://tuno.mom\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:55 GMT\r\netag: W/\"b0e-tQBHuEHU0qBI8fI1SvRx4gxr4o8\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iOcvVcN2krl8k1vN3Zuu9E5IAs2nhaZzA9pgdLsDkdmQfCJhmPh%2FrjH5nLmBJVI%2B4Wq1xAw%2Bu1OzxPt9wjMD1QagtrfTPUmfSM0WhZ8GS%2BR2TU9tOkIlngHvuHrYMTe3RWQ%3D\"}]}\r\ncf-ray: a1a34b8288ae35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2830,"size_decoded":2333,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"88fbdbe038b368650305e575d2912bc7","sha1":"b50047b841d4d2a048f1f2354af471e20c6be28f","sha256":"211802fa44940b69fa28266bdc7f9ebc0aedf78fd0cf8bbb58f1976234039444","sha512":"d88e0ffffe8bfbe6a29cd0851ec484281e78a7501bf6aee72b7c3b0414b1c3b5abeb6ef26bf3b1f37502814cc39ebb568362cbdd9b0366ef740427b826f4063c","ssdeep":"","tlshash":"1951dd6f58482dfdd7745ad0884a709de8ddb27b45d0080881da8e3eccf4aea29bc527","first_seen":"2026-07-12T21:56:13.992717Z","last_seen":"2026-07-12T21:56:13.992717Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/index-Cht9A9cj.js","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:34.275Z","timestamp":1783893334275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/index-Cht9A9cj.js HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=jIVkkzTeGcI18W07; __ddg10_=1783893333; __ddg9_=162.158.222.19; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=BTezqHUx4FTEpROj; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:34 GMT\n__ddg10_=1783893334; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:34 GMT\n__ddg9_=172.64.209.42; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:34 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: application/javascript\r\ndate: Sun, 12 Jul 2026 21:55:34 GMT\r\netag: W/\"6a51f93e-254f38\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LDOIbVf1lxZUROdH3xhMqGopNdt6WTyTN3RONme0jl7iWbKb55LwQ12dbsK9YQijKf5P8%2Fn6MPrzQxyh60d%2B6tfKS%2BJy7tz02Au62hgJ7SA2PIhSSlEC9cXM1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1a34afb3d63568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2445112,"size_decoded":683632,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42322)","md5":"5f54d40230e48cd6df2cf26a87ff0eed","sha1":"7edbbb05926abb09caf684316df8018eca12b015","sha256":"3b89c49bced347de1ed1a4b22d2609d4f72b078e49c1b48c5d7404d95f322565","sha512":"0a1e70476cc816ab199d51500a7c16ac75b17b8d3ee75e1a8c2bcb7f856efbb0ecee701760edfb5b46c0de0734792873dd7489c1c19808e9d174bc4053eaf8ca","ssdeep":"24576:/fHR6OsZ0IoekZ1iIPCzpp2oaXXBRzTtq7MJFKL:HHrY0IoeS1FPCzn2oaXXBRHjJgL","tlshash":"14258e1c67edb2a9059b724538492d3b757c143df6ea824198e8bb6f20f1c64c13fb68","first_seen":"2026-07-12T21:56:13.994646Z","last_seen":"2026-07-12T21:56:13.994646Z","times_seen":1,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":293,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/support_field_background-BshW8QoL.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.437Z","timestamp":1783893335437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/support_field_background-BshW8QoL.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=7jV1YtkJ9WErIr9H; __ddg10_=1783893335; __ddg9_=172.64.209.62; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=oMMgtcqdul2JJLp1; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.207; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-2e6c\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oSMSGPRvAGevZq4c0y%2FP6u9CrifZMaLgCPaMdwjqjqPMT1yMltoxZHKtD5gKqeWKrjyp1CaruFnDHrEdmORAg97x03DaD7a4zbw8k%2BWJF8wt5pVnTcxoHfsK9Q%3D%3D\"}]}\r\ncf-ray: a1a34b027e1f568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11884\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11884,"size_decoded":12957,"mime_type":"image/webp","magic":"PNG image data, 330 x 71, 8-bit/color RGBA, non-interlaced","md5":"b51aad96d902ca506e02d9ad1e1f4dcd","sha1":"198a23d1aa7246db409bc4dc06544727daa44c78","sha256":"c7cf203481ad4dc3a93b0723608f5ad80e6da3af73a858ac2ce16ce37c35af8f","sha512":"f7178d64025d3c470b88310d14650f51fe29d7b7712ec192f7a0162ca0611d9ca001f94fb3dfe37d349099b9f01dbe75650a1ad9c7c438f4509c6f910628fe56","ssdeep":"192:lS+lvkmDNjAIekomrbNoibMKExB2smII2PchoP1lOkK+dHTMB27GknU/wDf:E+lvHjAYWibmqsq2USzOkvdzH6kn77","tlshash":"0332bfdb32f4b165197e4b8065f23017cc5e89b85fd4074c762b650e0676b1727b98d3","first_seen":"2026-05-03T09:25:58.56254Z","last_seen":"2026-07-12T22:22:18.510901Z","times_seen":24,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/bg-slide-rolls-royce-DEuKrT2h.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.611Z","timestamp":1783893335611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/bg-slide-rolls-royce-DEuKrT2h.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=zjaWqP8VRnaCNbwK; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=172.64.209.68; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-44ac8\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q9l%2BiZO81%2F2MO6NgPoPM1L8G9t5Zl8vn08EA3%2BZqBLz3AFzcK%2BqlR7Xzx0%2BDE0H9HrZPX%2B4NmgmECDOnFfXK8vdm0xnqtyjhvrcSj8yvANFJ4qoKMsYAQJXOXA%3D%3D\"}]}\r\ncf-ray: a1a34b039e46568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 281288\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281288,"size_decoded":282369,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d673eb3e0c4501683a08ad34bb1a5662","sha1":"d264f72535c24d5dadb6dfa43bd7a9cd11d8baa4","sha256":"e92cb9c066e132e79635910fae8265736749a928129d26cf5bf60bb5bf09ae0d","sha512":"5a730e07953aed75d2f3e1aa9c20137bc6f968662a0c65dd6d7f896b5b838f606439e8c43036dfb78237003b1448e823ec319b11520f6ced2f9572c9e721cba0","ssdeep":"6144:Avwm9g1xMmIoXAo1O7dXK0b7+adRSJrYwpCDlp:AYV/KD7dXK0b7aRm7","tlshash":"0c542396bfe8fbdec8576510c6eda331835035f9dc22d8429c09a7e976688f25e70423","first_seen":"2026-05-03T09:25:58.422158Z","last_seen":"2026-07-12T22:22:18.511648Z","times_seen":24,"resource_available":false,"data":null}},"time_used":842,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":670,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/crypto_gambling_foundation-BbxkjRu0.svg","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.649Z","timestamp":1783893335649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/crypto_gambling_foundation-BbxkjRu0.svg HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=SBkJvIqnKLDWB50E; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.10; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/svg+xml\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: W/\"6a51f93e-89fc\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xe%2BEBApYZRPArk%2Bg2%2BtFfnseW9O5tkhphnDxdzQU0a%2FDPetz%2FGxBq5X6kC6UXWQE2O134PKWeLpk7xHLmHQSNvR90G5%2BKcU8%2F19xqjC4qYeOHLms4vnIUum7lA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1a34b03de5c568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35324,"size_decoded":15429,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ff6e9ffc2b4de36bea9c02f407fe588","sha1":"73f4d8b48155cd22dd74bff2100d178f73062451","sha256":"7b94606480b18209752427b8347bee08f39aabfc57c8ac3dc1fee4edb94761af","sha512":"362eeff5f4bd054e1c6770bb4902689d8a4c943c1060abe2eba5817376864df31eafce85042c66fc57c7a17b30e5627a93e0771aa7edd5bb4ce238a5dc8edb99","ssdeep":"768:Jq2EK4povVWRgXI4NRoiiD7h+MiyF36A9n9NXCm5f9nWFJq:I/Jz2VzoNDsOFKIn3Xjf95","tlshash":"bff2b4d837f6a3f8f000f7f5572650747e4624f67b62c978c3b65e98e54a44d8ca8890","first_seen":"2026-05-03T09:25:58.490776Z","last_seen":"2026-07-12T22:22:18.569281Z","times_seen":24,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.353Z","timestamp":1783893336353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"13ea2-19e1889de90\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5VA%2BMyOQ8HanPZBy6Hj7%2FTA6YbKnZ5NKV6x%2Bl1DIjEDNmWZpMcbSAGjYAgA0CsmNzIELTjQ97S0UVZgyz%2FIQpaNMb0%2FomcyYA6KevxNB%2Bk1nAZPvot0rxnso1LyoZ0oonpg%3D\"}]}\r\ncf-ray: a1a34b0839ab35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 81570\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81570,"size_decoded":82979,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"bd31dc34709ab28154febf333c9d7b61","sha1":"957e8b303a3a7eac3058fbb67cc82c673569388c","sha256":"c4a2ab24afece8e542c58e54a15c9b5ba387d224aec670a881d89cfc49f63f8d","sha512":"e77dc104b82d541bfbc1dd6a5195a6a9f7bc24e32e4acb2764a0118427fba1bee9b07b4716d3f4228fff4205b447c79ca0e9ac5af12d18e6eac868af1ec8b9d5","ssdeep":"1536:XtLff+jHHoz3d9eMxKlXfg7N2OT0RyDxbH+pMEaJUIitksm:Xt0nUd9KXfg7NrmytgMhitkL","tlshash":"c28302daff75e12428a5d3a7a117770c421c9ef6e2bf2ee12c1a517a50efd84b812314","first_seen":"2026-05-03T09:25:58.558516Z","last_seen":"2026-07-12T22:22:18.540259Z","times_seen":24,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/types","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.599Z","timestamp":1783893335599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/games/types HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tuno.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: W/\"113-MZFQhLGi8NSK/m7hlroK5N6TEqY\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NtVjSSHa0LDYCYBygDJzjBgyuLQnotvWoDwYk4ndJsGuh2%2B4lGjduaGDlC5AH4cMEMHho%2FyU43lCxD35G7Z31wNjb59h0sa8YzN39rBqS%2BDokiA8iGc5oNhSS5x7e3oxcTU%3D\"}]}\r\ncf-ray: a1a34b03891c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":275,"size_decoded":1489,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a750afa2fa37a9718f3fb46ee312cf00","sha1":"31915084b1a2f0d48afe6ee196ba0ae4de9312a6","sha256":"552fa3fa38aecc162047ea3f893bd1eaa1419ecfdaf02bb7f6fe6becc7b16a0e","sha512":"5da81d7c09edff8071157ec7759715193f83334987ed01863b176842d5a3540dd4da60f8156fa8f1a3ef4294873de3bd4b12f5ddd2fd05576757bdc977896137","ssdeep":"","tlshash":"b2d017220001ddbaea947fc420c6f803f99420a182845408f22ccb3ac28c345b87ab6f","first_seen":"2026-05-03T09:25:58.437926Z","last_seen":"2026-07-12T22:22:18.568578Z","times_seen":24,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/d-phone-DGLb5d2k.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.632Z","timestamp":1783893335632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/d-phone-DGLb5d2k.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=k8xMTyCKxQzucwo6; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.91; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-2dd3e\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BUtfKcO1YyhWM3Yj6LukskdwSlEQ97jURjI3SsRJ%2Fqp771NFHgA%2F%2F%2BQk54QxT9E8NPkPZTbXjndYZqP4F453uiv%2FKlL3N7c12pdhjvBDk6T7eQHdMgoKCkA1oA%3D%3D\"}]}\r\ncf-ray: a1a34b03be52568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 187710\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187710,"size_decoded":188792,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d025311454404cb7edb954d465b8c335","sha1":"67f9be9ae70f95220fab0371079bde6908ba7f17","sha256":"bce4690101bdbf5eac323bcd11b0a4f0d724bfeab82f639635b44d9ced378494","sha512":"9f870c3f00f40fdd5bba968201cb7f350cc63f2ae4ca5daf98180d3d6c6f7eb7c5f505c3948ae821223d4f1c1b7e6e7e685f430b1b3853179d9a798ffc5dbbec","ssdeep":"3072:dRXCVfXk9JGyJ/JggV5WFN+n4LG6LV/ATZAASe8TqbWiVv3CJmWx:TCVfsJfJxggV54+16LVoTuASe8+bJVvW","tlshash":"d204239e834a0eefd42fef82523686fef644b547cac1a8d689d18c0d19042a73567d54","first_seen":"2026-05-03T09:25:58.529961Z","last_seen":"2026-07-12T22:22:18.560552Z","times_seen":24,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":469,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/werder_bremen-06cJMe_2.svg","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.647Z","timestamp":1783893335647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/werder_bremen-06cJMe_2.svg HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=S2MLhENOHnxHdrNw; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.108; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/svg+xml\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: W/\"6a51f93e-2c57\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UGHnzVRI7z6OgZonN5y22zH19gg1yyQjT%2Fo0tuz12letN7QCeIip5XNBQrsAP2CLhCvL%2BtxFnsBGeq7Q5eg76gczk5HbH5HXN12K8A25R6tqfWoagLKqf5p45Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1a34b03ce5b568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11351,"size_decoded":5087,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9bf3a09c5db8178ee8262acb3bb930a4","sha1":"5032a3c1f0f3f784ce17f6b8370540e5c2891d7a","sha256":"4c5c02448915860d44a50f469bee4fb82dcb088732b31453fe094e85dcc2070b","sha512":"52ce5d3074909e7460d144c21b3fb496c10ee6c09efd602e1ea52f205daea3e11752627e45c889c23a26a08f2a580729acbe0687555344b4311a861f37e991cd","ssdeep":"192:W/uehQxb9c9qniNEgj9pZh9nTd0f6WYsFL2PcxX7NBZl447mGRtejVZ:WWTeHNZ999nTezYsREcxX7fF7mGyjVZ","tlshash":"3f3240cde7ee82ecb04357f99a611cb4291b05f52740cee9c7b71a11eca246e8c31883","first_seen":"2026-05-03T09:25:58.568484Z","last_seen":"2026-07-12T22:22:18.534554Z","times_seen":24,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20starlight.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.371Z","timestamp":1783893336371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20starlight.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"8a02-19e87eca807\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:34 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FbOTrkOVVJjFwaEFqcCFq6BP%2FrJnHnve1F5NJo8i6EhEg9kSw5YCW1j8LmcB2yr0KC9BlLZaaFi0N8QyYacsac6JbUxhTpV9cmMnSdurfMWyHbbhB%2B%2Fj7n%2FgzGVeW8hK98U%3D\"}]}\r\ncf-ray: a1a34b0859b735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35330\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35330,"size_decoded":36734,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fb70ba24f84087137f07fd3cf86867e2","sha1":"6386b0c6ba2cb19855f820832bd93519e0681bd0","sha256":"779f8d03af2585cdd3584a77c86785ffbe20b691ee740d604aa92bf33abc2c89","sha512":"22cf4a6685a034663d99dc36632d8b1013cebcaa19ea5f6cfa3ff3a3b4851bf3ef6bea86a8768af559b15fcf6456cb630f39258d5042639ccd814affd0d6d0f0","ssdeep":"768:YW2SZkHXcFP2HKuzbO3poGubgpsP08oOFSGIw2rMO/7F/fceme:LZiXcFeJY1u8AoNGIw21DF/f7","tlshash":"51f2f1d48b4ca3d1ac94212e5e1f943232cbd78646ae4e90412b63907f2cb67673b9c7","first_seen":"2026-07-10T22:56:48.046937Z","last_seen":"2026-07-12T22:22:18.576254Z","times_seen":18,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/public/pwa-config?domain=tuno.mom\u0026platform=web","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.191Z","timestamp":1783893335191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/public/pwa-config?domain=tuno.mom\u0026platform=web HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nOrigin: https://tuno.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 400 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: W/\"62-jIniE1qGtkwZxc6p3KDdgJWY1ts\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06t7ZiJImqlwcHxQriCdt%2FeYvS04wZAGqiAt1b2%2F4wjYNmfCGhyF7jN9p5dYMh6XY%2FW1OCB0Gb66cu7Xpnc3l1Q7%2BuzKidxS0qD9OH2u%2FARBoeaxqunESAjKHZuYKG4Jozo%3D\"}]}\r\ncf-ray: a1a34b0138e735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 98\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":1433,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"30335302470ddc7b0e774d1d88b9fb12","sha1":"8c89e2135a86b64c19c5cea9dca0dd809598d6db","sha256":"4199e5189bfafe7a12018f9a1404a6e39f8c40513f6385935d91fa2760f72964","sha512":"e47d8212ecaf38357792c10df0ab78e45f42d0b500aa4007970822a7c1c4f1258c385e71f13f82ccaa77e7388a38987351e35b9f52f073effe370bb14c2ebdc3","ssdeep":"","tlshash":"09b012629b130d6607750442b88028001fdc02d31ef6b649008cd5f86ac39a0d017e3d","first_seen":"2026-05-03T09:25:58.474517Z","last_seen":"2026-07-12T22:22:18.564421Z","times_seen":24,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":20,"connect":20,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/banner-3-v1-ipNYXXfR.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.618Z","timestamp":1783893335618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/banner-3-v1-ipNYXXfR.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=UKJU5hvFH05IVcum; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=172.64.209.18; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: \"6a51f93e-16e98\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 2\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CsTcWeOwhZJTwxlOuYF0PLg%2B8nmbSviAigXuys4T%2Bm%2FSHcwMthviwADTMH4nztcMrSiX6yy%2BhG5HNjYNYXvctWUlcGeZNgrhoVMU%2F8naAjnB2SyW0lImrOKd8g%3D%3D\"}]}\r\ncf-ray: a1a34b03ae4a568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 93848\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93848,"size_decoded":94926,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b2bf969e3989b7a2f23632e486451c61","sha1":"be34f407e94c18e0e12f7da621f733d55fdc7d33","sha256":"3b2ab6d2d740b53452afb1f058afdec5dd78f57c119d5459226da07719c46f95","sha512":"c57c4fa8553ef3e9cef26774796023fded5120f7b001a637426b4a70a5cf3d502a89b8c1ee84c4a23846b70b5c4a57111fb61dabe778dfcab8d7963301a1750f","ssdeep":"1536:QBdqZZjPsttKG1QHTPPA7fjEO5XACYJFPyOjx3xp4KOrypj+r+1qM9hniJESk4sP:udhz1aTPPA7fjEO5wJ/6Ol3xROOpjY2T","tlshash":"019312f5e754c6749e89749ca56c3bae1a070737399613adf4a0fe8612e0776403f0ac","first_seen":"2026-05-03T09:25:58.446433Z","last_seen":"2026-07-12T22:22:18.57415Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1237,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/ripple-DG_x0ao9.svg","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.641Z","timestamp":1783893335641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/ripple-DG_x0ao9.svg HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=qnbcwjZ9oiUEPLHY; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.64; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/svg+xml\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: W/\"6a51f93e-1096\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yFdHsQ91dDXux0mzx1yEG7zKMEXLlmXxhw%2FAtqI%2BUELwc9uJ87uc8wIhZJ1QllBGdqqZql6B3yyKP5IwFL0HClOmsU%2BBq7xO3Kz%2FfqaW4DZKQDqJW5exVw%2FGnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1a34b03ce57568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4246,"size_decoded":3038,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"668b47cfc023c8a691e80389bb5fd455","sha1":"2f1711702c2fc16060572dea79d3ce43ade79063","sha256":"dd3cfa287ffaa2afa98ec543a129d05366bd9dc5f48f30e2464c49ded9ad0f99","sha512":"919b1dcb302d98ce735a63838a00fe067874bff76f3ba76095fc61afe5228f3a19f4ac038a0e05d5e31fdf607c3442c754e60fdf77e5a5232ce07493d7a71b2a","ssdeep":"96:o0Wo/HqlWSTKxG4HU1C+2McValTyf+i0YW2/Z80kR:o0Wo/Ktd40T2M5yf+i0YW2C0S","tlshash":"1e91c4da73b592fcf446e3e0e9331c39768bb1f11a23cd26ce955d42e1a189d0824c97","first_seen":"2026-05-03T09:25:58.44074Z","last_seen":"2026-07-12T22:22:18.504253Z","times_seen":24,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/20FS_image-CTw73Nm_.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.653Z","timestamp":1783893335653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/20FS_image-CTw73Nm_.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=6nVUumvkbbxeIpBR; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.167; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-9f2b\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kg4fRduoZ99PEQ09ATybKhh7n8L1nk0ZB917vptXX4lspPm1bcM9rOZkGhqgMqvmzUvri9Xn0KbqUzrc3Jj9r7R3bwoxAbp%2BBBmbNAiPI8CQUICwp8B8cr%2BcKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1a34b03de5f568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40747\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40747,"size_decoded":41820,"mime_type":"image/webp","magic":"PNG image data, 139 x 178, 8-bit/color RGBA, non-interlaced","md5":"97564493dca4d562ff94dc225815a45d","sha1":"d14dd698c42d2aab8e996cecf83924fe270c47ed","sha256":"6e7dc280727fb9557f78c8bc6accbe542ab96afe23ffa650abced9d7b433efde","sha512":"d9306172861ed71a7541d339c94e1ebd58462ee118a3e6ea68125d9b2fc44f0461851293f642f9e3868f8f13ed04774b94f562baf0cf053ab29e6d701b7fac68","ssdeep":"768:OttvaqnJ6/TQs4wWW2ycvTzibk+8ZpAC0O+I1d708WdQoJL6IqInZO039:+MAJ6ssJB2ysDP4SFDDo1Tnk039","tlshash":"3903f132856b11b3229d8e433b24674a8cffcf8337e0434866dcbf99654e9bd5e50046","first_seen":"2026-05-03T09:25:58.478441Z","last_seen":"2026-07-12T22:22:18.546774Z","times_seen":24,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/four_footer_icons-DtogFTme.svg","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.650Z","timestamp":1783893335650,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/four_footer_icons-DtogFTme.svg HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=3a7BJqYCrWeXUTuF; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=172.64.209.14; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/svg+xml\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: W/\"6a51f93e-becf\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jKUR6eIUvIv2AFL3ibFkqcq2lbpedI2%2FZQyMUvQLncMFxukQvdDzY6LSzKlnzLAUFlxuS0C8lAMhrjuDDNfiuty6YbpiRCOiMAfoLWvDGH1mV37Z1II1mKlXyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1a34b03de5d568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48847,"size_decoded":20056,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb5e1c21811b02433e586468542b46fc","sha1":"b776f6a1ed3d0f7cba4865735c2aed1a54752747","sha256":"01b97b17936fb9f2e013354e9fce99a64a42ad4d714fde061698c7f9dc05ef01","sha512":"4d491365985e196b6f3849a7bb2c1e7d191dcc482a6f1f91c86531c84f4387a1cf228f1ed0f098ee8991d03af21e429ea6095b635e790b7d889b06396ed692fe","ssdeep":"768:JlxkPAA53GZV5JLphzrTboxLc6B4aScK9PIY9BIe:Ve1GH1nsymhTKJBIe","tlshash":"1f23a3ff7be421f0a046e7e5ee328475755b68fb7b92cf44c3889e947952098c889c81","first_seen":"2026-05-03T09:25:58.431523Z","last_seen":"2026-07-12T22:22:18.551512Z","times_seen":24,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-two-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.354Z","timestamp":1783893336354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-two-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"1e8d7-19e1889e150\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GXXRlOYkt7GEqEwgvXaqBzPJwH2DFV2%2Fq%2Fer937OUsdwHrZ4MZpLR7MySO8x%2BpM4j3UUcvcXwIi8H9rgWV50nWmNvyCzKnaHjBmjK%2BCgD1AbOYHcSFszvruOnMxKXHcAB7w%3D\"}]}\r\ncf-ray: a1a34b0839ac35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 125143\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125143,"size_decoded":126549,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"2d07f21bc75cb17f3940a7123055df18","sha1":"c3fd481de5f7cc6fc3a4bfbce86e2bbdba460c80","sha256":"9ffc0c533072f341ae2d4e275de1a7a5bf86aa9ff2ae655d29a762af22dc6889","sha512":"28f58e9df9b691e95c7020e505dd5625a186f3841a5ded08138178f438c6cbde536e97c10faeff65caacc8a9e56e1d2794e20664bdeca81e12c2d6e98f4b5817","ssdeep":"3072:jbk1ZeasmvqGo36qLo19b9fxS81h2n1Yg:U1Zea5fdWo71xDzS1N","tlshash":"33c31253a6202d8bc25b83fe551b055cbf7d8de00d29baf78e5ffd618a38ca1e944409","first_seen":"2026-05-03T09:25:58.448805Z","last_seen":"2026-07-12T22:22:18.526623Z","times_seen":24,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/lucky-neko.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.384Z","timestamp":1783893336384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/lucky-neko.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"2348c-19e9f372cf0\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:13 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z5pWYVu4MxS0jXgIB1wQzhQ%2BE0%2F5lkbXfKo2%2F%2F7bzWDL3g%2FrmHf%2FeXMmD2xw23wjpM7w6PM6gFUZi0ysv9CNZDG4DiKJFT7%2Bo6GyjoUbH99ihvcdK3Gst87Ov%2FwmboQ%2BqI0%3D\"}]}\r\ncf-ray: a1a34b0869bf35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 144524\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144524,"size_decoded":145940,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7a66f6a2a45ffeb6365a9888fea9d071","sha1":"9d21d8cebcced6c6d06aacc78b5ce284b40abba5","sha256":"8d6a20e89555c6993d5b364f1a223d2b535dc6dda62a2029e109480e4e50d0a1","sha512":"dfb60fe490e76647ea3e84eb22782ffcbb18f31e164864b848e68f5aebfdbef0290a8b18c1aa28ebdf17b824b9fff27b6b5163bc79d50c8100bc2833c965be75","ssdeep":"3072:x/hzMOC0dko1b7E05ml+65J3Q/TLlQrsFLwHFEPLqgu9:x/hzM1qn1b7E2d65ZQ/T6hHFPp","tlshash":"b2e312eadf784b19488cffb17063d168cdb07f0bdf7a8be66613160ac2285455b5c285","first_seen":"2026-07-10T22:56:48.039027Z","last_seen":"2026-07-12T22:22:18.572024Z","times_seen":7,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/favicon.svg","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.940Z","timestamp":1783893336940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=UKJU5hvFH05IVcum; __ddg10_=1783893335; __ddg9_=172.64.209.18; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=h0S3QnJu0UKZsDyC; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:36 GMT\n__ddg10_=1783893336; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:36 GMT\n__ddg9_=172.64.209.62; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncontent-type: image/svg+xml\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\nlast-modified: Sat, 11 Jul 2026 08:05:17 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nddg-cache-status: HIT,MISS\r\netag: \"6a51f93d-6b81\"\r\nage: 1\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tODvIjI5HNDaGNmcmMRfMKZlZqb3r8zvxXx6zE6iytXJT0FXkMBCYlMH0K8AIMENw5mAJvXtfhuFLRUDZwGNEGKIM7jwNV%2FyRT1jCBJ1%2FdByoQJV7KtZXibhKg%3D%3D\"}]}\r\ncf-ray: a1a34b0bef8c568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10743\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27521,"size_decoded":11812,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57dd6243f25a6a327faee0f5d9e3a00c","sha1":"4f5bcc776bb696e35c18b9b56830d604ed200881","sha256":"d148c821c5534f0838aec73b74a3c9973bf4b32f4f34313de2edbffd5acd219f","sha512":"7a1873bf7d01341aa11a8d42da00fdef026c8d1f66143a0724613292ba736da7181b3cd927be7a9e2bf20471059aecee9738495c0f0deeaad712b71407ee59a5","ssdeep":"384:UgoG2IO0VyyrQcx9ipry1q9bU0CYKHE7zuk1PP1DnVdHupNH7TfSshpqzjNUq4ax:QHirQcKry2DKH7XfSsLujymcTiiaNn","tlshash":"91c274dd7b684df5e58ae3ebfb210099750ea4fa66c18b70c35c9e0934228acdd15c93","first_seen":"2026-05-03T09:25:58.438795Z","last_seen":"2026-07-12T22:22:18.507489Z","times_seen":24,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/mobile_install-B-NhXZqn.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.634Z","timestamp":1783893335634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/mobile_install-B-NhXZqn.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=Z0yYl7fMh1p4JrQ4; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.33; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-23c92\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1fGVJ1COQ%2BM8vpFl%2Fc%2BtB6Wl7IRIGFpHPTMu4%2Bfr9P70XTn3U9kkmkUJF9A4YQLaVyJqqhyigc6Ge7%2FE6h7p%2F6EKqHC3lCnfwPgvk8N3pTOj0EhN6TOV5j0AHw%3D%3D\"}]}\r\ncf-ray: a1a34b03be53568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 146578\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146578,"size_decoded":147660,"mime_type":"image/webp","magic":"PNG image data, 459 x 404, 8-bit/color RGBA, non-interlaced","md5":"5e7f065a53f00254f8f353e77492d523","sha1":"cc3d0bfbc1d66bbc34de5e24171f3c2400b05628","sha256":"81a0851c2d7776b76bf69fea2d6b16d3f12573a2d1cab6b5b4160401cb3abf05","sha512":"e6cb5e7b536aedf6018cf9bda85a78a98ce838cdbefcdebadf0ff7adc128df57026c3705ad090f0a84c6f4c75b10dcd1441e00f6669f8d891cccfaa9f0760c0a","ssdeep":"3072:3UUFZi23IObq7HRyhS0nfQ7YTG+adi8GU3xqKLymtWxUBvtwsuJ:EUFZdbe7HRP0fQ7Y6+aY8GEb3tWeBlwJ","tlshash":"c7e3128e9886c800a21f5d67e6b5f26d5cecc2d7c5cf53fc111562934ae2ab2042f22f","first_seen":"2026-05-03T09:25:58.511186Z","last_seen":"2026-07-12T22:22:18.502904Z","times_seen":24,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/support-4Z33OB_R.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.636Z","timestamp":1783893335636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/support-4Z33OB_R.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=S2NWmQq2uQXdJcov; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.30; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-b536\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TjPDoxCKmHUoj0yP0VcR8YeF3HOXJU6H2lDr%2Fhq0makUgY93IALq%2BBjvweIxTtoCyCcpyaa%2BSKJl9Oh0scZTaRpp%2F%2Flpr5x4CgPlqUdAutu1wIAV6Xss4euW7g%3D%3D\"}]}\r\ncf-ray: a1a34b03be54568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 46390\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46390,"size_decoded":47468,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9be49a67675fe3aa2c6dc15f5ff61c95","sha1":"76650d568ad89db5c0e0c0cd2a5833965e169ae4","sha256":"6349248b1e8b1735cd5ff25b389e4f5e0076229f8b7701bf13643e03768d91f8","sha512":"2c072a313c2c1eaed604454bfbfdaf2a8adc59cc23a65b99f8e6ebe5dc8623f7982560b6fbc7e6442cf59e869f10f3fe657bad6be5b4c6c5e3a2d25a3912149e","ssdeep":"768:fKyqe5a4UGSX6VOeZpmP38keRXafldax4Gvm7oZFq/ZnA6PbxioHsoSz+Fd92liJ:yyqcaS+Jqpmf8k2addq/vm7oZ0/ZA6PT","tlshash":"422301b995ea4692fccd1132652e932b80219f753954c4d6e6dec43c8987c18efabe0c","first_seen":"2026-05-03T09:25:58.462667Z","last_seen":"2026-07-12T22:22:18.556764Z","times_seen":24,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20doghouse2.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.361Z","timestamp":1783893336361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20doghouse2.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"5ff2-19e87ec3977\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:05 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hP4L1rNlt1SnPadRdboFBDqzKrhhuEEsuPKe%2BbZbKUVYundi4ww4ssh0Pvq2KOy21XMtmGONh1iuSgsfDE0RG6GKT0ozpnGdaA5e%2F6Qd6yOOZigzXPZdMr3%2B1J2qosnWXFw%3D\"}]}\r\ncf-ray: a1a34b0849b135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24562\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24562,"size_decoded":25964,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8b8375cc142490d5c100642b6e07708b","sha1":"136e02d0079c82c415c54ce9c4b38e453317882a","sha256":"9ffd8d162fb2081b6938efc5eef9466b92a61ea81de30642aee9da49af78eb83","sha512":"6cff72933a3d0056f09ad8ab14a40915177014f0cfbe97e5b37e0e4b979e8dd8a5a1c0ea7b7400db86c01ab20b418f302db1940605cec8f9efa4c606269ffc3d","ssdeep":"384:MK58qfWdepslW9FZKJ6I6GyYXOqZly2YGobRpxgiMs6QA2tbdtP0UAm/qm5P7sHx:58qfJpslW9FZKJt6vYX1Z8J7ss6ytbf8","tlshash":"b7b2e09c5a14ffc5075017c91fb3b0c38dd04b7daf5ea57998debc4a44a1230a8fa41a","first_seen":"2026-07-10T22:57:05.853292Z","last_seen":"2026-07-12T21:56:14.012697Z","times_seen":19,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/muay-thai-champion.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.394Z","timestamp":1783893336394,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/muay-thai-champion.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"27416-19e9f3720bc\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:10 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=85F%2BuXvFIVddRzS6pnwj7Rj0eDPDdYyNqYrE7b3rXqLaZVcu5ASCUHXvEvKmPcra5ZLOBr25saPUutVVWcCrhNxAyUJPtKJSOAI0WD%2BKXr14iQ3Z14HwkKayK7eQdvZ14yk%3D\"}]}\r\ncf-ray: a1a34b0879c735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 160790\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160790,"size_decoded":162192,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"015527a6fd7c25fab2db458886141ec1","sha1":"08952b6ca5fa2a4ebef6baa6167149f1e7231ef0","sha256":"e419f23473cf1bfedefbabead9216691cab68c17defc17cdbc355392948c8570","sha512":"235b8e3f9e565399ccda7e3ed9407f67cab8a1c0de7bc3f21a874b9b4656472937ba094140509a7ca0321d915e4b08d8b34fafa1f988621fba904b7790e0bbc5","ssdeep":"3072:fg8JQbwX5XUspmw70HkLYwsOFN6lIMNx5DXt7Wv4ZpLHXpcVmXj9la2:I8JQbwpPpmw70HSsWElxN3DpWQbiVm5t","tlshash":"adf3224ee673ca249aaaeff96bd9c0ec461575160dcd9c02c8cd479fbe485408baf160","first_seen":"2026-07-10T22:56:48.051935Z","last_seen":"2026-07-12T22:22:18.523739Z","times_seen":11,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/10251.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.396Z","timestamp":1783893336396,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/10251.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"2d660-19e87eace84\"\r\nlast-modified: Tue, 02 Jun 2026 10:39:32 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PGZ7onqKUbMzWFwDr40a8dICbcDiFwYVo2px%2BygYW9JXcxl4HnltO2pK53JSuM9vDt4ZVXhiMM3CGkGDCwmaVUuc6FQi2X9Wu7Zx62ACGIsNq95GJN%2B3%2F86vasmQ7TNgphE%3D\"}]}\r\ncf-ray: a1a34b0879c635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 185952\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":185952,"size_decoded":187356,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"33bc673a38f45cfb91b6fa8c953a3668","sha1":"792922bc5cdbe90a37eb40bdfb88325e549b3c0b","sha256":"22125e87fab1b9d54f222dbd8620fab84910f8bd32ef43347dd9e8be3c3a40a2","sha512":"2462d56ed232674a9307b9f059d0f08b63d14fcbda4e67efac58f778972fe182e70a667a6c41d03ed320e12c9bb21def10216f45531f8f9c2604106e969cdaf4","ssdeep":"3072:DkkKr0Xl3Z9NDpX6vglu1RqZOrEqeB0bdNUl78VLvt5f5N87RtCCM:DkwZLR6vgY1RqV4vt5fT873rM","tlshash":"f10412e57293f970a8d186f3f7ec1f970cea4b890bd914f82a58678655272e2d127203","first_seen":"2026-07-10T22:56:48.077535Z","last_seen":"2026-07-12T22:22:18.561883Z","times_seen":11,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/rise-of-apollo.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.400Z","timestamp":1783893336400,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/rise-of-apollo.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"27fce-19e9f370bf0\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:05 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=crcCT%2FHntLCFhx6bX6NtVQqQRgfHnfK26rDR8S8ZL1dWC5jjpcF9CaPQihZqbeNBU72gY1PHVRjVX3%2FlcgkHOioEoBkaG09t3hq5PnBVlYoD7syldPW%2B09g%2Bv%2BvuZNjU8K0%3D\"}]}\r\ncf-ray: a1a34b0889c935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 163790\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163790,"size_decoded":165198,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f846feb10287b3235ac4635a4c15d62e","sha1":"23325fe11137d5e394355885f3764e7682fe6c56","sha256":"5936a3e93bdcdedcd3f145fc06a8b733656b764e062ee9735e60d95168d113b9","sha512":"df975acd60d89e9cb76c31092b8be1e0d88da45a56bc11a3a5a715ea9edeb3b81e4ed295a9abac9dd62225093cdbfbd116a9690563d0a343bd562d4420b14613","ssdeep":"3072:VrZEW0tvZ+X7Kp4FmF+xYa1cjjUvEbr1mnLa23i8n7RGx+r/Lfaq:VOWcUmCmY2SIj5bxmLBn7RXrj5","tlshash":"cdf323c50b60edb45d0440d59ab2343b79996b4efd701d8af3064bbc4c24c8e5ab5bbe","first_seen":"2026-07-10T22:57:09.632449Z","last_seen":"2026-07-12T21:56:14.015121Z","times_seen":10,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/index-s28uPECG.css","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:34.277Z","timestamp":1783893334277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/index-s28uPECG.css HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=jIVkkzTeGcI18W07; __ddg10_=1783893333; __ddg9_=162.158.222.19; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=1iOgIm6hGLfDcJyY; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:34 GMT\n__ddg10_=1783893334; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:34 GMT\n__ddg9_=162.158.222.100; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:34 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: text/css\r\ndate: Sun, 12 Jul 2026 21:55:34 GMT\r\netag: W/\"6a51f93e-3b267\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vT5kVwp0KkUD2LclMhO%2BMsCOIFxOk0%2FWCidGXFyHqBmv38mXCcBsF14fYl8%2Bo2Grgd0%2FaOgHOT5Ok7AjztiWVZKn8mMbqY7jpESdSN%2B5WVrKxkUdeVhXBv9Mpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a1a34afb3d65568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242279,"size_decoded":33378,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e78be1a1b5cfccf27bb26c84e6935629","sha1":"a9fdf7e25269b194a550a57dd303c8cd86d86534","sha256":"d0c3d7f69b20d908427dc2f06fa824ed8463163db65936a463c1681f120d6450","sha512":"279754598b7857a343b591dd0dc87c36f83b09a3548c7d3e53d3ea52f14a47bf249588ffea86552c16434f03215d1c9267d4e575a621bfc2820b688c73624b63","ssdeep":"6144:cAKCY1M98tcIrhAdT2Racpl8LD2Of9xZBnCz+RXYcKhROUfgf4r5uSL0XpkppTay:EiLwPVr","tlshash":"563490a4a275e53fbc37b0fd93acf80da109b195de260addb901612663d37f21c36a14","first_seen":"2026-07-10T22:56:48.06391Z","last_seen":"2026-07-12T22:22:18.510149Z","times_seen":23,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/fonts/Proxima%20Nova%20Extrabold.ttf","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.488Z","timestamp":1783893335488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /fonts/Proxima%20Nova%20Extrabold.ttf HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/assets/index-s28uPECG.css\r\nCookie: __ddg8_=7jV1YtkJ9WErIr9H; __ddg10_=1783893335; __ddg9_=172.64.209.62; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=zlHLXMWRnnPOfHJx; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=172.64.209.42; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ncontent-type: application/octet-stream\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93d-1f9a0\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:17 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I5nIZy9icNpwJj98aXMsBa0671241yMq6z3Wobk%2FpVHzD1nb8M4rAiEoCXf%2FN1NSGD%2BildeCUX6ZnxgP%2BQ7o4N3WV2Kuc1C0I9yhAGg83gHqQFb8pB8G6vpLyg%3D%3D\"}]}\r\ncf-ray: a1a34b02de22568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 129440\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129440,"size_decoded":130482,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 30 names, Macintosh","md5":"ecce738438b07e0f2700c264633fc55b","sha1":"8d0e90e6a0f9dbe299f7f07c765df1626c1fdd20","sha256":"6cd9cca7999d5953f3c596cd7b4822d1a871a2d3b8b85823243ab1368a2234de","sha512":"5441a6b93c92e27fa185349be7289859eb7701537245b89ee5fd2bc221e46305bdbaf6024e7c9d8c11ea94a27f51036f5e0a76aad96335dfee7bb2f372c3c9a5","ssdeep":"3072:gcDXjxKwoaX0gLZOVKk/PoSR0Y5CURdoM2E8H7O1j7B3+gAyR1S:gxjVQSR0YjRWgS","tlshash":"33c34b43e383cf5edba999be9d31f3753616e67d6f6a330e63402079f50b2a8a050185","first_seen":"2026-04-14T01:08:26.757884Z","last_seen":"2026-07-12T22:22:18.497434Z","times_seen":29,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/claim_reward_wheel_collapsed-DCJ6-LHa.png","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.544Z","timestamp":1783893335544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/claim_reward_wheel_collapsed-DCJ6-LHa.png HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=usvi7hgth8kNqTUa; __ddg10_=1783893335; __ddg9_=172.64.209.22; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=yOaU0SjMkrMveT6m; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.113; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/png\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-61fe\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZS2ivakUbxUEsWEkEilbzvVQrC93lmRQjikS8ZawmnvGtzR%2BJr61uaXAbFo9iaRABCPOvaYdUek3FiIAeqMlukkd8gytoPlgpZN3BEKJXz8RB1eAzJKpOJJhCg%3D%3D\"}]}\r\ncf-ray: a1a34b032e2d568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25086,"size_decoded":26156,"mime_type":"image/png","magic":"PNG image data, 96 x 140, 8-bit/color RGBA, non-interlaced","md5":"4539bfb3316a00ac522555b8527489e5","sha1":"1757714da7a77745dacc4f718078807f91c01032","sha256":"07978d96aff53bc48fbed60e1b02cf013c1f9e016c257b2f2790adccc4c9fe8a","sha512":"30c8ee5b936bdf61ac6d1f0e89667c30c26f9bf06192da6adcc7495de43c510df15ad7471ddc970fffd36e9615e804d77817437ae6dedb0c064e8e7d84f8d7f2","ssdeep":"768:rCAhF2kP9gdDKwObqHKsJi/b2MlRCcGwQC+cdUH:m65YKjGHK0i/ednUUH","tlshash":"64b2e1ffe3ac48ea864c84575206b64bb4f617d38b0efc09dd11e83d98c934584b5ab9","first_seen":"2026-05-03T09:25:58.521087Z","last_seen":"2026-07-12T22:22:18.508579Z","times_seen":24,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":252,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/d-zues-Brs_uoRm.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.622Z","timestamp":1783893335622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/d-zues-Brs_uoRm.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=W7bVMtbBO3KYssRO; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=172.64.209.2; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-27c46\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iyoFOIpiT8yHrf66kBxXic3zK4yMK7Zkk8iZZa20KzUiCx6JapY3AkGIe6gGf1NfV332jzGOKcoTzETEnAc0mrRYo%2BRo5b9Pmpeyxtnw48vyitDJhG2ZxHkquQ%3D%3D\"}]}\r\ncf-ray: a1a34b03ae4c568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 162886\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162886,"size_decoded":163956,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"962bf5d8512b7941a01d57d32c49a3d2","sha1":"a52ed0616ff5073be1ccb5e63f56370aa0fd41ef","sha256":"2f69cb9f94d8c95c0ee6b9d33e6eeef64dc9ae4886ed4e8156506beb08475772","sha512":"35bfb0970c65146fc012369afdf61ee8aa33921d93fe97b880eb5a69beb592a0b4179fc6364397bb49ae0d7607ab4a9b5155954476abf45de47e512a43f545ef","ssdeep":"3072:ehuoS+qVEXcaY++mTvYE97Mfi59mbSF2wYHfhDLfR5TlaaGKlNllOurZNW1rGeT3:cuoYHP+JvYQ7RQFXfRh3lNfrZNW16eT3","tlshash":"4bf32239226af794b0f59ff6569826c411444c0f0fc1da9079b6f383627cb6eca86762","first_seen":"2026-05-03T09:25:58.529097Z","last_seen":"2026-07-12T22:22:18.574872Z","times_seen":24,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":317,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/cryptocom-CL7Ghwue.svg","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.645Z","timestamp":1783893335645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/cryptocom-CL7Ghwue.svg HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=0mnS0lTsnwz0YKQ7; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.93; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/svg+xml\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: W/\"6a51f93e-145c\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8h8Do2G0Fjkaa%2BO6Z557azeTdTxXGaeaDePhjjFosbk2FJ01S%2FhDi%2FoIXBe%2BUeHgmA0cQKCwJEtoKoc9dEOCH%2BaJVMPnYJkxrIWKGnzSW2u%2BNyJzaOLyFRTbQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1a34b03ce5a568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5212,"size_decoded":2943,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1d1d09fd759918c16c030d9ad3ab8311","sha1":"17a6f1877ff138cf956339c93992f62663d5d207","sha256":"932a9f99e97842571bf490bacbd702458458bd3855e2fe1881b57903b1dd2ca6","sha512":"118907e69bf418432854f04fafb3e17b6bb8a8d90fc4c8fb2d1c404c9837eb538c8fcdc5ee730a685fd13e064dc99be61dca02b1b7752b43737a204e1745f496","ssdeep":"96:wlgiEHU5ZkKmDhVpQino3ZyKxD7pJrtHw0oxeq4iKh:wTAfDPCimEK17ph1a4Xh","tlshash":"aeb113eaa76488e1d84693fedf3d16ea337228bd3932c45963d16e22685117e884ddc0","first_seen":"2026-05-03T09:25:58.435924Z","last_seen":"2026-07-12T22:22:18.566034Z","times_seen":24,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:55:33.390Z","timestamp":1783893333390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=jIVkkzTeGcI18W07; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:33 GMT\n__ddg10_=1783893333; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:33 GMT\n__ddg9_=162.158.222.19; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:33 GMT\n__ddg1_=bcn5hmpyOaj4WmVACNru; Domain=.tuno.mom; HttpOnly; Path=/; Expires=Mon, 12-Jul-2027 21:55:33 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-encoding: zstd\r\ncache-control: no-cache\r\ncontent-type: text/html\r\ndate: Sun, 12 Jul 2026 21:55:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2B4nRv7ztQtMdctfxWMQ2ln8rGXA2PDjw2fa07OCHMRTGCgSa%2F%2B32960J%2BXw0b%2B8oRGR%2BRMY3DJFa2CEdeTQ3u%2BDhf3HNeFRx4LAIY0v%2FX5cicFWoRl04kEyww%3D%3D\"}]}\r\ncf-ray: a1a34af67d1b568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1947,"size_decoded":1834,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"32615c4005a0110b781e3bb4d09ab52f","sha1":"d9a777425044128541c8f955198ae6702599066c","sha256":"31d8fd11140a2d5b594d2e37ba15559bfd3b44ad29a5ea2b6ea0ebdc7b7b5b22","sha512":"69903558a8e0ecb9b978f658174d6df4b34a8858c2ff16fddd09360ea7a5780b5ca80c40f65f0fdbdfaf10accf7d90f77af7b320a599be1e3da748e70dd4cbc7","ssdeep":"","tlshash":"b641065351b0942422a183341ee3f55c9e2e868793486d99b6a450ef0fc67d4cbf7bf2","first_seen":"2026-07-10T22:56:48.120785Z","last_seen":"2026-07-12T22:22:18.524448Z","times_seen":23,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":96,"connect":23,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.498Z","timestamp":1783893335498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/fredoka/v17/X7n64b87HvSqjb_WIi2yDCRwoQ_k7367_DWu89U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://tuno.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 12:47:16 GMT\r\nexpires: Mon, 12 Jul 2027 12:47:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 32899\r\nlast-modified: Wed, 10 Sep 2025 16:42:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29732,"size_decoded":30544,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29732, version 1.0","md5":"9591efe1be62434d2d107e2b19702029","sha1":"6438e7de08adb0a989e1947ff06284771f884eb6","sha256":"99d6c78e043710d4f83ed90716779798b7b04eb690f73e0ad0e8f32d1f0e98c2","sha512":"3cc3323210ab19dc07513ef4df0bc9eb7b85b0143fa39c37d79b6fdb1b8309d34b96c452f264d3ab3a409b5a75c6872d48c22f54aead05e78454004106546067","ssdeep":"384:fNPmz/ALfS8CKEhoIqMViQziPMBdrB2PasMyqhdJf00dHmgJIW+uvTVsRZBhW7AC:8zoRCKEhTkQJdrQXqJf00GpubVsRZtI","tlshash":"0bd2f104c9605335c6ec64b69b114a7bffed488265e2b9d520a8eea61761fc8e09053f","first_seen":"2025-09-12T15:30:51.751475Z","last_seen":"2026-07-13T01:21:40.47903Z","times_seen":755,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":22,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/loader-CXc1Xk5X.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.543Z","timestamp":1783893335543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/loader-CXc1Xk5X.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=usvi7hgth8kNqTUa; __ddg10_=1783893335; __ddg9_=172.64.209.22; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=NW7LwK7RcgDoSsla; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=172.64.209.18; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-4eaa\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mfrJoKmJKqkzeGM3GoHfbzcBp4bP282rONMHzlhUUyYL0wbxOqDSPVpuuKAocqJSCIQLiWTmKt9ODxhwOl7Nb8l29YZg4e3GpyHsBRORr1dZ9flHwMIMzSSzBw%3D%3D\"}]}\r\ncf-ray: a1a34b032e2c568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20138\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20138,"size_decoded":21205,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1f0d0f88ada70f9aec52dbd193ec3c6f","sha1":"f56a77bcb7e424b2efa490a29f102a0d0bbcb14c","sha256":"6ac9fd6a4bb0d8ed08573fc939a6aac8b67d75d844e7689d4eabc200cdf145dd","sha512":"6c94f5e59498e1671c6ece4ae7c58a60b8958306381a163a5262ff0037f8e1df3499bf272dcfd5a423300000bf87b297a3ff842a45af155d5eb26395604ee8b9","ssdeep":"384:DD/7SGkMvrBoBY8bWx0SFJEqgtPMPBaPYq7kB+LTxrw36b5BrcCvwRBNTfVCddaG:/DScjBU0xxS3kQxrO69qCvwRrRCdW8","tlshash":"0692e09d4291cc617069e13b956039dfdda17d3fbca017da63817f44c480dc98a1afae","first_seen":"2026-05-03T09:25:58.503509Z","last_seen":"2026-07-12T22:22:18.528426Z","times_seen":24,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/fortune-wheel/items","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.596Z","timestamp":1783893335596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/fortune-wheel/items HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tuno.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: W/\"2e4-sff25hHekvz23YgNGT+WHtH94WQ\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c%2BAZ5oUuyBmInS4da056I8KuA6UWdmcoUE324epLD%2BsYUtjZHRzemZ2C%2FzMkUHwt2Sh2zHVHbrHgcYQ%2BAQROnC30Dk%2BX8ri2XwBnbCu1F9gzm3FnghyKQJz2aMsIp9jHt%2B8%3D\"}]}\r\ncf-ray: a1a34b03791b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":740,"size_decoded":1481,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1542203cde8d57fd871336cb9861c0fb","sha1":"b1f7f6e611de92fcf6dd880d193f961ed1fde164","sha256":"aeaf5e6636adf6e24900124f6a6713b8fdfe6e0fa6c17b1926b14e6311df9b5c","sha512":"99d64f0de3b76d1c2d00610682417299481a7d21a5eb84d8f0ca4c7ae1d231d6b2ce879a12f91e63de3b1b33193699f4c27b617c27b93ba19e09437c56fe0052","ssdeep":"","tlshash":"a0010a79387dc9bee011a8c9f8c289b5f1693146908d4e7415ddc43c67cd4d0b419f3a","first_seen":"2026-07-10T22:56:48.026435Z","last_seen":"2026-07-12T22:22:18.555842Z","times_seen":23,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/opened-present-CEvNLioh.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.629Z","timestamp":1783893335629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/opened-present-CEvNLioh.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=3jwad3FOljAWtVHZ; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.221; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-3ff94\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2BX0k%2BGKMvKtTEpp26WPlmlwKWGK6xlyvb6vfImDk%2Bzv08wVi9bXK4lIQQaFaIBndgHSnlf%2F8cH7K1ekvbEjanp%2FkBcR4vndjYv4pcreCvTYe7mwXC%2B9IjOWUw%3D%3D\"}]}\r\ncf-ray: a1a34b03be50568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 262036\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":262036,"size_decoded":263119,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0d2baa6171c82004a7a67d102a54d218","sha1":"924dc4c0de181492fd2ba8333f0367370ec0bd9e","sha256":"a39bea34716d84ad0cbe1025dd76a63d40adec168c16e18d6d5f3ae57a00bbe4","sha512":"b7e536c3ad0a9df9ab921939a0ff28a7a8184edc08373430132151b9a436b50a876b400365144697523da6f81067295599c265ce8760912db4dda7229da1b009","ssdeep":"6144:UxE0KXqMTTrkKUHLn2w/D2M694CxdDxCddvtFGvBo:O2XqCTrzUrn2wTCxmFGvBo","tlshash":"464423d202c9c9da02833b21df18dc1a76622e96b3979840bd4ef5a3dfd93096253f65","first_seen":"2026-05-03T09:25:58.453632Z","last_seen":"2026-07-12T22:22:18.525956Z","times_seen":24,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":316,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/treasures-of-aztec.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.405Z","timestamp":1783893336405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/treasures-of-aztec.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"2bc1a-19e9f36f890\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:00 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Frq1GKUmecfK%2Br1VGy6ct2dusaT8UCgqJWtvYSJVaEwvXCVTKgG3UGkwR5PchQWhJ2GDUIIYOO4w4KWhCj5dI%2FzyaSgcZvhpZmSghVZdfhyairqia3vJf3NLTyKI3aam%2BYY%3D\"}]}\r\ncf-ray: a1a34b0889cd35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 179226\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":179226,"size_decoded":180630,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"159b55dd119ace08f169c05d6114f13c","sha1":"6a2c0e3c4925abb04b41177a253a6ecce50f6341","sha256":"9a85b5ecda9b78cbb3793c036540c002d6f24add1a7fd895af1c68b29c2bdbd2","sha512":"20aa3271c146f03e4a60cb674b151e084a0d0233cd425550863622be381fed6795691d6122bd8d3ed0251c8a076af1a62e352b7d8784d9ed69336869e095e375","ssdeep":"3072:teJQwUeOtXikSZsYpb+TwXQSra/PotmIghfD8ySYRx0y/K3hS3zj3qa0Y4:NwUB9VTwXQ7/UmT3l2a34","tlshash":"8704121ec6ac32b2c8c116338e6b27f644d7d436b8e594ba5b4d50d8c67327e2ec4d49","first_seen":"2026-07-10T22:56:48.078713Z","last_seen":"2026-07-12T21:56:14.022748Z","times_seen":9,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/live?limit=8","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:45.854Z","timestamp":1783893345854,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/games/live?limit=8 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nOrigin: https://tuno.mom\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:45 GMT\r\netag: W/\"b48-GVAhj42FuLWssrjKko/jLLzSi7U\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oAXM6D4%2BmNjJYHrzcHGZqsAT6IL8Kcs0jar7cNnOE5iFGgccr9QDvFZAh2jqXqSAWmq54M%2Fuo0VRMtj11Sx0zSG85tzQTip2f%2FB%2FGozitlht41zSKRg1zSnq2jOxrjLT9xU%3D\"}]}\r\ncf-ray: a1a34b43a88435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2888,"size_decoded":2305,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f35e10b9ffc077be63a16979c0c2161","sha1":"1950218f8d85b8b5acb2b8ca928fe32cbcd28bb5","sha256":"5cc6b4a3543610a99c9bfef2d25a90607ca664288858e0bbb1edaebb1a23dca1","sha512":"97120eb1481ba3dd41b1f8f9793d48130d18945f28d47d41b904a97ed01adaf404b2d5f57cc5907ddbccc318187c225198e380ca3ffceb1f279ace3c546c1415","ssdeep":"","tlshash":"3f51df7f55882dbdda758b94840ab05dd8ddf27f8ac04c08819a8d3fcce46e629bc857","first_seen":"2026-07-12T21:56:14.023606Z","last_seen":"2026-07-12T21:56:14.023606Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/partners_field_background-Cy5LkgBv.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.439Z","timestamp":1783893335439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/partners_field_background-Cy5LkgBv.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=7jV1YtkJ9WErIr9H; __ddg10_=1783893335; __ddg9_=172.64.209.62; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=UK1dB7ROCYB4wm3Q; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.44; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-2154\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TmjyOsnD%2B6QAzWOmF5HGHkz68xxdTupRMyY1ZZKFKECqYkU%2BKDYBRTZYTGHN%2Bqvj53Q3e8hth02WNSx4emppolQiYNtoagZub%2F8OsOcXW%2BZGnjfFN0o3GW3Y5Q%3D%3D\"}]}\r\ncf-ray: a1a34b028e20568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8532\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8532,"size_decoded":9609,"mime_type":"image/webp","magic":"PNG image data, 330 x 71, 8-bit/color RGBA, non-interlaced","md5":"462316c3b762e8320948d6c6d0cb1a8f","sha1":"4ba530927953610916ca35750ce1978180dfb104","sha256":"7c97483cc522c290425b2bb7a80e43f423a007795a5a9f63c755e0ac86695a07","sha512":"9207bab46fcb01051d83a4734086b1999ae395b947e52aa156d47a4182bbec744ec1d20f9e0e76209399c641327db538ca543f8f213222199abf847c1f475e8e","ssdeep":"192:lSwMaZhvjZyn22byC9YkLLELv9LtqdE4jFqmLgePXlA2D:Estz78Y/ptX4jFqmLg0D","tlshash":"7702bff09f6148bb1d722bbdd01eb429d0e20911b9a9b1f85b2f2a9f007c647355c6f0","first_seen":"2026-05-03T09:25:58.454531Z","last_seen":"2026-07-12T22:22:18.572633Z","times_seen":24,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/press_field_background-Cdz_S5mJ.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.442Z","timestamp":1783893335442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/press_field_background-Cdz_S5mJ.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=7jV1YtkJ9WErIr9H; __ddg10_=1783893335; __ddg9_=172.64.209.62; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=usvi7hgth8kNqTUa; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=172.64.209.22; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-283f\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xccsb1PAcXvoVVpMW0wV0ZAk2lWu8Snl0VMH6JqW3WjTO28UBmBZURDyeXQd4oCQpTKVAF2nW5XfzcxGUehD0Z88t%2B2%2BLeosqsgUmoN9Oito5OC5mLiUAwquZw%3D%3D\"}]}\r\ncf-ray: a1a34b028e21568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10303\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10303,"size_decoded":11374,"mime_type":"image/webp","magic":"PNG image data, 330 x 71, 8-bit/color RGBA, non-interlaced","md5":"9277f5f4e0c5ec965fd895fa5230a295","sha1":"e633562ab343c2e694d98ad152e511af4ad9d465","sha256":"d4238606fd0cbd7fd2bc4f8648e888f3a48f50642773f64dd2c24d65b180bdaa","sha512":"5ab3eb52c0ed0d91c3d1c7b66f874c97dccffea2870cb627824e144f8de9b146eb61aca937d6ad48554c79093c4d657f928e115c305ef01e27b0e99b4ec37baa","ssdeep":"192:lSE3Gll86piYg5VkOYMCToZ5aGCiWDnn4rNGJYlvgPsPTQhTI73eG:EcGllgYgnkNoqGtWDnn4rNGJqPTQJpG","tlshash":"0a22cf4e3c5ae448489d67f1e6ce0350813d1be68ddac0fa26964ca229eff6c070d793","first_seen":"2026-05-03T09:25:58.436952Z","last_seen":"2026-07-12T22:22:18.549591Z","times_seen":24,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/bg-slide-lucky-wheel-Ddw8ZQMc.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.613Z","timestamp":1783893335613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/bg-slide-lucky-wheel-Ddw8ZQMc.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=P1rZ6nXLW2vgPIOr; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=172.64.209.24; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-f502\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bOZE%2BnhUoL0KTYJoMygTxsz3wAgNDT0yg7aD16ViCIwaR%2BEOsd2Z3GJ1rtN0IBKdEBi3A4oMI7bDua7CD85mDs8B6pcvPgmUaMdHY%2BL6I9L%2BlOXF8l%2BPEmS1bQ%3D%3D\"}]}\r\ncf-ray: a1a34b039e47568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 62722\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62722,"size_decoded":63799,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bc04477806c1dcf00c7fad09ef68ff6b","sha1":"a48f3c2bd9829cf44e29eee46cd0eb55cb21f8cc","sha256":"18babb47c1c193d5440fd86038f0f465e1c26a0c47ed853ccd21e925e69f0764","sha512":"4037b9a74e29e022472e446de1a26bccb5d575bfc06055aa3e3d5dd72e42a69992d7aca6411ada5a240e28e4a0fa58bfab2fb18b90e1c71e54f3ba75eab77f8e","ssdeep":"1536:vpeEBohdydYJtVmLGf4bCSq9Fu6zqh19olG+Afh4FNdPumI:vpe6udhbTf4WFvzYAlwJ2N1I","tlshash":"c75302c1518b3857f38b2176671ffb434217c2a357b092b317723ebd0d28a76272a852","first_seen":"2026-05-03T09:25:58.510307Z","last_seen":"2026-07-12T22:22:18.499644Z","times_seen":24,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/bg-welcome-bonus-DO3wRMYx.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.617Z","timestamp":1783893335617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/bg-welcome-bonus-DO3wRMYx.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=Cu696WnehTmVXuap; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=172.64.209.22; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-19b12\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BnOdcG4zcmaknLVZbwaPBPfCU09%2BfUodlvgt3VvZ2XoDR5gP39yI60H4xGpmt8DduIIkTKcxRMNfF9m4bjmlQ4%2FcsB864E7aXZvhazD38PscP6gjKfxtS3MXRg%3D%3D\"}]}\r\ncf-ray: a1a34b039e49568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 105234\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105234,"size_decoded":106307,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e048450d38fd6aeb684e5e2ee45e0f58","sha1":"c7ab06791f125e5e2cde21fc2485711d69711a79","sha256":"9970dbc6e89f35d639c6315256e602c83cf8fca69d5947ac5a08af22ff44677a","sha512":"afaf8f8b950665d05b856f9569eef9704d446638cc843e0d1daa699791341cd18cdf7c5a6f3967be74b688c90436cf5d9c55946822062673876c44265ea3564b","ssdeep":"1536:FX3619GT3TK5L7S0HqZEwK4FtYvW/kwHPj3FIefGWG2C663P1yLcNp/VDja/5tzm:FCqunqZgzvWF73yeuWG2CP7rNDjIta","tlshash":"38a31294c945ec14f0a7f8644236ec007b913bbe92818c24b7f09b121b9559bed2af8f","first_seen":"2026-05-03T09:25:58.492722Z","last_seen":"2026-07-12T22:22:18.56737Z","times_seen":24,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/bg-free-money-R7HNNOGD.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.620Z","timestamp":1783893335620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/bg-free-money-R7HNNOGD.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=4WdNUiQe0sKbSTx5; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.126; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-1b970\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CE09G0nyrSOwm0hsQMLi5v2TsTxoMqRJsE99nc5WZP2A9bkxEl2YHuFybiOmlo10xBC0nSbFy8%2BtLjvX2EVuO9RMP8hRAitZMy%2Fx4ThgxNjErIJpaMcLoRixrw%3D%3D\"}]}\r\ncf-ray: a1a34b03ae4b568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 113008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113008,"size_decoded":114083,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ca92464f796384e06d1727f8c742c90","sha1":"117d206848f00d51604884094a3efc00488c3e78","sha256":"0ca6ffa09c80486a780f44eb589385e110f9f35728ac08ab803c478da70c4f01","sha512":"916cf61962e80cca16f56de5d75b7f23c3d00eec52b4bcbd4734cd78d9748e8a066e3ba549c6c5f140275ca5326c1f594a5045aef5a45abbb0a9b2aa18206750","ssdeep":"3072:bfs4Kj7sjohw0qKAf3losUk9JnCVeALjcDXyUQCddTYo+:bk4asjohw05Aash9AvLUQCa","tlshash":"91b3120b2b15d14925b30185246719e5d2f7f3e9dabee3860e8602711fdeeeeacb1070","first_seen":"2026-05-03T09:25:58.469503Z","last_seen":"2026-07-12T22:22:18.529063Z","times_seen":24,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":316,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"op-api.gambl.bet/track","fqdn":"op-api.gambl.bet","domain":"gambl.bet","tld":"bet"},"ip":{"addr":"172.67.140.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.768Z","timestamp":1783893335768,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gambl.bet","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 15:26:36 GMT","end":"Sat, 03 Oct 2026 15:26:35 GMT"},"fingerprint":{"sha1":"C6:89:9C:7F:59:81:87:BB:1B:D8:C8:FE:CF:81:CD:0D:A4:E4:D7:DB","sha256":"48:E2:DA:EA:3D:13:BC:5A:36:A2:07:52:61:24:2E:FB:51:32:16:AD:7A:57:1D:93:D7:96:51:0C:D4:12:39:FA"}}},"request":{"raw":"POST /track HTTP/1.1\r\nHost: op-api.gambl.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nopenpanel-client-id: 3ad6ac77-f30c-4a99-95ca-7c2a88051ecb\r\nopenpanel-sdk-name: web\r\nopenpanel-sdk-version: 1.4.1\r\nReferer: https://tuno.mom/\r\nContent-Length: 202\r\nOrigin: https://tuno.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":202,"data":"{\"type\":\"track\",\"payload\":{\"name\":\"screen_view\",\"properties\":{\"__referrer\":\"\",\"domain\":\"tuno.mom\",\"__path\":\"https://tuno.mom/\",\"__title\":\"Tuno: Most Popular Online Crypto Casino \u0026 Prediction Markets\"}}}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=yqzFXkni0VaHwDms; Domain=.gambl.bet; Path=/; Expires=Sun, 12-Jul-2026 22:15:36 GMT\n__ddg10_=1783893336; Domain=.gambl.bet; Path=/; Expires=Sun, 12-Jul-2026 22:15:36 GMT\n__ddg9_=162.158.222.97; Domain=.gambl.bet; Path=/; Expires=Sun, 12-Jul-2026 22:15:36 GMT\n__ddg1_=Zc6UDaDTv19nRJe9vdeX; Domain=.gambl.bet; HttpOnly; Path=/; Expires=Mon, 12-Jul-2027 21:55:36 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pLhR9P6yLr%2BIaiE2r3Z7po4Hjsk6KPS475nj3qRUJW%2BLDL7f0N8UzrHnwHAbHZQDGjdMoRf0KmjUlMAttlTKFrnp6dhsEW4zpB39y6aHbTSAhR3N8hxLrmKEpLrZ6EQETtQt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1a34b068b45b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84,"size_decoded":1194,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7022503a4600fc319d468101c5267107","sha1":"e5a5135e3b3cd4ba11368546f6adf00f45f8e2fb","sha256":"b9c25b8a4d9617c02ce4d557254b6098e94a95eadc5ddd21b75c5b9fd8002aaf","sha512":"fa3cfe529f5675ff67d0641253c4bb8b117f4eca3c891810ccf06402f9f32d89cc36224faccdd76af69ed3743b9cafcb8b8f4e7da081df4b00d02d56a3c481f1","ssdeep":"","tlshash":"efa024017c000c5dc1f501544c11007701f55c10d17033dd01f117013113cd440507d7","first_seen":"2026-07-12T21:26:42.062888Z","last_seen":"2026-07-12T22:22:18.535831Z","times_seen":5,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"op-api.gambl.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/cricket-road-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.359Z","timestamp":1783893336359,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/cricket-road-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"28376-19e188a0797\"\r\nlast-modified: Mon, 11 May 2026 19:35:59 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=McfG9gq%2BCXBNXpSwZLxaLS%2BexYa34OzWwL7IRUdDQsN6%2BXhZT%2FkORNaCZmW4VJ9IYICW0NLegFqlOA2ungbih2WB%2Fr8Gz5kOrRKT5W9ALzJwrN8thYFwAtsOdZkEK5S9mCs%3D\"}]}\r\ncf-ray: a1a34b0849af35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 164726\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":164726,"size_decoded":166134,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"1e1ba05a859bbbc01900d9ba08880e35","sha1":"7e9c385589952ab26f8f04deb098622c4310acb2","sha256":"aa6523b76b4bd7c120c494515236995d2583f085d9b9e73d96482b8d55064822","sha512":"394bf0f7f744e63a365f3c5e046e448924c15774bc15f4b435f27a3c4d3326a4a8cb6be51926504ef11006f0238802623e1c40b39a0c91b612cfc657bbec9914","ssdeep":"3072:yHEh/mHTKsEg0Y12Wuo0DNXO3m6IMgNiMSBTJWvRiH8wJzudjsuyoB0VFvqBZ0AJ:ykaTKsppSDN1mgc7Mp/kudjf2yfd","tlshash":"5af3129f461a6f92e6026c204b86cb7d63e4c4314c597d6738a8687c341afd2897b7f8","first_seen":"2026-05-03T09:25:58.532508Z","last_seen":"2026-07-12T22:22:18.547432Z","times_seen":24,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/10255.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.387Z","timestamp":1783893336387,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/10255.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"29dac-19e87ead218\"\r\nlast-modified: Tue, 02 Jun 2026 10:39:33 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVxDP1XdHcRCqwDpj5ARKDMDvpVQTf%2FeR4JrGF9yxkEllT8W43wlyJPnSW3jHB4pQfniKdfe6fGax09ACxpDuTCkEHOHl5RzhT06bKWfREit%2F9nfsZ7ooSl7ZK2QayxX6EI%3D\"}]}\r\ncf-ray: a1a34b0869c135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 171436\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171436,"size_decoded":172838,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b803a59a9233314789b9fa77931ab9e1","sha1":"a72aab7361dd58e0ec558ab22864b56596df939b","sha256":"a1625d1d0f487b80aceaca2dc62ce12d426b99a861ab246672fe61427dafa405","sha512":"9dd2454b34bb7d45a466476bc8a43dd6e476a6adcadc17a08e55cec3c9accd5638b778215f0fe44e54d26dc1358bae5afeed2aa49c19dffc2d9766ba01364e6c","ssdeep":"3072:mA1kScRWcCplzg4zDhauQ1/ZNEnoPUYGggJgjI9sR6y2+O0jjs2sYx5wVr8kzFi1:hkBWcCXEvxNEIUYZgJgjI+HslYvZ97np","tlshash":"49f312e75a93d38e713e3915b599e9b00e7096f44dc136c868acf98d0e62ec88dd1e48","first_seen":"2026-07-10T22:58:17.943384Z","last_seen":"2026-07-12T21:56:14.047159Z","times_seen":8,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/big-wins?limit=20","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.606Z","timestamp":1783893335606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/games/big-wins?limit=20 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tuno.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: W/\"1acf-SDER7fENNCiPNaR1f9qFIJvDJYM\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NJ2%2BYNvhl%2FaCZFikuY5OqzzRe9OVzlYcwoXZ3zO2Ln8CIT2MLjd%2FZcymW%2BR9jJ2UuNKDgHUSPIb34FjPkh5mpipKFmI2SBYazn3RMzHkYhNeqQNwKVtNz2SoKBKZ0SHE0do%3D\"}]}\r\ncf-ray: a1a34b03892035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6863,"size_decoded":3316,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1bc5c8961a16388120b8ae5dc46b6a69","sha1":"483111edf10d34288f35a4757fda85209bc32583","sha256":"a2adeeba4b7d70be32864ec8fd5379371e652cb29bfea43f18a6205fbc1996e4","sha512":"e11dfde12c18fc07624c4a5ff09853f587150b0454a328d27322927965ddff724d456cdcfc813c542200d6bf59636e87926aa4c642b981af19beba2428b58470","ssdeep":"192:I0oRxtSX5J3UXQElhdHdEVXBcnWRQJzSEwHxHzbJBu4zgl64HALalj6GiF8F2/UA:kUJJEXf/9EVR+WuJz7cvT5044SgjbiwQ","tlshash":"7ce1e06f54442dbdda344a948449b4ade8edf2bf86d04c0881da8d3bccf45e629bc52b","first_seen":"2026-07-12T21:56:14.048114Z","last_seen":"2026-07-12T21:56:14.048114Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/d-rocket-CwVijRid.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.627Z","timestamp":1783893335627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/d-rocket-CwVijRid.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=3zwwb800QYDKphGf; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.19; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-2a84e\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zKKyXURy4aZBGXGhvGJ6ZOBeWJgERK1R2kT7JHrSusGDccLaQY4l5qzlOyV6lmlvQwyPBmSWrFjcLjca7ghGaC1rkBKdADsDPDFRxC%2FEpsMKyIOQSmP0bbEg3g%3D%3D\"}]}\r\ncf-ray: a1a34b03be4f568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 174158\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":174158,"size_decoded":175230,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8c927ce999d40abaafc51fb02a321a3c","sha1":"fe5b860fccb15b759c8d81556f525c64ea30780c","sha256":"5763965cfa076dd8724c9e18c72ee4fd3ab93a9575a569b4531e1824f55c5362","sha512":"fb2b012d4e84f302700458c582f79dbfc097140fc5d47b53ac805b3f0ab62ac50c3a2aeb5a89d10b3edc6fee590d7996f932c9adbeaa6f1a0931836d9a6b3eb0","ssdeep":"3072:WGyzqM0MhVkJ69+b1oBjitPI+1fm5pJ6c4tHWFsPVWUoYKTxnwjilTlgeX:uA69+Ryom5DH4HusPVgYKTKj8ljX","tlshash":"f404237a6e6f66470f6e9239c192f558ba08018f2d6e1ec8507f8cba71313f40a590f7","first_seen":"2026-05-03T09:25:58.570621Z","last_seen":"2026-07-12T22:22:18.568002Z","times_seen":24,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/GCB-C_pqZ4Du.svg","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.652Z","timestamp":1783893335652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/GCB-C_pqZ4Du.svg HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=qg8S1zBCpIAYgT8p; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.221; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-type: image/svg+xml\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: W/\"6a51f93e-4240\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tml1U%2B4KqFX%2FjjDxR8xn7Xk%2FjRERHgesqSvEqoOkRBJA1nnqsqmberOOH3szuCPhz3q2tcpYP5S6qouCNeqC0oHFLYSBwyEpqmkViDMbNz4P%2BHfYqldBWpvABg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a34b03de5e568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16960,"size_decoded":6876,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b38adce4f70c1a371bbf8f1da27fa17c","sha1":"4c9ba68797012f18287ea8a5cea5139034f47244","sha256":"540b4b79532f284728630a532dce3264d1df8bfeca3ed67b2be10b2eb1dd17e9","sha512":"8f6cad2f48b4a474f0cb172f8d61c323ad65468d0a2ab614d342824262ff1456c6e95dc62bf12edc333f794108e532980b44d024400e562facf2dfb00a768308","ssdeep":"384:n2O6uod1fGTPRl2GarXw5snhFdnqmiVJ945:2ruodxGTPMhFdqmW90","tlshash":"3d7283c032b693ecf60af7bc5b2560317c2324edba926574c7b66e10d45719c1e9a8e3","first_seen":"2026-05-03T09:25:58.46864Z","last_seen":"2026-07-12T22:22:18.530236Z","times_seen":24,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-gold-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.352Z","timestamp":1783893336352,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-gold-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"2bb1e-19e1889de1c\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U9tVcBFvFvZC7%2FrQ87WaLa8jjXjsSPSjsrol3wMj7S68jMhbqhtNLBhJBESsW2fIzU47lonsqG6Id3uTO9elRONyvnCoRQXcb%2BapSGU2xokEnB1xf2ubeBSzNC8OkhWZ8kU%3D\"}]}\r\ncf-ray: a1a34b0839aa35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 178974\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":178974,"size_decoded":180376,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"7e6786b8f04722cfa883924cf56e618a","sha1":"11834b65154c89318b09e30540170438279db363","sha256":"d15c8109068462a9bf3994fb4ef6f126253b038b1ed7e2030c23f013dc7a8857","sha512":"0e188cc4eb6bad0ec7a3eb8e6bcadbd2ad447ffc868ec327abe99924d910c8c1b38bf5607442880655d691967bb27c87abbca0ee85fd7ff4180942a96958a690","ssdeep":"3072:wbRMbtR2+Z8ik03JdOr2QjubVpGy1lYxba5gzDdmTrCgqZnC1Wtkbzi6eI3uMkRg:QiR2+Z82Cr/jubVk0I+gvjbCMtka6eIF","tlshash":"1304138e2c596af29f843e48c8d05f3e4a7245e7df80b1d60e0bbcf71e9018867b5556","first_seen":"2026-05-03T09:25:58.480792Z","last_seen":"2026-07-12T22:22:18.541012Z","times_seen":24,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-new-year-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.357Z","timestamp":1783893336357,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-new-year-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"1730e-19e1889dfa0\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5VBk5wwz5QlVEIKzy8TPN5RWdFVpoJQXKkLzsrOWR5sxtNNRo1tsaElYSDi8mEz71riwiOh%2FP98idz16LrCkq4aeW%2BnwTHXdEbWkrTekezs71rgt%2F1eIECco9fVVMUj0M8w%3D\"}]}\r\ncf-ray: a1a34b0839ae35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 94990\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94990,"size_decoded":96393,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a63fdbefceb85fa12b3fbe163536ba21","sha1":"1aa6d1ce85bed8959bce57748684be24725ddfd5","sha256":"372724c2ec10fcfc1068d6b19eb189f5f55a977ea9d7c559342e40282cf1d71e","sha512":"3a710b036de4629febd15903a03c98ca13002a4368cfa5246f7bd983b6269acfe02f20408d6eca115b29027ee60175dad8d0f78ced875fbeebaccb1addd5d528","ssdeep":"1536:VdFXCx/pEG1NBLws9R9tuQcpEkCTnWZf1Qs3D+y6yRCPXB9jCbNmDOmTCSedWViU:dXGqGNLws9P4QcpdCLWZNh3DP6bB9jg4","tlshash":"95931255ef9d5db1ef56df39a494213ffaf3247a8f980149904ca9d0a0018ef304d6ba","first_seen":"2026-07-08T18:54:53.805092Z","last_seen":"2026-07-12T22:22:18.548872Z","times_seen":24,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/dragon-hatch.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.401Z","timestamp":1783893336401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/dragon-hatch.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"2aa1c-19e9f3753af\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:23 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MiYOdlbRyNgrzFWMRlRqV7aJ2%2BdMbS8N0vyTNXQcZicpsu%2BC8zobgfwgCbTwa9TbWdX5%2FkajsMH%2FSlyhroJeou0dH%2BWlAHeE4DwSGFVEApEXbzGF97QnWoXOpfGVoqUey8I%3D\"}]}\r\ncf-ray: a1a34b0889cb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 174620\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":174620,"size_decoded":176028,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"91f3d7faa5ba87bf71ac2897797335bf","sha1":"1c498ae53119427ad3fe124318d4dfb14763cdf1","sha256":"ba05a7c88b6a3e8177479143742c140d30ef2879ad6f2e7a35bf22b798d44119","sha512":"54cab954c87d08e78baae5f2a7ba3b23ce30fb23b2570f700e3c2cb6daac4b10cdfb01117f76d34097562f22842a3565011b449ecdac9c6059d96508633e5724","ssdeep":"3072:dYx+RSxHlCinJz+yM91IAp0+wYYhGP6WLf3sZUwgGzo1sE4TSw2Cz:ZR+lpIyM9uAp0+w/ZWLPsZxo1slTSw2E","tlshash":"c704236b0e1e4bc75a9dd7986c4e06c5b6b5b49ac0a3153fa77980b19b50f21cf2dc03","first_seen":"2026-07-10T22:57:09.704181Z","last_seen":"2026-07-12T22:22:18.522963Z","times_seen":13,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/stuffs-DiuQsYY8.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.433Z","timestamp":1783893335433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/stuffs-DiuQsYY8.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=7jV1YtkJ9WErIr9H; __ddg10_=1783893335; __ddg9_=172.64.209.62; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=dEg2O4H2bcCD6YTz; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=172.64.209.60; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-7cd4\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIBmsYZeVbctTBMw05Hu8HV3x0aCSoLBuuW9kVMWaEUwoc1zXwsskL6UkVGkI1GJgSTZGsQfWTX2yNTPe%2FucJNXGi3fbCrECcThSo3bDOJ35ERTKEHPbyJ23yA%3D%3D\"}]}\r\ncf-ray: a1a34b027e1e568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31956,"size_decoded":33025,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f28aee87221a0188368df4771f80ef49","sha1":"45ae42fae9ad8621f08cd4e5ccb4ecadf3343bf7","sha256":"96e99af8af3baa3249a28c2850442e8481b73a7fcb99aca9ef796ad6721c1569","sha512":"470bd2489a9aa993c6051841e95bc7ff88fe952fdf8cf97e8369fe3a406eece4a4ebb24186be403fa046c2f244dda766bb9382384e47c6e7ef9b3e1e0fd5ffb8","ssdeep":"768:YMyqtRHhc2ORBGSTZS/7FZDBHwyVC+lPK1SdW:byqtRi2OR+ZtHF9v8","tlshash":"8ee2e13ae81308dd65a1f88f8f9e185fb1c5b38ab6e5db8065345cb4245a454283752f","first_seen":"2026-05-03T09:25:58.572004Z","last_seen":"2026-07-12T22:22:18.49657Z","times_seen":24,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/lights-C9uxKB0w.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.625Z","timestamp":1783893335625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/lights-C9uxKB0w.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=FHP2zMKCOspq9MON; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.100; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-75ac\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PaJXtMJIYFq7TjRpQn%2FtEOpIO0xUxwd5nKyh1lofA%2FzjZ1Um8Qww%2F5exVUP9cK2ByKiRBxhYhdJEo7gd74c9pThimSo455M0GEeyX9lTJOkQn%2BfJ1hMbGg8SYg%3D%3D\"}]}\r\ncf-ray: a1a34b03ae4e568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30124\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30124,"size_decoded":31201,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6dbbd736960c85aabcaab78addf1373a","sha1":"e1c8d638a5364520a04dbd8ab4cc9b7418cca633","sha256":"972f5988facc7d4afd4ca98f4e3667f8b80b0b0aca35a922dff754e4b50daae8","sha512":"4e75ab46d7f999a3fc4a742f4674707b6616b088557ef48ada62567ab723412c82c3395ca62d9e2748e5aff7c0146fba300225be3d2a467766704884c0227889","ssdeep":"768:Ylx4t1XGy37+jzkEcBSA8Qa1uYBKrj43dD961V5LscS:Gyt1XGY7+jzkEcBSVQjTrjeh6Vhk","tlshash":"02d2f1b122f3dc210c3ced43c1901d8968f96a2d628bc5790985abb247529a4e3277fd","first_seen":"2026-05-03T09:25:58.52188Z","last_seen":"2026-07-12T22:22:18.56527Z","times_seen":24,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/windows_background-CyRveNgh.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.654Z","timestamp":1783893335654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/windows_background-CyRveNgh.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=7dQBuocoSMD4tG8N; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.115; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-11611\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7cdtHeY0zAB4Xx8L8PltKvKcYhwtqR4p3NKAo%2Bz7peQI3zXLZz67Q3WnzZXrFJvGmQDEwxUyhBbc93CE2sIf%2BF5Sfqd0J%2F0FW82hBIqj%2FR2S42P%2FFxoCnxq49g%3D%3D\"}]}\r\ncf-ray: a1a34b03de60568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 71185\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71185,"size_decoded":72265,"mime_type":"image/webp","magic":"PNG image data, 326 x 160, 8-bit/color RGBA, non-interlaced","md5":"82bb540992a750317b3f811fe5f8a761","sha1":"724bd5f3d37c959ad5bb5235c1f143d2af0b8b10","sha256":"93c89ce498d0655b3ec3546b01a0b3e59976446d12f3939d0bd55a23245e1ac3","sha512":"7162a533b60c87697170d7c1dfc22f26753017c2f699eb70b3e1b16cd282f744aea860a3663961388ab8ab98d7350b31bed6a3acc3c0e194982053a04f5824e8","ssdeep":"1536:M6nr21FPjz4vX3ieDxu+yCmiKFcNnz/2S+Nf5W7CyhfoNA42rO2sDZI:D2PQxb8FcNz/INfIGSf14gO2+e","tlshash":"896302ea4927e19edd8b96665fc408d5bc88221869f8a82031a419cf39b37f54bd04df","first_seen":"2026-05-03T09:25:58.441812Z","last_seen":"2026-07-12T22:22:18.570057Z","times_seen":24,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/public/currencies?domain=tuno.mom","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.198Z","timestamp":1783893336198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/public/currencies?domain=tuno.mom HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nOrigin: https://tuno.mom\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"537-2plYJH1Lw7PEzf8GHGHwzEqocE4\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=al6%2FIgksF6LEBof279kwW6HSjGRaBGa%2BhkJeFUJb64H9ZJqVdTlW9vW1tz2eHxpHjwMgfh1LqxbX%2FzFOa4FTCKXrct856t360gp4BSpn4vMWHFHGk6pqJ6CD4jYWA%2FAJLJw%3D\"}]}\r\ncf-ray: a1a34b07497d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1335,"size_decoded":1863,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6570525e50a2cfbd4ff33e7476766908","sha1":"da9958247d4bc3b3c4cdff061c61f0cc4aa8704e","sha256":"4f84ea1d0dc3b4bfe55a1d878bf5f7ef171d60a51bba26083f96b22a333650e0","sha512":"cd74e1e954fee118bedca35362598cbf1f14259730cd054acce7944f32c8bc65797ee0c6e68991a739eef3a1c4bee15dea1f197dcf498907a20e014c67a7887e","ssdeep":"","tlshash":"b02119ab786d9e7e0247fce6108e4bed726d618200cd4ca96dd80a7c4782ae5526b734","first_seen":"2026-07-10T22:59:10.553987Z","last_seen":"2026-07-12T21:56:14.057818Z","times_seen":5,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20sugarrushx.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.373Z","timestamp":1783893336373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20sugarrushx.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"afe4-19e87ecb1fb\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:36 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a6JkyRstVIi0C7sxN%2F4r227zdc9RnVNNyq0YQzzYRw9ic5Q6fZCJl3i%2Bxy1tMdd9YNquXsbezk2BkgQOtWBhCpyPLDM2JonH804b1hJN71v2ds8O9dO7HL2YOw6sphzGFX4%3D\"}]}\r\ncf-ray: a1a34b0859b835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45028\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45028,"size_decoded":46428,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 360x472, components 3","md5":"04c6e2e5658175c43f043f5e2aa4ce6d","sha1":"c716c4f69456a416e9fb9fa2b99c579406a3ef26","sha256":"b1c7fba1d51a4a671922c91c30f4f736dd308ade68763a4208c1991d7e3f6e51","sha512":"92288f847ac811b6c3849af2bbecb3a8ea7439009ef2de0ed19fba56e342e4edd3b1bbdfc741b58aaef902b0ab95e4bfec33da20583f757fa30e293c082050d5","ssdeep":"768:hYyEJAw1+GfedYyGWNsETkDfidgcPyA+DNGZlRjAaS0Mg1UNVNF7iJNSgdU/IRwc:hDceBN+D6acPyAAYTjAatfUNzhiJV+/w","tlshash":"301302a07fdbe0f8d6b5a9348a2f662e7682c58e673657d2d045c41f805924c2ebd03f","first_seen":"2026-02-19T09:04:29.911595Z","last_seen":"2026-07-12T22:22:18.505384Z","times_seen":15,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20fruitswx.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.377Z","timestamp":1783893336377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20fruitswx.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"54ba-19e87ec55b3\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:13 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FmEGRwXdETr4z8gw4Of5TEKQk5Eg3Oev0EXrRXW67URxTr%2FRUK72vyVpTLlHyxVbSxmENnTKi7C7iuXfOrDhfji5tpbqop4EYokIbtqr%2F5RLrKNsD%2BhgwJfQvethq86bleA%3D\"}]}\r\ncf-ray: a1a34b0859bb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21690\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21690,"size_decoded":23094,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"607b78c15a6cb099ed5685a069eec4ff","sha1":"f2222fcbbeaa10682090cb1fc0606363dbe31d8b","sha256":"c29893458d23db118fa0bf71b74e5a3ccaa48c3374776c8767be4c521b998ae4","sha512":"794fa2d28461ec95badd7a15e54e24d06c6b29529840fac24217765229f4b46bdfc24ee0b1d5b7fc9502e851ddb0a62e8905da94f922158c58335160f0b71c27","ssdeep":"384:pN9jHe138IK4vu0zR/U/nWxkr9UyTqh2taocYjlOxvDyvaI1Wuaz1hoLiNsTymxR:pDHscv0zR8Pk0K2ta7Dylk0+0x4C/","tlshash":"eda2e03f367c89877cc47f265275d9820004b082dc275a61366776e63fac5eb23ace82","first_seen":"2026-07-10T22:57:09.653891Z","last_seen":"2026-07-12T22:22:18.53157Z","times_seen":16,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs10bbkir.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.385Z","timestamp":1783893336385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs10bbkir.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"62e2-19e87ebc18b\"\r\nlast-modified: Tue, 02 Jun 2026 10:40:35 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EiKWeBJ89UhFuw4Ww0eBeNFhdpC28Exgv11tQxM5BF791Oo16E5%2FU6Is%2FfDZOEs1ml%2B%2Bfyi%2BIvdVtrusWsxGMzzwX59JiFzh33wqY50kBOfXJXlzG82bA0u7DyHqkicsBKA%3D\"}]}\r\ncf-ray: a1a34b0869c035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25314,"size_decoded":26720,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"76cc863151d8ee249a995e2e56a47131","sha1":"a1968240e5eee90208167d932fe666d0d170f4fc","sha256":"49bb42ff09fc936aebb3178d1455a9797fd99dd7ae6452cf84db83b0a0eb3f41","sha512":"18611745ed86961ffb7ff90b747879c9b7299069d7ffadf3452e7b94f9d423d4bb592f91e6b99669ed26c23ace222d417e88570ddb46b2c48b29f68f928f55b0","ssdeep":"384:0zARXsPBLHukvWj4You+JzC1KDa3tV+Ts9E0gA+wDoPl3j6Uky8FCOeD4tSXLzpF:0UtspHjvU9+JyVAs9ELwD+VRLzpACqG","tlshash":"58b2e0ebd5703432b2c6a1ae925575cef644849a345268858f6b42c8085e8fd2cac7ea","first_seen":"2026-07-10T22:56:48.100947Z","last_seen":"2026-07-12T22:22:18.559823Z","times_seen":9,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tuno.mom/assets/bg-slide-cashback-D6oBbvdR.webp","fqdn":"tuno.mom","domain":"tuno.mom","tld":"mom"},"ip":{"addr":"104.21.31.65","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.615Z","timestamp":1783893335615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tuno.mom","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 25 May 2026 10:23:11 GMT","end":"Sun, 23 Aug 2026 10:23:10 GMT"},"fingerprint":{"sha1":"D0:4C:50:0A:31:E8:73:10:5B:4A:0F:18:90:6C:33:CE:10:84:F2:39","sha256":"96:33:66:B7:17:9A:0C:B9:1C:57:34:52:57:78:00:C8:35:F8:A1:C6:BA:AE:84:ED:7D:8A:14:82:DB:8D:FF:7F"}}},"request":{"raw":"GET /assets/bg-slide-cashback-D6oBbvdR.webp HTTP/1.1\r\nHost: tuno.mom\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nCookie: __ddg8_=zlHLXMWRnnPOfHJx; __ddg10_=1783893335; __ddg9_=172.64.209.42; __ddg1_=bcn5hmpyOaj4WmVACNru\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=Z2WB188VUcLRUckf; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg10_=1783893335; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\n__ddg9_=162.158.222.22; Domain=.tuno.mom; Path=/; Expires=Sun, 12-Jul-2026 22:15:35 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: \"6a51f93e-2ffb8\"\r\nlast-modified: Sat, 11 Jul 2026 08:05:18 GMT\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BK7VgiNotVYy6dG8FK043yp5FlUO1sMq1%2BEg0R6x8fFYRQSEOiABNJ1xK8A%2F5OIgpQ2DL5Waayg%2F641vxqn7aoO7UcW9i44T8X5%2FSc3iQTQXf9kayeBiACzDzA%3D%3D\"}]}\r\ncf-ray: a1a34b039e48568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 196536\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196536,"size_decoded":197614,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"283f9e0b94c289cb3a4b5bf970bb03c3","sha1":"19a8fb7333d8a7da0df1823f78aafbaca731900b","sha256":"7ea986e91377afde7d9b0248eb296d0486a32c120acd17c296ba123d7b4810be","sha512":"d5b2f36aa7de7e6a8ec420ff99a6ca59a997644253e0ed5a7344351a64f6e420e269ca5dbfa4db3ca74e8e12fce8fd891b00a84b945772e20559d83df590c81f","ssdeep":"3072:khUIb5+3KIW/qMs3ABv6OqLnLWYx1cqh3mew0bighP6IwM8Bsaq4H2KX/IHepXx6:kqUqW/HMAZ6O8nLzx1cqhA0NFTaBsaqR","tlshash":"da14122839304449592569a81af9629630ccbe3da5b7ccbb0da7f3651b3b9f08c7570f","first_seen":"2026-05-03T09:25:58.432446Z","last_seen":"2026-07-12T22:22:18.550498Z","times_seen":24,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"tuno.mom","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-race-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.343Z","timestamp":1783893336343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-race-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"2fb27-19e1889e02c\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xYNkrS6LXtCrXA3SIYB81WfSp2eEgnuHtisV0r3PjL2WU%2BvVi7yzIKgCo74TviZgI3SeRrLZ4KPXvcQnouEB6Qt%2BGSyKG5rBxjqIyE6j0llcrIZIL58JYM%2FNoISEhab2F%2B0%3D\"}]}\r\ncf-ray: a1a34b0829a335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 195367\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195367,"size_decoded":196773,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"de158b0c510417fba2d86fe9dc29d4cd","sha1":"b023587e15eaa94cac426b0a634e83b3fad3d972","sha256":"dfe048fce2f1b58c4cd56008d522b8ee3b1f0b40b6383d846441621c8d89df6f","sha512":"b035fa249696ca1923e54314cb2a96197d5878f1e11a1cd33a57ddad4694f4d92f3d70f71b21a1749a3c835b3109e5791b6b7269304aec9f12c55d5e6c01c0f0","ssdeep":"3072:NJJRhYFLeQitU00sUQecSwR3+SFYGypmMSXJ/EOYF2/0/+RsEvjO8/e9xLX5kQO0:NzRYiQ8UiUmR3ZFYJpmMSZsOjuUa8/8d","tlshash":"611422119983348d566c0beeed88d0fa00fc654e53e954b059bc9acbd6ac3f117c2e6e","first_seen":"2026-05-03T09:25:58.528271Z","last_seen":"2026-07-12T22:22:18.498976Z","times_seen":24,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs9aztecgemsdx.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.380Z","timestamp":1783893336380,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs9aztecgemsdx.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"97b8-19e87ebaf73\"\r\nlast-modified: Tue, 02 Jun 2026 10:40:30 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7lIqn3oGcbOStW5S51L9oqGAz7jYAnHSt%2BpvZBk%2F7Uvu1FEkzw%2BdZv8%2F%2BjZFbvkU50EjXfIpNnJbJ%2FtAN%2Fce53h1pT33s0l0L7fDDFAETrHPje9UpXCY77p1wdpDW5ZW1lo%3D\"}]}\r\ncf-ray: a1a34b0869bd35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38840\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38840,"size_decoded":40250,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e2efe40b6c8a8c6356a637e3ec79d10d","sha1":"b25307bb558d7862ee5f4ea0aaf8ee2df8696514","sha256":"4efa3ee5491c89bab363821906765e13f8e24e6f137154962eae9f3182b00cd9","sha512":"c85544bebac885427f8c986753219aefa33ada1da43e1c9c5ce63d8fba8e866924bc3bab8bf945083c9f369fcb3120e445f19ad538b5b27709f3f9f0690def2e","ssdeep":"768:UJyTngFU6lVxygdohvq9jxofrGuabMbnEJGYkVA60:USeUMXygqq9KrGuNbnwNT","tlshash":"1503f19cb5e0d1299f829183b03acfc52154e638773e3176d5f57a2c37a5ab4893d02e","first_seen":"2026-07-10T22:56:48.089578Z","last_seen":"2026-07-12T22:22:18.553851Z","times_seen":6,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/fortune-rabbit.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.382Z","timestamp":1783893336382,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/fortune-rabbit.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"2d59a-19e9f3748fb\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:21 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tcll8fP7U%2FeGokLiTtqhJvlx6JjoKbD2n5pzgpzedUB6ORdieD6H4XPQI27Aq9UQIwSMxVNBncndSagPFMFmHhRtkmmdbqPB9%2FKn%2B1FWwvJR4ZF23uhRBLkSH7aDw9Rqhzs%3D\"}]}\r\ncf-ray: a1a34b0869be35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 185754\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":185754,"size_decoded":187158,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"075ff53707f684c709abb5393a2636bc","sha1":"123d8856016a2ca8b4aba076021900800804b980","sha256":"8e29281b801df1ba8565c3f00bb9b75da8a162d11370ac1445eed1aa464f8229","sha512":"20918c13acbdcc9aa18a99dc8e73c61630d03b2f5f552a967002058c48c9cb2ef41c278bfa67e88a6c8d321ffb402c1766860516ceff36d33068cfcddf95fd1f","ssdeep":"3072:d6XRQuxc6H3qe78QJA1r0JUBdyMuo4tFotLM+vCGpe1PZILjGVOQUD9WmgFcUuCY:d0RQ6+QIZBdXuozCGpiPZVAQGkmEub","tlshash":"f60412c0e05e0660b59c7b77f52fab490d389a29aa3f43676a83d0ef7d94a0d2244c95","first_seen":"2026-07-10T22:57:05.841138Z","last_seen":"2026-07-12T21:56:14.067418Z","times_seen":15,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/10260.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.390Z","timestamp":1783893336390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/10260.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"341fa-19e87ead644\"\r\nlast-modified: Tue, 02 Jun 2026 10:39:34 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ATsd%2B560ONsc73%2B1b9L01sVYEPZ9NFE2dYFTh47TzadyvjRjgB0MQyG1TWbKQQt1kTdkxBvMSNTYJCfjqFxOBxQ%2B8iTyEPR8BJNrvZZT%2FeQh6LLFso%2BNsEM89W3uKzC%2FfLM%3D\"}]}\r\ncf-ray: a1a34b0879c235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 213498\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":213498,"size_decoded":214908,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8abd15c7c82243f7f1bcfc01da0f9dd9","sha1":"2a7cbaf9fda3b75d09d22b9bcfcfd2ed5ead3b77","sha256":"6dbffd082137525d217970ea7459025b8e17cd4cff6f3124c737c9a181649021","sha512":"4af84cb47e5f98a5db589e57665b3206840b58e546e91c827e2704581606391ef87d65e23c32c9b82a8a899970b66a13e698c830d8992d1b36bb2642415cab06","ssdeep":"3072:lP73hNQFdhmSicyXxh75IObuYWaw64mXkjrwSzitUzuMosw2jNZW:ptNQjhmSicyhhWHar0jretU0CN8","tlshash":"da2423e1c38707d4c3ee5ae1d1e70d9b02b83b78109eb0048ded8994a9e59c1d97e1ed","first_seen":"2026-07-10T22:57:05.866145Z","last_seen":"2026-07-12T22:22:18.561268Z","times_seen":13,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/10254.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.392Z","timestamp":1783893336392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/10254.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"2ce72-19e87ead0a8\"\r\nlast-modified: Tue, 02 Jun 2026 10:39:33 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tCuT%2BBS1FsTG9P%2Br0dI8QHeCHcP7aoLMC19hDl%2F9fG9YbXvae514WQJbkLHmm%2Foo0k6QWCyPGETmZBjI6eaYIWi3XVSIu7SXCYgwiPRtF8Wi24ikXHR1kpL0zCif7lXZPhI%3D\"}]}\r\ncf-ray: a1a34b0879c435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 183922\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183922,"size_decoded":185328,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"58c70bf38ad794647038954715984aee","sha1":"11f1c3b541d8f13cf9131a8bbd3e08fb620a380a","sha256":"e4e586ede21eae7b159da44327517d538a5d72c19286d4f0fc2f96b6be111d48","sha512":"2d75fcb77aeec56049a23ac27fb5404a55dd44a68d301c4dbe5ed126cb2b0f99669718214a8304ea782c8764d67911c84afa6f97142aab056a15053ca442d753","ssdeep":"3072:qpMLoywjfeTiklVuS8CIVjC7LGB1aVdWYLAFDVVcAh86rTebeyP4hy5tqOzksq42:qpMLosljD8CQ1+YYsF4Ah8SQeyP4hy5a","tlshash":"08041233db5ae3e7c8e046780fbd57943ac631b6e6b2094546a056b629f12430376cef","first_seen":"2026-07-10T22:56:48.040221Z","last_seen":"2026-07-12T21:56:14.069316Z","times_seen":8,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fredoka:wght@500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:34.272Z","timestamp":1783893334272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Fredoka:wght@500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 21:55:34 GMT\r\ndate: Sun, 12 Jul 2026 21:55:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3780,"size_decoded":1186,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dff37f530356962f9042a52f2e2d9e04","sha1":"4a10361ecd34c94ddaec3f82bd97736306878225","sha256":"b4bd5c6a85689354d43184dcec1d502ad4b5627d7b2b177f5ab6b11df20c3c6a","sha512":"09ec8fe6a71b99c8c4f58bcf6b04f162be9e6a0f75ee30c664e20af5e461a300daf3f90a10ec7789eec52ac8ee2afedda821dac8c5ab74eff65bebc118263aba","ssdeep":"","tlshash":"3171cd91041f5184eb835dd163da7e36ee0f60516818d4669bfd18e8bcead72831271d","first_seen":"2026-05-03T09:25:58.421196Z","last_seen":"2026-07-12T22:22:18.494177Z","times_seen":26,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":34,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/public/domain-info?domain=tuno.mom","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:35.601Z","timestamp":1783893335601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /api/public/domain-info?domain=tuno.mom HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://tuno.mom\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:35 GMT\r\netag: W/\"150-FigUtztFfjHo4e9dE+LCp4FUfac\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y0Z0cTOKXJESdfLBKQWRcXrKr4Th9BFvAjsGmkF0bT42m%2B6cAifPRiOEGpadFgBGwd0ACL90wO6XwHo9be%2BqOmPwPJHSmueI28EzNqpvPlB%2Bl5qZQJGyTN0TIdcSCw8ipB8%3D\"}]}\r\ncf-ray: a1a34b03891d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":336,"size_decoded":1552,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"16fb95b9af6c6e6e720b72a2dcc86fc5","sha1":"162814b73b457e31e8e1ef5d13e2c2a781547da7","sha256":"e687d6c97bbeee583ceaed8e8e3e99d985b779800835d7e1f503adf8f7a06fe7","sha512":"a9aa2477d434d285a423d3a5003d91268894a8c5068dbed8a15e54312dd2f550a8445d2eabc32f7236b0c7f8e504c1ba1f25f07b03f4f5ebc1bec9ebacdef584","ssdeep":"","tlshash":"c0e0264d6e10fc7c4f923a8428d63e4a43fc0513ec5a6ca2c7dc4f2843c48312115a20","first_seen":"2026-07-10T22:59:10.487854Z","last_seen":"2026-07-12T21:56:14.071109Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-vegas-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.350Z","timestamp":1783893336350,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-vegas-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"1d4ff-19e1889e1c4\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XHEB6vflYAfUGLe%2FuamcRgcOt3fB6iDkE6hVFYOD90iy0OKRerB5JlYK6MVhTQwAG60B6VoFYaiJsPUUUVA8uhLhIk6T%2FtCF6d2glPUcW9cN52pL2iJCwZmW4kg8H8ZIttg%3D\"}]}\r\ncf-ray: a1a34b0839a935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 120063\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":120063,"size_decoded":121465,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"d97c882f1efb1cb1a0602a1409eae227","sha1":"fed1caf3f89fb7c82227e37bd3159eeca20d05d8","sha256":"5a11d7cc3d0dcb1cdc5b76a698c907e6c85bee99c68ec743af24df813e67fa29","sha512":"c5cdd38a27bdf7e64929d9dc9092c4fe80b96a1bdd38f865aa1e9db9c207a34e2daf50c46aea9ada68011e8264e5da1a3ff18bc7573f1249e3b1cc0789d32080","ssdeep":"1536:w4cNnWnyYHZDR+gQngdgg768GBAqx4v6QI0ZbVZY4EamRVW63QTnwHe6mp3ZyNlO:oEJHZDR+gasY8ZYNaD6WwHHNo1","tlshash":"e8c312e970881bf8d381ea1ffa06ec26027a87c97fd32cb882486cbc4554e5dfc55161","first_seen":"2026-05-03T09:25:58.487822Z","last_seen":"2026-07-12T22:22:18.548092Z","times_seen":24,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/rabbit-road-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.356Z","timestamp":1783893336356,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/rabbit-road-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"266bb-19e188cb63e\"\r\nlast-modified: Mon, 11 May 2026 19:38:55 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qFUpEUFJkZnw7UgGlyH%2F1wTssTSoG672b4QF8xH3LeQ5uF0dLGDZYIKdbepmcwBWJ9p0OAsf2WJewrzVzSs2hpcDOZbGYuCFXTKrliGU%2BnUbePEIu9%2FABB7LKbp5tIcgnUg%3D\"}]}\r\ncf-ray: a1a34b0839ad35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 157371\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157371,"size_decoded":158775,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"350386f4ae53bc8b1e470dbc414eb3a6","sha1":"d1d4472c746f237c379d64794389971df62dbeb9","sha256":"974fa37657af78ae7f1695c622ad77f544cc19dd6c3bb29502ba7e6f4b5c48c1","sha512":"7ee319101357aa4bbe8e6c0eda5ca456d062d8fe15a6298e01066491c36ba25b534266b8ec19f2ba1dfbcc657df1b0c849ca65c57767743ff21269550e04144f","ssdeep":"3072:n3qGl6Cx84WbG3geXr6LfjDcjjeZa0V89C/gblDXNOVR7E:n35lkYDXQrYjC9AxblQ+","tlshash":"6ef312530d7981eb4b9bf6e3b9040aa01c026b4d37d183bbe79deec869d58bd08c5305","first_seen":"2026-05-03T09:25:58.450756Z","last_seen":"2026-07-12T22:22:18.537104Z","times_seen":24,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20sugarrush.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"104.21.39.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://tuno.mom/","date":"2026-07-12T21:55:36.375Z","timestamp":1783893336375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Jul 2026 18:55:55 GMT","end":"Wed, 30 Sep 2026 18:55:54 GMT"},"fingerprint":{"sha1":"62:0D:59:AF:DE:89:1F:E0:C3:0C:C9:01:93:64:F4:D0:38:76:02:CA","sha256":"04:40:03:91:66:74:DF:81:4E:28:5A:03:2C:B6:C5:11:02:02:CD:68:AF:6B:17:7F:6A:EC:CC:74:A7:0F:32:50"}}},"request":{"raw":"GET /static/thumbnails/vs20sugarrush.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://tuno.mom/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 12 Jul 2026 21:55:36 GMT\r\netag: W/\"74da-19e87ecb05f\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:36 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HcCq1OEErwVwepLQOnuzvoKixHpQv%2FhX1HxnobNiJr6O3xeZO0Lt8vvU%2Fh%2BJLoTflexfMTvlU02WOqsL4maWX2K8T5IHjJ8P3%2FswmuX3Hv0P5QH04C4YcqjAr%2F%2BCyBgRoIw%3D\"}]}\r\ncf-ray: a1a34b0859ba35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29914\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29914,"size_decoded":31322,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f5d34e92022a20b828fc43e0f5325f88","sha1":"84d7c51ff977d6dc7cdd6ccadb5524c617720840","sha256":"05f2eefbc3a7a73ef1cc83b31710ddd700b1e3f3ff4a23134de10b7b06d12a3e","sha512":"2c9637ef738349f0817dbb21371d276b68a06ece886665218e45d004fabb277af7e9b742c146cded525cd5443c243ac727041f08a0b1e5cd1552405f6323acb2","ssdeep":"768:bfrq1WWjyHPGdsVtCOsirTXlW5T7YujH5JazIUo8iVA:bzqUXHPGdsPCBOTV6TVaMR8R","tlshash":"6bd2e1b7010bb490789250d8e1129e9dc1f31bb5562757389cf889a318f6c727d26fec","first_seen":"2026-07-10T22:56:48.118862Z","last_seen":"2026-07-12T22:22:18.542254Z","times_seen":20,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}