{"report_id":"073eaa85-87f8-4b14-a05f-28e6c786256b","version":6,"status":"done","tags":[],"date":"2025-02-04T22:00:06Z","url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/?form_email={form_email}\u0026form_phone={form_phone}\u0026lrrpath=casino/provider/smartsoft/jetx\u0026p_id={p_id}\u0026pc=30\u0026s1=\u0026s2=\u0026s3=\u0026s4=\u0026s5=\u0026source=https:/bing.com/\u0026st=jdaoja1h\u0026starttime=1736959991181075991\u0026trid=cu3uftoa3eu4rcfs9570","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"eu-staging.ssgportal.com/GameLauncher/google.com","fqdn":"eu-staging.ssgportal.com","domain":"ssgportal.com","tld":"com"},"title":"404 - File or directory not found."},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-04-15T22:00:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"staging.ssg-content.com","ip":{"addr":"104.26.3.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-02-04T20:14:39.161764Z","last_seen":"2025-02-04T20:14:39.161764Z","alert_count":0,"request_count":8,"received_data":701501,"sent_data":4103,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pagead2.googlesyndication.com","ip":{"addr":"142.250.74.162","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2003-01-21","domain_rank":101,"first_seen":"2012-05-21T07:15:40Z","last_seen":"2025-01-29T21:45:17.672763Z","alert_count":0,"request_count":1,"received_data":788,"sent_data":448,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.100","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-01-29T01:42:10.614483Z","alert_count":0,"request_count":1,"received_data":9093,"sent_data":727,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jetx-v2-geo.pu217ev.com","ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-07-19","domain_rank":0,"first_seen":"2025-02-04T20:14:39.159931Z","last_seen":"2025-02-04T20:14:39.159931Z","alert_count":21,"request_count":21,"received_data":583851,"sent_data":17504,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fs.pudaf.com","ip":{"addr":"52.29.169.153","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2022-10-31","domain_rank":0,"first_seen":"2023-02-17T12:57:20Z","last_seen":"2025-01-29T13:35:44.415771Z","alert_count":0,"request_count":1,"received_data":78086,"sent_data":412,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-01-29T01:50:21.026887Z","alert_count":0,"request_count":3,"received_data":254353,"sent_data":1356,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-01-29T01:47:12.278676Z","alert_count":0,"request_count":3,"received_data":266078,"sent_data":1519,"comment":"","tags":null,"fingerprints":null},{"fqdn":"eu-staging.ssgportal.com","ip":{"addr":"172.67.43.115","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-09-15","domain_rank":0,"first_seen":"2023-08-09T16:33:00Z","last_seen":"2025-02-04T20:34:35.040807Z","alert_count":0,"request_count":4,"received_data":87617,"sent_data":2592,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":[{"md5":"c28d807ca7c0a787568e712d470c6563","sha1":"ebb38664dbc369c5d8ad217efae13bd5004a277b","sha256":"4f9556914cf613d8eb2813ddc04a9399041f96126422fa91454442893441e48d","sha512":"2a242d948703649efcd2894b7b682c73aae0ee473615720766fe6dbc87c0ddd3c5e2528c3ae1ddb84803a8f0b646dda4c54e91c478ffbde3a6054c1e91dfef90","ssdeep":"","tlshash":"dc5000000f330c0030000003000000c00c00000c0000c0c0cc00000000000c000000cc","size":10,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.892507Z","times_seen":14634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3e82bc552d98d8a1d2c9590fec8c0da5","sha1":"b261dec76451e25693cd09b7c8d4ad84e03c43e5","sha256":"6170fdcda816c255b80ff6a4ab41d1c91271d2fbc1f4c9a7ada8471fdd0da827","sha512":"0da0f6b2a8fdeea6bb866ec866d4b96d6b7cc0ebf433ab09ee9096f080971a0a68c41604b07dbe2a5bf7b751e64ad759aa5c78bd7874f9ad4ca5133d53322297","ssdeep":"","tlshash":"48700080080320203000b02300022000808aa800000080080280030a82088820000c0c","size":21,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.856586Z","times_seen":14574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"e0da7e6b0ddbc962be250d04e01408ca","sha1":"88bc8d65399f86f33aae72655fed4ef9afd9b93c","sha256":"5fc56c8217bc64ad868067805d54b49033baf29625a80c23075629c6cb6b601f","sha512":"ee5a2da298224a5a4add750ceaf97b45a981e3334fb15d8e19017f61dea996173c3a2f1e692e657906befe3c69c3f7047246d91c10efa4182d277f354407aa71","ssdeep":"","tlshash":"a67000088a00a0080c088802e223c80a02808022000ac8030000288a0080000ca08020","size":21,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.873435Z","times_seen":14421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"e7bf29422b0f8e76119f67afcbdf03bb","sha1":"154a3986d8d9e321bfede548b348583f70cbecaf","sha256":"8b5d094b3d17870d0731b950cb9e557537a3156a6cacf244dbd928450b2ddf27","sha512":"3783a83fca4cb2a23974d69c0ea3bda3f82beaa89f9fa295c860ea9fd30acbd0ec356d7e64ce01691b502a84e346d55c3988977b5bae0c7a7f0d8c987e0644d0","ssdeep":"","tlshash":"2de0615de1afb2316b707cd51237f371e43f742af5c01501c16a0190b156467c1328c5","size":394,"data":"","first_seen":"2023-05-17T01:16:27Z","last_seen":"2026-05-14T14:38:05.48554Z","times_seen":2228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"bb8bac99f2e593f2baa733ed88de9318","sha1":"47ce24dd96874b4cd5ecd608aa605beb8d6716db","sha256":"463797327a56afb41e0df0dbabb9eddcb6742ead712b6a5f080bb9fae1f34695","sha512":"bf05c18b6fb1a50d3586868bc413d108bfdef6335bd05f7e2ee207d6a2b6349bdfb5d43ad4ebbee556919c09feacb394d5f328870746028deee446f1d480fb44","ssdeep":"","tlshash":"d66000000003303c00c30000f3c00000030000c300030000300c0cf00300000f000303","size":13,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.859046Z","times_seen":14659,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"86be433ae83665601f218a4f7d0acbae","sha1":"4acf9d9f7a12e1b36928e87f68379846570529b9","sha256":"dd3597387478e89716f5d22ca7c495e669d6df6560cda3f23f0a1b03a897103b","sha512":"036d7c71243152d50227ddeb76316123a4c7bfb1048b9e7f831cd1751ccefc6d5d18bf4042c15de6ada2ee9eb1d286a1e303ad2063ce735c48cf56b360a39cbf","ssdeep":"","tlshash":"c3700080080ea0082000a202000200083c0000208222a802202c02a000802e3202800e","size":18,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.852876Z","times_seen":14634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"77525703ec81199de453d7ad6c77cdaa","sha1":"fbcba4dc5364283192653f0add97ac3f61cf7cb4","sha256":"58f05262a210f4f7fe0cd241e951f6aff84493c65c1e75473858b96cc5f72b48","sha512":"bd6dca30858fafbe6499869f6e8f81c155f8ab5cd9d674563b829112669f7410b93b473d5a38600f5f3fa15b9b310fc549c9845bf879d0ff6bed5655277d2d1f","ssdeep":"","tlshash":"b96000c3000000c003c330330000c3c0c033c00c0ccc0000000000c0003000c030f000","size":16,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.860877Z","times_seen":14592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"40085574ffe68d3214bf81845239eefc","sha1":"eea5f6535cf1464538bf913c29432e06b44c8a00","sha256":"a34a3472060a7340185039557366a9dee34a3d929efabfbde16828e94d9b5924","sha512":"19b707ae8ec5d93fa28b3ae1f0f24c8101e0e2dfdc714180fc87e25dc261b6e5dffecca9b4ca1c09430ca1b235a86f50b357cebb4c0406c2b94b3c159b3ef5bd","ssdeep":"","tlshash":"c72000000000000000000000c00000000000000000030c00000000030000c000000000","size":3,"data":"","first_seen":"2023-03-07T01:32:11Z","last_seen":"2026-05-14T14:22:28.879458Z","times_seen":13702,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"43c1748109084cb1dc66b6eac586e531","sha1":"ab618fb0859189456e6c0ac92a162110efb63058","sha256":"124d93a4ff250e1f9c048158fec671d427f415761f180b47b5c0c4ecc01e2c30","sha512":"011522ec26814220497360bf1ae4b6bda6dba3f506138c45784afb82e4ae76ca07e87185c76c80c92b50e60e0e6dffcbe4817562528295a42f39c05c57628187","ssdeep":"","tlshash":"1370002a00aa20bb00030820a2c8200003820282000200820c202ce282000002002300","size":20,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.882984Z","times_seen":14466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f4c2465eda6922ff3fea6ba66d147f14","sha1":"af7b7b826867df9913911732d8a6cdc03b4a9d11","sha256":"185ac90eabab9e2a96929021be3071dfe7637cd6bc7d96c26d78e66299661123","sha512":"b30a76e54e1c22fad70d5cde1f3584fbe37407e6fa5966eecf11c7a717bcaccce689502b338a9a85e84854a03e25468030380409d1b81994f58168101da5214b","ssdeep":"","tlshash":"5690044701470c3fc5015113d77175c1174144771fc34071130307710d11344d500700","size":39,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.877919Z","times_seen":14248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"46840a010abd7bd641fa9ed057b23fc3","sha1":"af747bbf71364ee29efc29fc78ae18223216d6a1","sha256":"6e0776e302c86192da0c6c45ce3dfd843a676795a8d66ec0553043e1384b0ef1","sha512":"4dd674376d325b8fc5d982489634250233e687bf78b4587a294bb91ba5f266f5c8da1a7fdd731ae8d319f6b1c45bb02b458191165ca2f79f74d421c7fd4fb70a","ssdeep":"","tlshash":"0af0ec14ab39d83300bf18a8424e050824288ef3d38689e2d2b28c3e483c6ca22cf809","size":473,"data":"","first_seen":"2024-06-20T15:18:20Z","last_seen":"2026-05-14T14:38:05.478549Z","times_seen":1226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4d96af8992f19fdf24befb2752ccf27b","sha1":"107401ec5745d5d13f68eeb2995b36e0c4d9790c","sha256":"7ff17cd32b97fc81846c2d685a8e433c8a87767f150d387a0c26db23123dc334","sha512":"6e1bfce4a6731abbe7ec24b16318700c52314f31b4e33a65d032ac65aead7662f1b58b87c6f2cfebb0b084a9da79c92949785a2276dfae715d0190838a60c152","ssdeep":"","tlshash":"c4f02024ab39d83300bf18e8420f050864288ef3d38689f2d2b18c3e4c3c6ca23cf809","size":465,"data":"","first_seen":"2024-06-20T15:18:20Z","last_seen":"2026-05-14T14:38:05.489715Z","times_seen":1226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"21795fe921ab95ae941165aea72df851","sha1":"b7b9c565167a5a3450f6919eca1dc327b413eb7d","sha256":"ad90c0dc980e9d155c32344936a81d8eea86791dbef00e4de75bec422d9b4141","sha512":"2b3ea79c066f23f174211a619f8247c24db3cfe985e0db38f4af06ddf688162125cd5e08d0731bbdd1ed3fcf1438246a20338453f0a30550472047313deb3a13","ssdeep":"","tlshash":"18c08c5998c27b48f2f098de6b466247b1381091172cf720f463f0ed3a4c00b4662e8e","size":170,"data":"","first_seen":"2023-03-13T12:55:17Z","last_seen":"2026-05-14T14:38:05.488632Z","times_seen":4712,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"946967b407a37b85fb6034e5005a80a9","sha1":"8326a11e77cba2fb135d70107febf5bb65e8412d","sha256":"f3aeb7a883050849ffe0c85edc471cc0d63c2cb6c17044289d7338baa55f4f19","sha512":"87201d54d6f6a40f26d3ec41eba23845e0b04b9bc5ba982e563ffee88026cf99278daead22e6ae5d115f2617a2d86701be88cd66cd898917360bd55d16643650","ssdeep":"","tlshash":"1eb092a86646a21880714eee47272227763e0080835d1730f2136498385c60bc6929ab","size":114,"data":"","first_seen":"2023-10-30T08:53:27Z","last_seen":"2026-05-14T14:38:05.482155Z","times_seen":2342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-05-14T14:58:44.066665Z","times_seen":70702,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0709ae56fc7adb374417dfa55c77fc30","sha1":"d244a52ecb28fcbcd922473617d6abdd1909d2cf","sha256":"2bfb2624234306da9e2bc9293e3c16a2648259bfd3cf530ba2bacd4959127fcc","sha512":"f9f1a929b7081d3a36514299b8cd38568499b7822ddceaff502f427957164a6ada0d4f70d90b8fa8d2592722912296f42af2332b06cd96e8587db45144ab32c0","ssdeep":"","tlshash":"8d8000330a0308b000ca0208c2882000828200c382320c023b000a80e2c00002088aaa","size":28,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.886338Z","times_seen":14653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"d3d09dec8acbf3262d26a09714be68d8","sha1":"a81c79311adaa75e8ea2533f7214aa7b66e9882b","sha256":"58be97a74a739217a2c5e882d0710d8c0a621d384651e898e99f9eaef6cfa97d","sha512":"d1cb163b32fef3c07f9c7be05eddbf8cb2259ec5383d2f7ec5af13398a1721ccfce92d87d7c240be0694cd48b044537edd0e6906e80002ed9a2eb1864d648d42","ssdeep":"","tlshash":"9d8000820e0300ac82022020eb838280aa3b80a32a02a0b22b320ba02f00208aa08332","size":34,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.85349Z","times_seen":14298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3e230d5e27a433510fca1d3071cf892e","sha1":"da89b11fc9f4efc4e7d2040ce8a6f48890a27c7a","sha256":"d67659abaf105132e7395d173750e200f6f5ac3579ea853341c37e51f9cccc23","sha512":"8351d3635efb4049fa5476420c92fdd2e6500a667fdb5fb58424c4b5b29ec5b7f1d8949f6930fd155b4f0c74f11ab525c0ccbf7d09e85f49bac98329a76f7e25","ssdeep":"","tlshash":"63f0971da738dc3700ef085c6647060c28394ab3e38248d297f68d7e943c5ca13cf544","size":462,"data":"","first_seen":"2024-09-19T22:06:33.343949Z","last_seen":"2026-04-19T10:38:19.538251Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6f6c03fd4521ce90329b0c0013aa42bf","sha1":"671028bedde2e019106752afcf5178c813a49adb","sha256":"7eb012fe59695a36b2bb692d409f5108e7ca8ea2fac8360e312143baee2e0454","sha512":"65a3a9c6c4b75fff5e84a6993285640516b7347bf197de29dfc6738e1ea29956be030a93de5502df89fef0bac9ec6e36469efee8e6da0706b61f23724ac7660e","ssdeep":"","tlshash":"95a0024d748a7211554215ad64f62419937548c4961c55567711418238dd34e9371f9f","size":62,"data":"","first_seen":"2023-11-08T13:09:18Z","last_seen":"2026-05-14T14:38:05.484527Z","times_seen":4155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8ce764f3fb2241a731aade0b202b86bf","sha1":"062bdaee9f4ed435c34a4d48f2d0a816ebab9c37","sha256":"78f2aa99138c5f3da720dd32fb145a2e31c9e4ed18dd79662fa185becd953b42","sha512":"34828a22a47b0526c4a4fbfbaaba4378184a5191306aa705b3f04981dc7ce97efd312627f959692b6e480862283a354acb4e30901eacfe7b9dfb8e5758e93267","ssdeep":"","tlshash":"13f0a715ab39d87340bf18e8525f151c64248ef3d38589e2d2b19d3e597c6ca63cf405","size":463,"data":"","first_seen":"2024-06-20T15:18:21Z","last_seen":"2026-05-14T14:38:05.478022Z","times_seen":1265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"835ca7926fe781c881942f67f5bb78c7","sha1":"9cec3a6a31ab1e336f0b92509aabc8e37abf34ad","sha256":"967e0b17732c146f40c3e698dc57ebb6158e764c808a5a6ee8138f186299c856","sha512":"79bde9ed4fe7a2b3f98e568dd508ad30e7524f945d4d99d42344f1a69c43672e2cbd143dfe188ab89556829354e49945f74e936e6d72bb1fa2aea903dd13937f","ssdeep":"","tlshash":"526000000000fc00c0c0f03f003c000cc00c0c0030030c30000030cc03300000000c3c","size":15,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.866583Z","times_seen":14654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4bbf90c8db51615867e7d63719a5571b","sha1":"02563eb3a0e65fca96b9008de9e2881a77f874ec","sha256":"c2c62ef4112f8bac4880180943c3bcec46ba828909719d5839351c8520c2b58b","sha512":"d54ea81378e4c7adb1f9cba055bf55857cce32809e8cba05eac98dc80141c2c457923547661e4bb7b863b1ad30d538b4ccd37bff21fe3c2b58c16f2235c00e78","ssdeep":"","tlshash":"2c6000000c00000fc000cc0330c00000030c000300300000030000030000000c000000","size":12,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.885779Z","times_seen":14469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"7209e8ecce6afb1b83884a095754d251","sha1":"3f036f59daaa070cf683493f90bbb3dd166c2155","sha256":"33bc2196253a3e20e6fe059f60948b5ee86d84cf5d32a6b99c2a3f420a2f9dad","sha512":"30ffcb99b5bc0b26c0c6fe9962f512107b4844985d9e61f0f734c78af15ec6315fbc06b4300e85c7237ed8837905b70e53c9f676aff68ccbf4a04dd46ccc5c52","ssdeep":"","tlshash":"f76000003c0f0f00300c0c0303000000000000c3000cc0c0f0030c0300000c0000000c","size":15,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.848647Z","times_seen":14624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6362428bf42d8f68e1d851fa560a1fdd","sha1":"32ec2812eb3459a62894627970ab912066cc51b1","sha256":"06e220fc0636a2c7f0ea45097e5479c2c109dc37d4a5bed14c0b421c4a96eff6","sha512":"17f8f977ff5d1ae2cace810896e92f2c70f5ae87f339afecf088ac1b56e7552058338530c319ec449820edc0fc1e6294941e06fa91bf71d8803712278612745c","ssdeep":"","tlshash":"e87000282b02c82280e80220a0002002c20202c2823080022382028280b220c080c0aa","size":25,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.88429Z","times_seen":14652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6fb2618dd28dec0f755745bfd06b17ac","sha1":"26d9df322133ddd0d235daea822903174a7a0673","sha256":"1b2f26a2cfd895f98fdb2ccb76aa015658ede302c53b59155b8177d43c23ac06","sha512":"fa37ab2785849e41f1dc7eac961658682843d98d37ef5f7a09885585c17a7b1e5567bd30453e7346b58d8bc961193522a63c2a03a1c220975a6414923c3674d6","ssdeep":"","tlshash":"96700008a2008f028aa0320820080202838a008282000c000b8208800aaa0808c00000","size":20,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.845731Z","times_seen":14642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"138278e37cc648cb3a98d6822b9037db","sha1":"d7e7e82f83894a6c3674373789c768c26bdf85ca","sha256":"546792c98263785c495757b1544a26c82f06eb4fbc4d4bd5e6d0cc3702416353","sha512":"6f2de869f5486f8f568220711444cbc561d8363941fccfdd2862a1065d7c4b22660cf077666079cd1baceeb865969e75f7a0be064bd1ed18e6a950f21767d25c","ssdeep":"","tlshash":"25600030003cc00c030fcc0c00000000000033ccc030c000300c300000003030303300","size":15,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.865064Z","times_seen":14648,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"5bb3567b708a70f08473af3734581765","sha1":"dfb1a06ebadf34826d40115ab296c62466cc39a7","sha256":"edee9f7aa49389f40c8c66acb9b33e05d7a09c259cb82f857935eabbc4eefbbe","sha512":"1488f911d18ee2595ad5e6a8f34e10ee8a1c5f4b66b19cfc3c07cea80350539213d21e6579b68ae23029fef15233ea9df705a786a4b67baf0189e554436e2839","ssdeep":"","tlshash":"54a0244d344f731045d0105f5c110034473044c0730c0031771114403c5c40c4175ddd","size":82,"data":"","first_seen":"2023-08-09T20:54:33Z","last_seen":"2026-05-14T14:38:05.484032Z","times_seen":4708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1c41a1b99dd39199746f221791a0c5ec","sha1":"5975fa67d9422197bac5e2ea403864559382a34f","sha256":"a7c37584d1e4a1a1fcd92a3e5872f301104df0a93127f5a3d39e12dcf1ff233e","sha512":"e2cb4014ce5c5c9c7bdea5c0abaa9b3173e088184eb2bd8ef17df26f1f2ef9032a3ad3ffd532187450478af656a3fde02699f2245a7e11409e6b3b88e391fa03","ssdeep":"","tlshash":"8d50000000000003c0000000c000000000000c0000000c00000000c00303c00000c000","size":10,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.86448Z","times_seen":14664,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"472c8fa8afc5dee207b7b66376a47bc3","sha1":"7d032ec220e9cf9510b18b4fad623b79a43ad8c7","sha256":"9d3508f44189a758ef53eab27a9463464323ba13f74fb466dace9a6caec58874","sha512":"833e7b9c7ff2118dc7d88d26c0717b1557e95ceb6f8b85cd1ee947c163f57a688a626c699c22c28f7d4a451773ca91a765a5c25f03e1ac9a3a9e198478741ad9","ssdeep":"","tlshash":"98d05e5460eed3096a273668c27d12896125c4e62c46811cde65c28880ec0d78a3df5b","size":248,"data":"","first_seen":"2023-03-13T20:18:24Z","last_seen":"2026-05-14T14:38:05.486063Z","times_seen":2359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f1f59a7ea83955109273b63deabf37e1","sha1":"94b34be75e8e9c4f1a7240c9582495319f51809d","sha256":"3a39e7b2a4d44c088496ae26bc9fd35ee91a5d60890ac471a847fd9ee4d4bce1","sha512":"ed0567db0033e8548a03f258cb09cf94253d0c1c610d4151517e0b76aecfc56007007f34942a599387e22af85448fe9cb21bc87cd0e98fb4a08f7441328ad7dd","ssdeep":"","tlshash":"7f8004373003737010cf5414c1c51051511310d3431104010f170d40d5500101455345","size":36,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.890876Z","times_seen":14468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"4fc61ce275ff4e6ad19df9b65d9ef63f","sha1":"02cbe99829f676d25f985e7939dad66ad1222165","sha256":"65341e08437d76f12bc1cb7a2c33350de4a76ece1c293c0a4efd6962a6d760c4","sha512":"378cd918de5a7e29fe3ec44df280741262a05a4d4426445969ea2c86db23c8376624ecb6c34e90b5c44bdca3ae71f11a32769d8e31fe9a7fbd9e90d59f993a94","ssdeep":"","tlshash":"a26000c03c0f000c30000033000003c00c000c000300c000000c000000000c0300003c","size":13,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.846315Z","times_seen":14622,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"631026b10319289c1cc7ac16a38a8fa6","sha1":"b5f1a42c3e63504c1a727660f0dfaa24d5d20d1d","sha256":"eb726f810af5e00b776a0fcc5ce5e5e41fa390d6d482c2dd7fe29f95cce02bb8","sha512":"b690f0a296dd9d3e194bc66b02f0e371d0fbe7ee0ef6c84c6a6675687619022c0cf1466d9af23b9d709424024ea537ef9a8da8a357c52ad1950020a546ffdb59","ssdeep":"","tlshash":"e070000a0802003008c28000cbc0808022cc00c2802a02000080088c0220082a22020a","size":20,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.863333Z","times_seen":14502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"71aaf1d40d701e9cf82889712149ec5a","sha1":"a6945c9529f285c14a005efa63bbb886238920dd","sha256":"766767028fc5dcbe8260d78ccc1fec850efb589fcc94081188b23ffc891a3b57","sha512":"3b48dfa8de75464e8df9f4962e48ad259f3db491221625a1063e95be3fcca217bf91065329835ab1de63701fca227d6998356f18f063326165103b67db8d6275","ssdeep":"","tlshash":"d140000000000000000c0000c00030000000000000003000030c0c00c0000000000000","size":7,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.878823Z","times_seen":14557,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"f6bf3f2ad5b0507b281e7d5bf5255ea5","sha1":"54ba42373435ba7f6fbd91cff0140992229ea9af","sha256":"270c2a0f685bbb7d8df1647831f3be82d31d7d97a7b6e58fade34cd54f23ebbb","sha512":"55aa794d66651929e928e8fca87bd72ea8c0d98b88186bfb8a674ae09cde9e5a2832639139f8f7977c6eecd8b95a2a777706e20d06398132b2ee1117b699cb69","ssdeep":"","tlshash":"7f80000380002a02800808c0c808a2a2c00302002a2028b2b28c0e22808030c8aa828c","size":26,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.857156Z","times_seen":14543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fe95833a7c6570f71a105b97a0084422","sha1":"95cbedbc884a3c0926f45e0316ba0132d4d0d2f8","sha256":"2bb3996dc1dd29534f6eb5b979ccaa121386102d2874992b35e1f7f766224cbf","sha512":"51a5eb46143855a9b44478be1f4f024fc68c7384d63c88df10745b80015de2b3f80dad1a86f3bbe76101b17447eb1c5de52abf4d8702d28ef22677e922d420b0","ssdeep":"","tlshash":"c6700002808002f0082c00c2882220e0c20280080008388803883e03a2c882e80c8820","size":23,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.877368Z","times_seen":14504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0602b0392fe10b0432b2510f89b4e74a","sha1":"f4e046adb014cbc47772ba727daf4c243e7789f0","sha256":"c772ff10e0c566e3b1a3b8e773b9efb6fedffa255c093b0906a43a60a7ff1710","sha512":"210dd655080c82859eb11be653cd660dc24a82553d912855f3ae2718ecc36ffde6e0972a9b48fc0548daca33f6522e595a04ad7cab878e38880fa56a1a4825f4","ssdeep":"","tlshash":"f660003330030000000c33c000330f0000033000303000f0c000030c0330030c03030c","size":17,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.872292Z","times_seen":14657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"35d82563006c8eeb426c5e2feced46d4","sha1":"e79f54552420500047e30c21fb652cb462866e3a","sha256":"185d74d689cc6a118a526bc696ddf16b11bc64dac4981e5acc217354aed4d4b5","sha512":"9a098b4a071b6fe3e703ebe18c749dd103b89a25e6983ebbb874db4434a84d269b37d1a1e0e2f7c05b35c92dd1bedd2608f2b99f3c37a8f98f4c6b81c375be36","ssdeep":"","tlshash":"7770002020083ba008cb0820808200a2022000e0802000020a220800e8a0000082b38a","size":20,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.88001Z","times_seen":14472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1e758dec7060dd4aac05ec1480914584","sha1":"418cdfe5c376fc8dc4b4f6ad7f5cf21d8e5274e4","sha256":"88a227a83bd770afae7f60247cd3082fd2874a6df2647ffcda6362dbfe01f1a6","sha512":"1de1839ef17e53c1755957bd8959543d97b068caf443e2ada3bbeec33e4c316045763bb47665980d662088218bc8f251ad06d691b0110e500de1109c68e868da","ssdeep":"","tlshash":"359002487046b9361525357401ab11567b1a059025051411c674408534613079451584","size":47,"data":"","first_seen":"2024-01-12T10:34:15Z","last_seen":"2026-05-14T14:38:05.485026Z","times_seen":4631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a3e52407da51098c745cc68125dc2353","sha1":"1a453dd6265ceda94d6de6fc82bd71aaa26b2480","sha256":"d172b58e11fc69f46610d9219fe02e933ca8a2370569776e766b6c1d2a0756fd","sha512":"b59af6033c8319522dba76313e091b1861e177d9bae214ddb450b1d8d1406b12495527ac1f84f6513d973e7d0912dd84749fc485ea7569d4cda12c40fc3a5350","ssdeep":"","tlshash":"94f02719b738dd2740ef186c564b160c68394ab3e38648e297b68d7e953c6ca13cf545","size":457,"data":"","first_seen":"2024-09-19T22:06:33.322065Z","last_seen":"2026-04-19T10:38:19.538839Z","times_seen":104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6e348b50e0bd912399c15d8aa26b43af","sha1":"cc46dcee57b222c9e407a5d055bb6e559029587d","sha256":"43a7fa33b5f84108bc8c38617a4f57bffd0df6d422517428808df1a8f4997620","sha512":"f48a436699a5e67d576886e9941e0beb45c04cb310bcc906e721793eb5a3773b05311d025775524e6f2ed23aa5fb43e08fb5540b8a0c8930c3046b14206c1055","ssdeep":"","tlshash":"998000c20223023e82822220eaea8a802a0280a32a0220b223000ba00e2030aab80300","size":32,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.893123Z","times_seen":14273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"efe6c34a6616337fde0ebc78ed1ba668","sha1":"a28aa61481aa14a9cfd41692f61ad230fb31c4b6","sha256":"33ee5648d0ee69ce9a53c756ba69a3858fd5126c04809f4979d89ebdbd167640","sha512":"0e909e47d77eba3bcc3797131f9b291863b934161433e1bde0fe27046ccd782bd251abc57ae2ad571a70d84e33187b3235d546a45c161774567ba8e5b2cf7201","ssdeep":"","tlshash":"af700000280280a0200b0c0a00880080030080000c0a80880002200283202a208a828c","size":22,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.885046Z","times_seen":14120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c35eafa64da5a518a5d7f9202b6b9a96","sha1":"b6da2c5d6c4169a51905f538e09eb8d0c67a8af0","sha256":"db971eeac16bba7af5cc887218b153a7922a02c3ec9dab6a940ccdf816222a68","sha512":"6bb4747bd4032aff670415b8bd52efa62f07d05d9f0a6fee8c9cd3e418360cdc898ee91dc0f68a386acdffc76c1cd8fd8e378d22f243a6e547b1dae14acb350a","ssdeep":"","tlshash":"56c04cf46f97380dd2022e531255c54d9370c9a13757b117c2147df54094f557af4d18","size":146,"data":"","first_seen":"2023-03-08T16:32:31Z","last_seen":"2026-05-14T14:38:05.477566Z","times_seen":4649,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"08eb497ef2003c602632a42a5cad0c9c","sha1":"c8c311f3e8b99f2fc041b57694b62d87dfac6afa","sha256":"253333cdd8156210310d3bf6290dc9b78d6e3214a01191ae687072555b122d97","sha512":"db558493029b53302c6c1a7bf68e5863059b090ae58b44ebb73d5c46e7275cb5f6bf7847d4a82bc52843f2a5ff520ec831b20da3e2742fd219982e6e3ca27a47","ssdeep":"","tlshash":"3bf0e214ab38d83200bf18e8420f050828248ef3d38689e2d2b19c3e587c6ca12cf805","size":472,"data":"","first_seen":"2024-06-20T15:18:20Z","last_seen":"2026-05-14T14:38:05.481639Z","times_seen":1265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"e76ebefdf7180a307d86918da7f8d704","sha1":"88ff601d929832ae2b3a1a6492891079bd09be46","sha256":"38961dd7e08c313889867662b9b3443116eee13078f1299557125d9734a48da8","sha512":"1cf8faf2b16a8af8fb12ff95a256eea145f914fac6c0034984ef2d9e48e4de8a2e06bf8d6b11e867f7ac74169fc59995951ca8ac9a03d99bcc2d270688b480cb","ssdeep":"","tlshash":"0e8000383002b3a020cfa83280c322e2a03220e283a0000a0b2b0a03ecb202008ab28e","size":33,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.867176Z","times_seen":14471,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"12cdfc845c18fd2f9035e9c8bb6b06fb","sha1":"cb8b88172ba0edc850b3a3a467e36f55ffbadbdc","sha256":"26050ae11f4a5ef59bc94c90248ae24cf2ac922baed4e3eeb7470f1705590cbc","sha512":"d52f918b658ab1747bf5e873d7b8e5a03ff6bb6b701e915cda8d6c29146d9f85a0a927cc454d0500721f356fc9c4e97fdeb59996d9c42aab90f9107a1f464cc1","ssdeep":"","tlshash":"5570000380002000800800c0c800a2a0c0020000200028b202080e0280802088888008","size":18,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.863888Z","times_seen":14517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"5bcef7cbabd6be5f44383e6e58bdc518","sha1":"8e592f7acdac54a6d0c69353fb936be9d8f35ad7","sha256":"0a26bb8bd77695f6f3124423c85002219d8ec9ad5273e4203d93910db83602f1","sha512":"a6bc5a91090d3882fdf366df3c3df25d5d12427405c6f1dba4a8a6c663e10a565a9163a19d9b14ddda25c83414c97f65157f6e0d660560f2cb9d03aeb3068a2d","ssdeep":"","tlshash":"386000c00303000c03000030000300c03003c033000000c0330003000c0000cc300300","size":12,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.865983Z","times_seen":14291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a5468e7dd67ab27f56294cd340d356a8","sha1":"4d7d68b3e3f21b07d4ed13da159f8c88950b46ff","sha256":"c3acaffa862000367a294e5ae39999e8c74e3ae9b22ea76287bf0cdcd2393b79","sha512":"86659f8782619fe563c8a65876bd2a8d99b00bf983d2e3a82e7242b62eb9faeea26151cb3420481cb98b752400850b174463059acbda7eb0382133b613ab151f","ssdeep":"","tlshash":"044000000c0300003000000300000000000000000000c0000000000000000c0000000c","size":6,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.867771Z","times_seen":14663,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"00e2383df55d4edcce03edc0f4534b85","sha1":"01ef2f5c6d60634adc7a5f57321f91c58d6bd95d","sha256":"8ac596d90fbc531a70a72fa5d181a127f7f8f10c92dc4a3ceb997c44cc09a9df","sha512":"b8495f734c00c4094f7b1daf9e1af1665b992f8aee05ad039c6ec96e7c48a673e7b1a0f0bac33e6f5de39729684b22bca26e5bce2c0a9784d34432bb246899ac","ssdeep":"","tlshash":"cb800003830ca000a00c00c3e830a2a0800a2a0a208020b20a080a2883023280a02008","size":26,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.893736Z","times_seen":14539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6c2875f1a9aa4e7aea000433b300f345","sha1":"19ada7d0dfde6c8f5e91f79429fedb4c7c2c07e8","sha256":"faff5a60a2c4aa315bd6d15ef5da1b81098a7b034d3a76acb8fcfffdce74153f","sha512":"8a3b447e6a31f96074144e2ad123595f40ecfeea5083cf8e1aa1d69724b490d55d505fef1cd8c27c4ac1bd097cc3e099d385f1de371e91a6a30f31d54b7a25d9","ssdeep":"","tlshash":"aa6000302f8030b280002002002a0022000a8080038000820080028a00228020820282","size":17,"data":"","first_seen":"2024-12-03T18:23:39.020248Z","last_seen":"2026-05-14T13:58:48.047576Z","times_seen":5278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"b364ab4c71c6399641ac7479f42118cd","sha1":"33fb4bc4f6d6ce24e4aa35c28e839b2a74dd5262","sha256":"a6f9c4cd1c47e8d7fbf4e1b338dd6f9fcfe9f8993c2a55fe2cfecbe69fb35cc7","sha512":"2248420af2980d13edbaa80afa5d41f8269f480b186c9c5302eea021b29cc89ef55a92416cc6d6fec5d7a512e8fcf55202bd5b370aafa84ecb8f360b194407b7","ssdeep":"","tlshash":"626000300c3f03303000000f33000c0c0f0030000000c00f0cc03c000fc00c00003c0c","size":14,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.872864Z","times_seen":14563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"cf5264e5b858dcea026ec61bee0e6480","sha1":"0dc15cc2ae1a6d1ee57e925adbacad0ae3fdb5cf","sha256":"8015a229810f6ee0fe587f91245adc20a13decaed196a2e62c86159c8fef56b5","sha512":"61d09f5abf0db9e6fb769ba538feb2435f9038899c5394e4e15ce43302d1e7c75cdfeb091aba3dfbb67fda7ddfb427c1a81e4778b069cb64402850f790bb7c23","ssdeep":"","tlshash":"0a80000280820038808a2088eb80f300820800822a8f20bb020c0ea08a8030a28cc300","size":31,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.883666Z","times_seen":14527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"fe48f64736cb93ec5ade9e70b858b69b","sha1":"df8b618e28bd50acb9b8f4c098a0b25ba512a9dc","sha256":"0a9c626fb8ff84cd97718ccff0677be620abe411e0d8fafe68548e6a5ee7c50e","sha512":"8ce6fe83f7ae9d28b076e698cab422e71978b49de372aef182e46b4c1cc5323c3ba54120d998f68bfa41cd23cd8e3d2445dfe2dc274edb14eb7e719392590239","ssdeep":"","tlshash":"30700000828080a2080800c28c0328a0c2028008000838c023882e03a2e082cc888820","size":23,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.886968Z","times_seen":14494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"93233746c4592d5e44afedd062a71b67","sha1":"e545370ff1cb22d5c9c7bca61d3da9e339f31530","sha256":"45f7623de2eb705e9c8d7f589cab430de56529e5ba99d2dd13e6518dc5d4156d","sha512":"9c0e5fb5826f5a920e1d31760490a1871e4f4361870a7249f72353f8d2f0225819daa0d853d1a2943b770298118e59770b616618625f66a32c677502186efbd5","ssdeep":"","tlshash":"956000080a00a0080c0888022223c80a028080220008c0030000288a0080000c808020","size":17,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.847539Z","times_seen":14211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"98353a31b793ebc6e10537ddd05216da","sha1":"099fe2b4f74e290647d9d22b68c3503a130a01c7","sha256":"73350db1395cf6961434f72314ff70b03f31907e15c909165184df4eb9f3f3ef","sha512":"56ece415a87a89020e22fc6fd26cf2dcc6c7ee5e32f33dc09b84ca8f6833d15d4e429694e627ea84f575c8112d75f8736bbbfae18efc3b56cab82cddf6ec75d3","ssdeep":"","tlshash":"53f08c15ab39d87240bf18a8925e151864248ef3e38689e2d2b19d3e5d7c6ca63cf805","size":463,"data":"","first_seen":"2024-06-20T15:18:20Z","last_seen":"2026-05-14T14:38:05.486617Z","times_seen":1219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1e84cdd42eb947313cfabf4500f4c6f2","sha1":"1649ff34cdea2486ef7db47471a1fcb012e942f1","sha256":"e2891e42eaf5f98310f3af183b86a9a89f4d7f47a45aefefdd5cfe36e486e275","sha512":"002eb667558a0460e2434a2d7a36b6c4e1ffb24b6ba795ba51ec8c5e4ddc82bf8324087ca6794d32f5402b9d01d13ccbd631dc4bded4911aaa01e47dcf023b38","ssdeep":"","tlshash":"156000ccc0030c03cc0ff0330c03c00000300003000000c00f00003030c30c00303f0c","size":17,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.859775Z","times_seen":14652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"bfbd08d74951e52542457f6784638b35","sha1":"f779be165adf8827cd0598b99194a2dae9ccc9ff","sha256":"07d4a7e030bf71800db7e7b71997259e273ab034fc252811418800517a2548fd","sha512":"587d11249e295bcf4d1886331cefcddaa11f86f1c6c830a03d0844f7388282d5bffc4450f95feb2f2b2b3b7aa7dd64bafc3020cfbc413f3c02cdb61fe03ec88b","ssdeep":"","tlshash":"776000300000000000c30c3003303c0303cc0000ccc300c00c0300c0030000c00033c0","size":13,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.85173Z","times_seen":14634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"afa0dd6bea08794807ddf25c705bef2c","sha1":"09c8cbb488852b1e52ff0ae99f7025934020738c","sha256":"af2575e18157545585190d5282f19c46a84b07f76051e0a6660332648de1d3d7","sha512":"d206a49d45abc1b62aa8393565478787d75bafa04bd0548787e107f9b8ae7c641f613991b2636c4cd36c1915d44a1243d4f63caba8306cd63b2e431432d70234","ssdeep":"","tlshash":"1f8000cb230a0008ea0c00a3f8228ac02a028aa3208200b22f000b2a8c022a8c300280","size":31,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.894897Z","times_seen":14152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"3cbcf5bee6ed43f69aca2fc6c02a4344","sha1":"a966e7ed3849529122a4affaf7ac8b233cec549f","sha256":"86a6a6b387bd154a65c7bc263243ca708794074495df121802588e15c5bf44b9","sha512":"862ec9b2531fee4818f593ae208e1386b71495a8d0c5c602c6406660a27f1fbd6b64062b41486fb9242b8d97742d11dfc9fda2e93674fdb0aaa2e1e73757b3f6","ssdeep":"","tlshash":"3aa0120d349a731041d0105e48320034462044d07b0c04216b11085038984084122949","size":84,"data":"","first_seen":"2023-12-14T07:55:43Z","last_seen":"2026-05-14T14:38:05.489209Z","times_seen":4632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"c40496e8bcbe53650d1b1713c33c84ec","sha1":"e69222c959665f0f847bb4641522a039d5a8a2d1","sha256":"9999557135a7c9775c8425deef0f3c23bbe15d92837891321fc64fe9ca90b982","sha512":"a9f9462a95a5247c0fcaa10d45eef2394d3e22dde7773e8d2f0aefa8472dae3448bfd9fd06c29ff2610086afa3674a1a81e93f2a69eef0163f7d59ab47a37a4e","ssdeep":"","tlshash":"976000030c0f000030000c030000c00030000c0000c0c00000c0000c00000c00c0030c","size":12,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.855984Z","times_seen":14635,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"7256eee9a6cb1a8f856109fb7f7f2d5d","sha1":"a6e2fd9b4ac8c8690e25f6e95e8c820e84711944","sha256":"805cd8e8d73c01887ab546125a87d19c51935a58d3ec45fda7701585269dfa87","sha512":"48f06b79abaf6c23f69709f311cc28beed425e4a324cfb19f6c5b63e1d133c1b6c665ef0603badd42107cecb74560df51438c0a4b54c82ebcc9d168d273e52fa","ssdeep":"","tlshash":"226000003f000030fc00030c000000003c0033c300000c033000c0c0c0f300000000c0","size":14,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.86029Z","times_seen":14598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0bb34532b9ca18993931cb93bc868cf1","sha1":"bc53fb64973f235776b1ee2778982633bf464ed7","sha256":"e1aa39f3b4a4da6e078bb9893bff6333898242200694118a2b7402afdd267a54","sha512":"e609e6e1e0d7f3520f8d9c0219f1353813da8deca3e1f8ae97937ccdca49fbcb720b23b49bee05098fbbe79d93f43533a35eedfa3f0582d0f0e9f84cd311ee5b","ssdeep":"","tlshash":"da6000003c0f0f0330cc0c0f0000000c3c000000000cc0c0f00000030c30fcc000000c","size":17,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.894321Z","times_seen":14608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"7cf0794147f66e1c5288a14aee870be9","sha1":"c064682a6e80b9a8cada37fc948dc11701a7d999","sha256":"e7f450ba4a8166696ed614771c0e785266939dc80d8dc7d5be0724888c488ffb","sha512":"a9eae10d5b0247e8e93e3a125fa4f70adf088e5013dd257491a4eaa2cf53c766ad77f1fa5938b6135670e425367fcc4e2b2237b7575759134865dc247fb51663","ssdeep":"","tlshash":"4c8000e2020200b20383a222c2c880b0022300cf08c2800288a388a2023c008a202220","size":28,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.852314Z","times_seen":14593,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"6d3c27389a15bace181effdd5a5ef0c7","sha1":"c5d2432d647de598c44351d71f2ea4315d90311c","sha256":"410e662b99aa4734f37fd0bf19e51eaf4f5227e1a81bc9ebb6eebfd0f596274f","sha512":"912b38184d7bed4ec5328bff7afc55f9d8b2af14d6d4e1ea41b1140e196719841e5cbb31133592225ef583a5e8a90bbf8613000db66a51fd6b1dfe5065670f6e","ssdeep":"","tlshash":"706000000cc30c0033000c03000000003000030c0003c0c00000030c0f00cc0000000c","size":15,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.87679Z","times_seen":14584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"1d7f3e2489aee059a399958d518d739e","sha1":"b72c3f666e1aa3ea2444cc70ab6b23e34c266474","sha256":"9047939faed531920e299a9aeab2167e7491ecdaff4f7f77212472a2b36035d7","sha512":"129db7fac634c27097d4a4355d73f6970a1f49dffab89dd988aaba7416d81de83e3d11cba774ff47ae3d5aa7e8da4678050a27ef7c671ef14b5e6f2a4ae60480","ssdeep":"","tlshash":"fc700000808082220008a8e8c8202003c0820b082200a008b28c0c00800002c220038c","size":23,"data":"","first_seen":"2023-03-07T01:10:18Z","last_seen":"2026-05-14T14:22:28.846918Z","times_seen":15822,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"78e1c640832fcc8198d7c32b07080f3a","sha1":"1a87173187888d8e79586250252eb58e8146d75b","sha256":"ea637d6ab10b4a1245da609dd50ff2b4322e42e0d25e67628cf147783c117f3d","sha512":"f76dd9ee6b195eb6eacd9379863731a4ee179a528d4f66888265ff2f87add8c12fc8ac9808e9b0834110184fca0ffdbf4f31865113dc461f690f57ad78207b02","ssdeep":"","tlshash":"988000bc83230038820aa22ce2ca08c02a03c0a3000280e23b002f82ce80888a2223a2","size":32,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.849199Z","times_seen":14240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"ae0eaa09f5b48bf9b1ddc62e2f1410e3","sha1":"693e1ee25d0e19de4ba9e03b67b4f10247ddfeb9","sha256":"e526092b476382cc889e2b9cd2f8546076babbbdc3f7c2f728c8787dccf761da","sha512":"74992cab8fe0de8764cc1d03c63cda66a565525ee92319baf4303b350fe32a2dc7c9ff431c545ab7d724e23ca36bf482ba31a8e395dd55eacfd7585d8ed7cd35","ssdeep":"","tlshash":"b780008ccc028c03a88ab0230c33c0f80cf820032800a0c8ca00083be0ca2cb0bb2eac","size":38,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.868956Z","times_seen":14656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a5b02b21b354bedc70fb8a39318e29d2","sha1":"3a555a8ac99bf6c3707ab154d0e4e1336a9b8116","sha256":"5ef2603bdd0db0a2c008b7848c9b9f2f592aeb0620caa9ea377a09c0c81e4046","sha512":"b38724df4164756b2981a0a667f05d02940f3cc140b9f30fce7e5cd22e95f1f2806c5eb36977eb85588f606a6532a0dc205d8e753bc1d12e70e9d0c8c4fae497","ssdeep":"","tlshash":"47700008c00e202882c02000a2c003020280008280000082380a0a2000222808000282","size":20,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.865584Z","times_seen":14663,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"2b9df73898c8308496f7c6cd65ac3a16","sha1":"b2c7f38b83652b7bbf665395a03045349f482abf","sha256":"da9f4519fb8397f1e994c36b18330360e0edad6149c89c974e7eb7057b9e5298","sha512":"d008a5541d294431668dccdf063894ae8293d8acd9700b521ced7d28bfac32b9df677a5fd32e848b3149a0a9e629669a1abdcfb76e99b8f46da7d2c8845e880e","ssdeep":"","tlshash":"44700080820a00200c03080082c820ae0a0000c282020820000028800a02a0038a0380","size":19,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.891962Z","times_seen":14667,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"8f8d4ebb34474e1f96d889baf35eaf1d","sha1":"bb15bc53e0f592d2da6327f5135cd003021c3dc3","sha256":"4ae59a97bb35c88e0b946b7e260277c7f56e30d9e3b90d63aa77acf4b497fa43","sha512":"5193fe2f6709038204c7c37c295208deece260c7a69aae7d9d9c2d80e3bf5d1726ead9b54335967ea4ae843f5e728413bd55b75456ac37cab06ac1bce7d8968f","ssdeep":"","tlshash":"5380008c0203022cb28a22a8f2c208c02b0288a30003a0e823202fa2ae00088e2223a2","size":33,"data":"","first_seen":"2023-03-07T01:26:40Z","last_seen":"2026-05-14T14:22:28.869531Z","times_seen":14216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/img/country/azerbaijan.png","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:36.844529513Z","timestamp":1738706376844,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/country/azerbaijan.png HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/?form_email={form_email}\u0026form_phone={form_phone}\u0026lrrpath=casino/provider/smartsoft/jetx\u0026p_id={p_id}\u0026pc=30\u0026s1=\u0026s2=\u0026s3=\u0026s4=\u0026s5=\u0026source=https:/bing.com/\u0026st=jdaoja1h\u0026starttime=1736959991181075991\u0026trid=cu3uftoa3eu4rcfs9570\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=HWf2YUkfwZX9IP9I3_zcGvLnPvB7QVJjrHOpW6.sPUk-1738706376-1.0.1.1-6Ij7g_6CVT.3nNjGyAj8epDmeoHJ7s4e52HI5FSHPnl.twWhOCjY8uuhiEF1gUOJkmqGwHpbJI7RiWua0_s3Ew\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1664\r\ncf-ray: 90cdedc70aa70b51-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"33d0c4d4b59a30bb8c614b3ecf281c46\"\r\nset-cookie: __cf_bm=cmyKAu2OKaLDBynMy17gLQr0SlzYCG8eBUHAtHd3i3k-1738706376-1.0.1.1-uT8L0.XC6el7u_stuU_qcCES3DIdCi0eji3w7AfuAHeNu9svPcH3TmkkbmCbm_2nEZY2hSG_oB58_JNr.i0R3A; path=/; expires=Tue, 04-Feb-25 22:29:36 GMT; domain=.pu217ev.com; HttpOnly; Secure\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vprWa2acSLz2lV6c%2Fc8bx8ba9BGaSmbzsFeH5dVgxmI7aZcytXk9as4fBTAsbstIZlO9s2S6ok1J25BIQQSEwRlpQFGR4qtejefbu9IrvMo%2FrTIdpgnpXUCQCg9YrsD1%2BYXGmUpx1nGjq1X14sHbHo1%2FRjN%2B\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1458\u0026min_rtt=422\u0026rtt_var=1599\u0026sent=33\u0026recv=42\u0026lost=0\u0026retrans=0\u0026sent_bytes=15746\u0026recv_bytes=3282\u0026delivery_rate=26050974\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=559\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1664,"size_decoded":1664,"mime_type":"image/png","magic":"PNG image data, 135 x 90, 8-bit/color RGB, non-interlaced","md5":"4b1a8f3db17dfdb20db3a28f033bb95c","sha1":"2d13759d31c37e404fc2618aeb8993587a1f1ee5","sha256":"bbdbaae09a9fefe1eac886940fb71dc8694145eb2841e5415ec3d67a44401e2e","sha512":"e429219a4aefa81681e795f75daf2bef227e3a2105f2e1e788968e5bf95d982da7ba1a2610b97f80da714d1c780d73b065827d541e208c5eff63b79a3d1125c2","ssdeep":"","tlshash":"bb31d6d75bab8121e431b86b81ede038e45b128a2734d0ba5a1f4fd2528e0ff48456b9","first_seen":"2023-09-24T17:12:55Z","last_seen":"2026-05-14T14:38:05.458323Z","times_seen":2816,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/img/header/lang/bolivia.png","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:36.84493963Z","timestamp":1738706376844,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/header/lang/bolivia.png HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/?form_email={form_email}\u0026form_phone={form_phone}\u0026lrrpath=casino/provider/smartsoft/jetx\u0026p_id={p_id}\u0026pc=30\u0026s1=\u0026s2=\u0026s3=\u0026s4=\u0026s5=\u0026source=https:/bing.com/\u0026st=jdaoja1h\u0026starttime=1736959991181075991\u0026trid=cu3uftoa3eu4rcfs9570\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=HWf2YUkfwZX9IP9I3_zcGvLnPvB7QVJjrHOpW6.sPUk-1738706376-1.0.1.1-6Ij7g_6CVT.3nNjGyAj8epDmeoHJ7s4e52HI5FSHPnl.twWhOCjY8uuhiEF1gUOJkmqGwHpbJI7RiWua0_s3Ew\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 463\r\ncf-ray: 90cdedc70aa90b51-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d0965337d9de6dc51649c641331806c3\"\r\nset-cookie: __cf_bm=Tk_wzUI0MVluNuGD0IBhMySSuJC34O2zyxco_8TFSBk-1738706376-1.0.1.1-ofRRBTgBbMb92gY3P3EbklP5839hfFnSRoCWASptGMdSEI7GSCwhgtAHB2BSqreF2kkVmHLUovraOXyiSEPO5A; path=/; expires=Tue, 04-Feb-25 22:29:36 GMT; domain=.pu217ev.com; HttpOnly; Secure\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=eQSfxoqneG%2BRXpi2czJgVLjVFvTIAzvJruo5xO8vWCCRPZ0EdayTdCxsaLgl4FUAqYiVssbKu2DzJDMEiNRbyYZ%2F1K80%2FPnXWXd%2FbkbVMy3nA1JPWj2O5AdAZ30nQq8kwoRfFOoTsvQhvIuoPdY%2FdDZKKF1b\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1335\u0026min_rtt=422\u0026rtt_var=1445\u0026sent=36\u0026recv=43\u0026lost=0\u0026retrans=0\u0026sent_bytes=18178\u0026recv_bytes=3282\u0026delivery_rate=26050974\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=559\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":463,"size_decoded":463,"mime_type":"image/png","magic":"PNG image data, 32 x 24, 8-bit/color RGBA, non-interlaced","md5":"f5eef1a0d55ed62e61e3f8bf72acabcf","sha1":"a6deff5e58f9d999d1cf132f959cc1d6f7cb8dc4","sha256":"c17d8cad3f84cb35a14211d8c30a7aa1cab178f197d631e1e53c6a34650faa6d","sha512":"7f6e1a12565939062fd157a4ce1b01bdb34509d7ce65d1fc560a246ce75c62dd880d556d74131ccf170258dcabd4179c61a838ef26d6b06902a56e14823120b7","ssdeep":"","tlshash":"98f0bbd066b054f3d909820c850b17e079974cc07509411e96e371bc7b701d01a51f7b","first_seen":"2025-02-04T20:14:54.923884Z","last_seen":"2025-12-03T21:06:39.937112Z","times_seen":17,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/img/header/lang/guatemala.png","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:36.846886032Z","timestamp":1738706376846,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/header/lang/guatemala.png HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/?form_email={form_email}\u0026form_phone={form_phone}\u0026lrrpath=casino/provider/smartsoft/jetx\u0026p_id={p_id}\u0026pc=30\u0026s1=\u0026s2=\u0026s3=\u0026s4=\u0026s5=\u0026source=https:/bing.com/\u0026st=jdaoja1h\u0026starttime=1736959991181075991\u0026trid=cu3uftoa3eu4rcfs9570\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=HWf2YUkfwZX9IP9I3_zcGvLnPvB7QVJjrHOpW6.sPUk-1738706376-1.0.1.1-6Ij7g_6CVT.3nNjGyAj8epDmeoHJ7s4e52HI5FSHPnl.twWhOCjY8uuhiEF1gUOJkmqGwHpbJI7RiWua0_s3Ew\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 536\r\ncf-ray: 90cdedc70aa80b51-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"50de3a47edb11372db742b44e0e5c442\"\r\nset-cookie: __cf_bm=DNNUGN9dnGUgcBNqVE.7Jeq2zSoiU1pDJSG0MpfPuWY-1738706376-1.0.1.1-luWyv.jVT6lfbgiMcXhsVjdQDJAlbTCgVPyNan3kZMKJ1qHoN2uwrby7sEHr2510_1QSlNBK74zKb8CmvyV5oQ; path=/; expires=Tue, 04-Feb-25 22:29:36 GMT; domain=.pu217ev.com; HttpOnly; Secure\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=02whlEmcqzVDl%2B32j2UG4qbv6v6HMHy7dEWdkuGk9ERfanOh7rGGPnLArM6ux3Fzzrmoo%2FoybyJdOmbW0%2FF6k3GN9MaMU2MJZ8kkH1mjgE39oB%2FSqvNkrwUaiB9QjNrBxMYESGxpNZ23ugLnp1CItK9NxMMe\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=923\u0026min_rtt=407\u0026rtt_var=820\u0026sent=39\u0026recv=48\u0026lost=0\u0026retrans=0\u0026sent_bytes=19374\u0026recv_bytes=3282\u0026delivery_rate=26050974\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=562\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":536,"size_decoded":536,"mime_type":"image/png","magic":"PNG image data, 32 x 24, 8-bit/color RGBA, non-interlaced","md5":"333f769abdb7c21459bd569a00cff65d","sha1":"a7e34dd5ad103df5ad65abcad885855e089ea86f","sha256":"ee905bb896b3bf241f63bc8d6f6a55454a0b4b3550f842254d891b94bff932ff","sha512":"686247395a70683f4002161ffb593810c1a801a826f866a4958fbe0717f8dd3aec144920fb962f793573f179bf5a53aff2b1f9a8d9dc70b7a4021638e4d34d5e","ssdeep":"","tlshash":"d4f0e5c37f94c5be09ecc89aa4a70ed107a3fc3b0040120828cbc14833eca829683f22","first_seen":"2025-02-04T20:14:54.91969Z","last_seen":"2025-12-03T21:06:39.923993Z","times_seen":17,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/img/header/lang/kazakh.png","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:36.859847292Z","timestamp":1738706376859,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/header/lang/kazakh.png HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/?form_email={form_email}\u0026form_phone={form_phone}\u0026lrrpath=casino/provider/smartsoft/jetx\u0026p_id={p_id}\u0026pc=30\u0026s1=\u0026s2=\u0026s3=\u0026s4=\u0026s5=\u0026source=https:/bing.com/\u0026st=jdaoja1h\u0026starttime=1736959991181075991\u0026trid=cu3uftoa3eu4rcfs9570\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=HWf2YUkfwZX9IP9I3_zcGvLnPvB7QVJjrHOpW6.sPUk-1738706376-1.0.1.1-6Ij7g_6CVT.3nNjGyAj8epDmeoHJ7s4e52HI5FSHPnl.twWhOCjY8uuhiEF1gUOJkmqGwHpbJI7RiWua0_s3Ew\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 6521\r\ncf-ray: 90cdedc71ab30b51-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"373579c688c96e90a00fb7a188f08b06\"\r\nset-cookie: __cf_bm=wpyfSL.egEKamewURAxsd9BX54Jq2dU5vA2RA3YURiU-1738706376-1.0.1.1-RhLcxxvMHaux6Y4MY_wVEq.RHCMaGgFgnUZUuvZqyA_rhVKbI7qXkX0o6vYJwqbgcarcnyfnmO5gqtTSDSJGsg; path=/; expires=Tue, 04-Feb-25 22:29:36 GMT; domain=.pu217ev.com; HttpOnly; Secure\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=eCw2iZ%2FzzV8JvHSGaxcUW1C3xmo3nCOHtqqg1RccXVvFqYQNXvK4H8OSm1MoWG%2FBqI9a9CLOwSXKP0ngGCQRCvqfFOr9EFkv0IVPt35TunIN2Qi0OmRTCQx6Lipyok4BPcwRcYlBemeSTE3MwwxxKhoUrv8n\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=588\u0026min_rtt=377\u0026rtt_var=155\u0026sent=56\u0026recv=60\u0026lost=0\u0026retrans=0\u0026sent_bytes=28618\u0026recv_bytes=3282\u0026delivery_rate=26050974\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=567\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6521,"size_decoded":6521,"mime_type":"image/png","magic":"PNG image data, 135 x 90, 8-bit/color RGB, non-interlaced","md5":"1ffa8281a12464862ccd3d844d2d2a78","sha1":"14215ced72bc705a71d98d3c322bd322750d464b","sha256":"78ad555d048af744e4c383fc00ff851b738ae84a48df2af6abc02581d17a7d13","sha512":"e61ab0baacba16c58af143d88f73aeee0b6819a57f4a2d3ae1c786837ce8c724d378aeda206c2f46473cc8384946d28b68d2233df11d10c52c6322b99b8bf304","ssdeep":"192:U7TfQjKOuP/F4Jd5W8OZZvNkloD+Cy6Pc:U7TfmuV4Jd5W88mqD+CyJ","tlshash":"8dd19ea3ded303a10376d6a320b68751cbe14991051a130daf53f8e97ddec2845fada3","first_seen":"2023-05-02T00:22:12Z","last_seen":"2026-05-14T14:38:05.466253Z","times_seen":3016,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/img/header/lang/honduras.png","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:36.860246946Z","timestamp":1738706376860,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/header/lang/honduras.png HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/?form_email={form_email}\u0026form_phone={form_phone}\u0026lrrpath=casino/provider/smartsoft/jetx\u0026p_id={p_id}\u0026pc=30\u0026s1=\u0026s2=\u0026s3=\u0026s4=\u0026s5=\u0026source=https:/bing.com/\u0026st=jdaoja1h\u0026starttime=1736959991181075991\u0026trid=cu3uftoa3eu4rcfs9570\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=HWf2YUkfwZX9IP9I3_zcGvLnPvB7QVJjrHOpW6.sPUk-1738706376-1.0.1.1-6Ij7g_6CVT.3nNjGyAj8epDmeoHJ7s4e52HI5FSHPnl.twWhOCjY8uuhiEF1gUOJkmqGwHpbJI7RiWua0_s3Ew\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 313\r\ncf-ray: 90cdedc70aac0b51-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"8c4ee029731d64249574b4071885efb3\"\r\nset-cookie: __cf_bm=ARLSwRfKYyFCUd8dDlStLOzzW_qjnijwXtpMym4SJkI-1738706376-1.0.1.1-Zcws3un3iKJc_AMtAMSP5gfR3brtpZu58.59_AGEa73pKXzbKHcO7q7igK8cKuEkfs609mpdmBamuBCPEctPzQ; path=/; expires=Tue, 04-Feb-25 22:29:36 GMT; domain=.pu217ev.com; HttpOnly; Secure\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8bRRkAaBQqR0alBCCH6vvutJLAE%2BDYKZkd6WAa1AX5fUQIC%2FACnWUMtbFmtXjC0cV17JO2SrjoiEVKQ0juQsNzHgnR0MJBKVAKkGcGILk5jnxeRvJuP1AbDxO0QmFdKNF3AEYaMIksVnPPleWX%2BIGm2TDSH%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=588\u0026min_rtt=377\u0026rtt_var=155\u0026sent=63\u0026recv=60\u0026lost=0\u0026retrans=0\u0026sent_bytes=35919\u0026recv_bytes=3282\u0026delivery_rate=26050974\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=567\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":313,"size_decoded":313,"mime_type":"image/png","magic":"PNG image data, 32 x 24, 8-bit/color RGBA, non-interlaced","md5":"14df46742ff575c6beeaa7e02245846e","sha1":"4b88a8a8ce5db11ec471cb4e79be6098545b53a7","sha256":"3d136130fe860aff16e3dac2506d33b9a9c03e243146e2407cb0ed561a9885e2","sha512":"75882fb13ad4b82ecc0c5e6eb9a441e022b12f5ad611b8374378e72b48b05a8536f5e895eaed3c5c2be6127858185c5c0805f35f96f51ec358b437d71dfef99f","ssdeep":"","tlshash":"ebe0e7d56f15f43ef97f4da7150fc2400e6b38ee221560389411dc9d76191902b3c713","first_seen":"2025-02-04T20:14:54.921854Z","last_seen":"2025-12-03T21:06:39.949818Z","times_seen":17,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/img/header/lang/ecuador.png","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:36.861965165Z","timestamp":1738706376861,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/header/lang/ecuador.png HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/?form_email={form_email}\u0026form_phone={form_phone}\u0026lrrpath=casino/provider/smartsoft/jetx\u0026p_id={p_id}\u0026pc=30\u0026s1=\u0026s2=\u0026s3=\u0026s4=\u0026s5=\u0026source=https:/bing.com/\u0026st=jdaoja1h\u0026starttime=1736959991181075991\u0026trid=cu3uftoa3eu4rcfs9570\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=HWf2YUkfwZX9IP9I3_zcGvLnPvB7QVJjrHOpW6.sPUk-1738706376-1.0.1.1-6Ij7g_6CVT.3nNjGyAj8epDmeoHJ7s4e52HI5FSHPnl.twWhOCjY8uuhiEF1gUOJkmqGwHpbJI7RiWua0_s3Ew\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 3720\r\ncf-ray: 90cdedc70aaf0b51-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"62e99208a642b23009730157930e800f\"\r\nset-cookie: __cf_bm=_HzCCKBy61PUFThFY.6sCF7HaIJDWyt5D_VM7.TIqHI-1738706376-1.0.1.1-EXlkDDivjrheoIdXiNgTv1Z0ycQleyfx8qNieiH8sHOWJEHS2sCBfg9cx8NWlFm_HGIlX2l5r369ghGRuASgMg; path=/; expires=Tue, 04-Feb-25 22:29:36 GMT; domain=.pu217ev.com; HttpOnly; Secure\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AXVCgI6UpK2gv2Wafy%2BawxYzbX7p0PAfqGenk14LpwRfRAR9dIPMEVKAR6eoMLAl3CbUQqRxgcrf3cAFDhHhEoClwKjk3tm0BsszeLOAJNVaXgnpdvDrnM9Li2tbZHVRChc%2FU4uL9PPIhlbcXjGdpqXsPTTY\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=582\u0026min_rtt=377\u0026rtt_var=129\u0026sent=68\u0026recv=61\u0026lost=0\u0026retrans=0\u0026sent_bytes=38720\u0026recv_bytes=3282\u0026delivery_rate=26050974\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=568\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3720,"size_decoded":3720,"mime_type":"image/png","magic":"PNG image data, 135 x 90, 8-bit/color RGB, non-interlaced","md5":"f48b722bb20a31a8ec900d54dfb9c3f6","sha1":"9e3a4d03f7792631f4a625650329fb6a54a41bb7","sha256":"986129cecdac6f1811461839c8ff79a88044fe1cdc8bfbbd804e387e13d9bc32","sha512":"755c1e8c23e465ab4d5102bb1f5cd95c584f1dc1253f488bc6194ccd1bce70c9e671effe96b24ab78e1c57956a9538b5852eb2cebdcae514138cb071823017d6","ssdeep":"","tlshash":"ca714b6ac228edb091fc3e7072f06ca88cd05a9c828cf7838a856e3d272461e9896515","first_seen":"2024-12-11T15:57:40.179052Z","last_seen":"2026-05-14T14:38:05.472028Z","times_seen":974,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/img/header/lang/chilean.png","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:36.86249038Z","timestamp":1738706376862,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/header/lang/chilean.png HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/?form_email={form_email}\u0026form_phone={form_phone}\u0026lrrpath=casino/provider/smartsoft/jetx\u0026p_id={p_id}\u0026pc=30\u0026s1=\u0026s2=\u0026s3=\u0026s4=\u0026s5=\u0026source=https:/bing.com/\u0026st=jdaoja1h\u0026starttime=1736959991181075991\u0026trid=cu3uftoa3eu4rcfs9570\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=HWf2YUkfwZX9IP9I3_zcGvLnPvB7QVJjrHOpW6.sPUk-1738706376-1.0.1.1-6Ij7g_6CVT.3nNjGyAj8epDmeoHJ7s4e52HI5FSHPnl.twWhOCjY8uuhiEF1gUOJkmqGwHpbJI7RiWua0_s3Ew\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 424\r\ncf-ray: 90cdedc71ab20b51-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1a5bb5e16d279d4a885e4e4dff7fcc26\"\r\nset-cookie: __cf_bm=LdfYt5tdpANejX_E9c0KD7jcCtfq.k4fcBKXZ.JmZ24-1738706376-1.0.1.1-Nl2WxWgoJ3MJXfQFWc8mAU3UT_cm8hLS4wBP95RRokzMbWHq6RdmnFsQqtuA9BhJcYNqhUwCPM6TwFac7CQcqA; path=/; expires=Tue, 04-Feb-25 22:29:36 GMT; domain=.pu217ev.com; HttpOnly; Secure\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dIPFmjnSH8okhBLQ95cAv9K36k4Z5ggbP3mJCveEvM9s3iAXoDE0npo%2BQ7Oiceu29yK26anJ0IbOLlvMGlHHWJMTbf%2FPo6mkfQybdwOsG0aP7PDvgz%2BvWiZwNj2TvbZElrY0QF%2BJZGwEwKeUlhB1nK5noehG\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=582\u0026min_rtt=377\u0026rtt_var=129\u0026sent=75\u0026recv=61\u0026lost=0\u0026retrans=0\u0026sent_bytes=44182\u0026recv_bytes=3282\u0026delivery_rate=26050974\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=568\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":424,"size_decoded":424,"mime_type":"image/png","magic":"PNG image data, 135 x 90, 8-bit colormap, non-interlaced","md5":"71bf07a383c7876508533c6e142be0ae","sha1":"1847879d9ba61924413e72647dea739232ef120a","sha256":"b711748e2628dfdfa5c7bc1c87bd58e1ac2b0767f5f2fa840bf366a14c363e73","sha512":"f457802f05ddbaa81d55d392d898284220078f9536735daecdc8f45f423be3b34aa5d15f7cc5f9a9d5aec394dc24c6026bbdf44418a99720b897b6b21647bf95","ssdeep":"","tlshash":"b3e0238171634e3cc9191f42d4a82157e47747801f2c86dfcf89ce0e7e900d550a2c11","first_seen":"2024-03-02T00:46:09Z","last_seen":"2026-05-14T14:38:05.447331Z","times_seen":1237,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/img/header/lang/english.png","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:36.862959898Z","timestamp":1738706376862,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/header/lang/english.png HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/?form_email={form_email}\u0026form_phone={form_phone}\u0026lrrpath=casino/provider/smartsoft/jetx\u0026p_id={p_id}\u0026pc=30\u0026s1=\u0026s2=\u0026s3=\u0026s4=\u0026s5=\u0026source=https:/bing.com/\u0026st=jdaoja1h\u0026starttime=1736959991181075991\u0026trid=cu3uftoa3eu4rcfs9570\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=HWf2YUkfwZX9IP9I3_zcGvLnPvB7QVJjrHOpW6.sPUk-1738706376-1.0.1.1-6Ij7g_6CVT.3nNjGyAj8epDmeoHJ7s4e52HI5FSHPnl.twWhOCjY8uuhiEF1gUOJkmqGwHpbJI7RiWua0_s3Ew\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 389\r\ncf-ray: 90cdedc70aae0b51-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"54c93b84f37f5e954222f5cab9b1a64c\"\r\nset-cookie: __cf_bm=N.ZodaNQoF.lRR6VAOj8kGNC62kQCstCdwEqLM7iqTk-1738706376-1.0.1.1-HMOqKqRAEo3Mr3I_FXirA459rpIzIR.Y79MRQPgTsIOItwJOtB.yxRqddvKcM5kti1C4z7DSh6v4umMP88PCiQ; path=/; expires=Tue, 04-Feb-25 22:29:36 GMT; domain=.pu217ev.com; HttpOnly; Secure\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=o2joUa%2FU5mFKydGfIO6yiqfzIEWZjat24MQyWEwVQOXPMfzTfZLB5ysFsG70t87rigMAFV1vG0AUoMa5dThkJfrkhxk5VUkiZr9kTxgzrbbGT0zJRVHBUSDp4MH%2BQublzY%2FUfLo0lZT6mhNySaYC13Qngwdl\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=582\u0026min_rtt=377\u0026rtt_var=129\u0026sent=78\u0026recv=61\u0026lost=0\u0026retrans=0\u0026sent_bytes=45364\u0026recv_bytes=3282\u0026delivery_rate=26050974\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=569\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":389,"size_decoded":389,"mime_type":"image/png","magic":"PNG image data, 32 x 24, 8-bit colormap, non-interlaced","md5":"59d9b6736d258894ab2ea6e367c7eeb8","sha1":"e69b2821de38b73c02ea7c49c4cb5ce4d1c9ad58","sha256":"2b887027d95117ec1244f8b2b5197c130ecd11d1d2466753c4e9a2c97394c5f1","sha512":"8ee94daa48d97f8c33aadd960d072efb628240bed6d54d6bb1c9dc436b0ee89aa4b8c20bec5864af951cca4bb4accabd9afe4ede45e5cd53bed38ebdd62a3b13","ssdeep":"","tlshash":"0ee0f18576205dbaa148c3e1bc139460e077688b03218703b7b10c0019f19401607f89","first_seen":"2024-03-02T00:46:09Z","last_seen":"2026-04-13T04:52:06.58862Z","times_seen":319,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/img/header/lang/indian.png","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:36.863761811Z","timestamp":1738706376863,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/header/lang/indian.png HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/?form_email={form_email}\u0026form_phone={form_phone}\u0026lrrpath=casino/provider/smartsoft/jetx\u0026p_id={p_id}\u0026pc=30\u0026s1=\u0026s2=\u0026s3=\u0026s4=\u0026s5=\u0026source=https:/bing.com/\u0026st=jdaoja1h\u0026starttime=1736959991181075991\u0026trid=cu3uftoa3eu4rcfs9570\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=HWf2YUkfwZX9IP9I3_zcGvLnPvB7QVJjrHOpW6.sPUk-1738706376-1.0.1.1-6Ij7g_6CVT.3nNjGyAj8epDmeoHJ7s4e52HI5FSHPnl.twWhOCjY8uuhiEF1gUOJkmqGwHpbJI7RiWua0_s3Ew\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1063\r\ncf-ray: 90cdedc71ab60b51-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d8a19eb68791c63572c9bfc16ea175fe\"\r\nset-cookie: __cf_bm=NxmStUFPlbd5XmsykNAuwS3vnTCBTSHaa220OLaOA7E-1738706376-1.0.1.1-TvsaT.HzQUT8G87.U2enL3LVkmHBhRhYeQqYfoh3XwblHoRJ1ty0_l.bSxV151j8JUhqLDzOTGWJLkchbrFubg; path=/; expires=Tue, 04-Feb-25 22:29:36 GMT; domain=.pu217ev.com; HttpOnly; Secure\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=G%2BwJxw8HOthwAaHDenvyQBQFNxJqzuuuAwxnaSqTPhTVAJ%2BMAk1%2F2Bk5kHxC4t9aRzJc3dHKuH%2FYrG8RE40mt87EIwLdgWlU72Tp%2Bpg%2BNG%2F3sqIBv4LMiredxGKl9rKOJGQI0050OdD8KazaHDiUxffiTvXs\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=582\u0026min_rtt=377\u0026rtt_var=129\u0026sent=81\u0026recv=61\u0026lost=0\u0026retrans=0\u0026sent_bytes=46481\u0026recv_bytes=3282\u0026delivery_rate=26050974\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=570\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1063,"size_decoded":1063,"mime_type":"image/png","magic":"PNG image data, 135 x 90, 8-bit colormap, non-interlaced","md5":"88fd2fde757018cabf962439c14d28b5","sha1":"d5fe8d8fc80026a0e0b43da7f779f8cec662951d","sha256":"6a38232f525d6dd825bf22acb0cea17d5b640cefc781cc8132c752038110bfc7","sha512":"b1fc2e4bf4a4fe767e563ba5cc29c219be69509f796cf77aea31ec6b26994b95cfc3d8f9efbaab4ff7e1b443e40d02837416a322f07ceb27805aec92f3346816","ssdeep":"","tlshash":"f811b994fed4a82b9f79d353b5f4e0028975cd185d5245e5c22f92b433015c7285355c","first_seen":"2024-01-25T03:45:59Z","last_seen":"2026-05-14T14:38:05.469975Z","times_seen":1293,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/img/header/lang/bangladesh.png","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:36.864458961Z","timestamp":1738706376864,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/header/lang/bangladesh.png HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/?form_email={form_email}\u0026form_phone={form_phone}\u0026lrrpath=casino/provider/smartsoft/jetx\u0026p_id={p_id}\u0026pc=30\u0026s1=\u0026s2=\u0026s3=\u0026s4=\u0026s5=\u0026source=https:/bing.com/\u0026st=jdaoja1h\u0026starttime=1736959991181075991\u0026trid=cu3uftoa3eu4rcfs9570\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=HWf2YUkfwZX9IP9I3_zcGvLnPvB7QVJjrHOpW6.sPUk-1738706376-1.0.1.1-6Ij7g_6CVT.3nNjGyAj8epDmeoHJ7s4e52HI5FSHPnl.twWhOCjY8uuhiEF1gUOJkmqGwHpbJI7RiWua0_s3Ew\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 882\r\ncf-ray: 90cdedc71aba0b51-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"51819a3a5f2dc77bc6c76b8b5b5d342c\"\r\nset-cookie: __cf_bm=XkRHeLQkeCCOKkf4fC0SWy1PO8qcr030GCeV8K10by4-1738706376-1.0.1.1-lCyCGL.PZLLTtPfoEK_TfiODID334gLmcyReECJGHighh3tBcmgChm7eSre2ZB5M8LypjC8psNKK7vQ0M8DViQ; path=/; expires=Tue, 04-Feb-25 22:29:36 GMT; domain=.pu217ev.com; HttpOnly; Secure\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=p0cfQA%2F9EBoS19CP9XB0iIZW9R1GNkxLgENG8VF5WPJOUFZKsGwaxDvgHBzvHecrmyEbCP0Z7drRQDO1VnZDXMAYHR%2Fjkmntqy%2FMgQb5AVg5LtewBlMhgvDFcVYgfWssHVNlPy34VJrGXy%2FYf2OO%2BbkeeIcw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=582\u0026min_rtt=377\u0026rtt_var=129\u0026sent=84\u0026recv=61\u0026lost=0\u0026retrans=0\u0026sent_bytes=48297\u0026recv_bytes=3282\u0026delivery_rate=26050974\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=571\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":882,"size_decoded":882,"mime_type":"image/png","magic":"PNG image data, 135 x 90, 8-bit colormap, non-interlaced","md5":"a9830208c41fc34a525dab68f8605839","sha1":"70871992c9d4a0065792db45f2533e8261dcd0a9","sha256":"4d89a2f2ad53778cd1e008cc7f35b74ae20fe4e97eb5b1c365b9a9844dcfaaae","sha512":"26767e1d6a99a97640cb6b287a9c0cc17f74f43dcc37a19d291fda49c15e565bd4b1416a8b088faf3ad317bd0829708bafd163d86279d7aaece7aeacf95cc2a5","ssdeep":"","tlshash":"8811e6cf1ff2d72ee90104a7be401881d797a2a6062dcc280652e904a001fbf09e35b6","first_seen":"2023-09-24T08:25:29Z","last_seen":"2026-05-14T14:38:05.449251Z","times_seen":1186,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/img/header/lang/spanish.png","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:36.865015861Z","timestamp":1738706376865,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/header/lang/spanish.png HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/?form_email={form_email}\u0026form_phone={form_phone}\u0026lrrpath=casino/provider/smartsoft/jetx\u0026p_id={p_id}\u0026pc=30\u0026s1=\u0026s2=\u0026s3=\u0026s4=\u0026s5=\u0026source=https:/bing.com/\u0026st=jdaoja1h\u0026starttime=1736959991181075991\u0026trid=cu3uftoa3eu4rcfs9570\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=HWf2YUkfwZX9IP9I3_zcGvLnPvB7QVJjrHOpW6.sPUk-1738706376-1.0.1.1-6Ij7g_6CVT.3nNjGyAj8epDmeoHJ7s4e52HI5FSHPnl.twWhOCjY8uuhiEF1gUOJkmqGwHpbJI7RiWua0_s3Ew\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 470\r\ncf-ray: 90cdedc70ab00b51-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"4987766e47e831dee00e57e5dde3d370\"\r\nset-cookie: __cf_bm=1FaV9x7VKZaWvW1TFVmgYsVxVxJ..NwUbmkHpaLa.NU-1738706376-1.0.1.1-_gd5o__xViDZrKhu6KoTVkmRrK2JE9qhGE8cflt_sZJcZucTOE4DQcABRptM37tVKsoYOCsP9DutHw5d8gs.EA; path=/; expires=Tue, 04-Feb-25 22:29:36 GMT; domain=.pu217ev.com; HttpOnly; Secure\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=F8785Vv9za%2BOcjr1MN1A6RFJUfji5qYw%2BgjUvzN7roCM2Ksrlr0AiRJkjuo1pGhGJkClFNExbhfwsJZfDeHVElY8chvluKU%2FGS2diuVOCBs0NUDK%2Bcu5U%2F3U6GfcfeJJM%2BSRttBKhS3FBbB%2F8PDcPkyPUX7c\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1335\u0026min_rtt=377\u0026rtt_var=1602\u0026sent=87\u0026recv=62\u0026lost=0\u0026retrans=0\u0026sent_bytes=50070\u0026recv_bytes=3282\u0026delivery_rate=26050974\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=574\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":470,"size_decoded":470,"mime_type":"image/png","magic":"PNG image data, 32 x 24, 8-bit/color RGBA, non-interlaced","md5":"c1440d1e5720c85c7d20ee991a726629","sha1":"0fc52036c2268d69e70984613e5ca26414c8e6ab","sha256":"bf345de038ad3c869aca2edd7398254ae6f3a09657b0386089de0f3042e40df3","sha512":"3c371709e4dab3c437102da72383befe5c9b0c8151daf23a2e3d7220032a1298acc5906dca3b5f7320a59c0a47be6db2f6e956ed91f7fac65249f876a139d5c9","ssdeep":"","tlshash":"e9f023d328cd293f118c49a1422a7100650e9ccc21985564bfb0e5585cdfcb2c69a7a5","first_seen":"2024-03-02T00:46:09Z","last_seen":"2026-04-13T04:52:06.566274Z","times_seen":322,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/img/header/lang/kazakh-russian.png","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:36.865763212Z","timestamp":1738706376865,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/header/lang/kazakh-russian.png HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/?form_email={form_email}\u0026form_phone={form_phone}\u0026lrrpath=casino/provider/smartsoft/jetx\u0026p_id={p_id}\u0026pc=30\u0026s1=\u0026s2=\u0026s3=\u0026s4=\u0026s5=\u0026source=https:/bing.com/\u0026st=jdaoja1h\u0026starttime=1736959991181075991\u0026trid=cu3uftoa3eu4rcfs9570\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=HWf2YUkfwZX9IP9I3_zcGvLnPvB7QVJjrHOpW6.sPUk-1738706376-1.0.1.1-6Ij7g_6CVT.3nNjGyAj8epDmeoHJ7s4e52HI5FSHPnl.twWhOCjY8uuhiEF1gUOJkmqGwHpbJI7RiWua0_s3Ew\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 651\r\ncf-ray: 90cdedc71ab50b51-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"ace83b5e14c127cbcee67103e63a5c91\"\r\nset-cookie: __cf_bm=n8ER.y8.NgziuyuGOEygeIJmctC9akyA_SAlDliN_P4-1738706376-1.0.1.1-ElipeAEBv94_mZqk4.b26sK9c8a6DPDM9npHh.JbCEZ9pPwSOm7FfgZmPikvuoTCy94YPIGiA98EH6.k7CK0bA; path=/; expires=Tue, 04-Feb-25 22:29:36 GMT; domain=.pu217ev.com; HttpOnly; Secure\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Jo3uEQb44fjKieWC1FEdNJP%2BLFzKmjNliIBK9LwsFBTIcphG0l6dfw%2FHf1EJQKPpr%2Fj7DNR31dNBBFSKP5K1HQ%2BtBH9yZ42IJI7ALHwlxRZO6tw41yfLxhq6Rv4inFCv8QTnmFyiEAVdc8nypcZVh22D%2FSec\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1335\u0026min_rtt=377\u0026rtt_var=1602\u0026sent=90\u0026recv=62\u0026lost=0\u0026retrans=0\u0026sent_bytes=51303\u0026recv_bytes=3282\u0026delivery_rate=26050974\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=574\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":651,"size_decoded":651,"mime_type":"image/png","magic":"PNG image data, 32 x 24, 8-bit colormap, non-interlaced","md5":"1648c980a380ac4be58791d45c82d5a9","sha1":"f2c7aa8df57e3b53a0cbaa32031da6b38fc04479","sha256":"307bcd15270bd7523fee2c844cfb1de6cbedc01bbe63c4067f9573fbd9744cda","sha512":"c5be92dc24db9d3c787d700c096d90dfe5372bfd9ce643345af06a13f8e40b7baca3e8913ad8eea79d5d34faab6091f1e690220d6af5d58bb4e6818fcd7e797f","ssdeep":"","tlshash":"a5f023c353842cefb10ea2ed4257d808eca6034a4031796f60b5c426bbb51cc4a961d3","first_seen":"2024-03-02T00:46:09Z","last_seen":"2026-03-25T04:31:04.902623Z","times_seen":471,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/img/header/lang/uzbek.png","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:36.867923053Z","timestamp":1738706376867,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/header/lang/uzbek.png HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/?form_email={form_email}\u0026form_phone={form_phone}\u0026lrrpath=casino/provider/smartsoft/jetx\u0026p_id={p_id}\u0026pc=30\u0026s1=\u0026s2=\u0026s3=\u0026s4=\u0026s5=\u0026source=https:/bing.com/\u0026st=jdaoja1h\u0026starttime=1736959991181075991\u0026trid=cu3uftoa3eu4rcfs9570\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=HWf2YUkfwZX9IP9I3_zcGvLnPvB7QVJjrHOpW6.sPUk-1738706376-1.0.1.1-6Ij7g_6CVT.3nNjGyAj8epDmeoHJ7s4e52HI5FSHPnl.twWhOCjY8uuhiEF1gUOJkmqGwHpbJI7RiWua0_s3Ew\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1530\r\ncf-ray: 90cdedc71ab80b51-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"758f303bb86e51f12522bef78ce1d8fd\"\r\nset-cookie: __cf_bm=42b992X8bD5.VLCcgepgFy7xkdNuFeJO6Le6wd63Og8-1738706376-1.0.1.1-zPPbsSUq.lupmOuFPvwe4nyXqFQMV0WET02K25D7wRL_E.0t969CQbfn8nTW_icLBGRYPGoZbU.RMPcf_Mu9yQ; path=/; expires=Tue, 04-Feb-25 22:29:36 GMT; domain=.pu217ev.com; HttpOnly; Secure\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QopuagjivcF3ZCHKoB%2BDr8aUY9vpGWEruMEzVMssPPZOn5%2FOOUQSmOqRQ4O%2BnBcyefOZrF2NcfxiQCXjYYI%2BumBFHYCj42tIGyeu26ipfFoYrNRR57b9gZ4mPDDlBMdtDVr6SP3w%2FuZ4WMEvJuls7F99BxQe\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1305\u0026min_rtt=377\u0026rtt_var=1261\u0026sent=124\u0026recv=63\u0026lost=0\u0026retrans=0\u0026sent_bytes=94283\u0026recv_bytes=3282\u0026delivery_rate=26050974\u0026cwnd=257\u0026unsent_bytes=31856\u0026cid=808343038b7bd109\u0026ts=580\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1530,"size_decoded":1530,"mime_type":"image/png","magic":"PNG image data, 135 x 90, 8-bit colormap, non-interlaced","md5":"7f42d40dd75dd5c164ea428ec5de6f35","sha1":"2ffcb8dfa793ea0e808dbd88bcd0461f25fb976e","sha256":"42c96e6cc271262f86a2f2c172d248a69e8a121c82f2465529a506d2e8fe352e","sha512":"2d3b78d79213195cf12292d5b170aca444a40b026059cd4ec544d83ad5dcf674e602aac0b2a518000184a366a9f6ec3857b4e8b21ea7dff8fbba96e6d7db71e9","ssdeep":"","tlshash":"b431dae76d27a0253c415e4fa22588e0dd6d5aa62c49b7531f858e046a839e63fd320f","first_seen":"2023-09-16T07:21:55Z","last_seen":"2026-05-14T14:38:05.454976Z","times_seen":2617,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/img/main/bonus-ca.png","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:36.920429299Z","timestamp":1738706376920,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/main/bonus-ca.png HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/?form_email={form_email}\u0026form_phone={form_phone}\u0026lrrpath=casino/provider/smartsoft/jetx\u0026p_id={p_id}\u0026pc=30\u0026s1=\u0026s2=\u0026s3=\u0026s4=\u0026s5=\u0026source=https:/bing.com/\u0026st=jdaoja1h\u0026starttime=1736959991181075991\u0026trid=cu3uftoa3eu4rcfs9570\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=HWf2YUkfwZX9IP9I3_zcGvLnPvB7QVJjrHOpW6.sPUk-1738706376-1.0.1.1-6Ij7g_6CVT.3nNjGyAj8epDmeoHJ7s4e52HI5FSHPnl.twWhOCjY8uuhiEF1gUOJkmqGwHpbJI7RiWua0_s3Ew\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 234951\r\ncf-ray: 90cdedc71abb0b51-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"8ee019e4086a1f19067928518469b9aa\"\r\nset-cookie: __cf_bm=3HlWz2btPJg_APJ2A5JDGbJXFRLlg3drfqKu_wrX.ZI-1738706376-1.0.1.1-AUIgrPWuy0v3qH5ikOQHRMvwbZdjaLwpHaM0nmr1zZZWF.kDKaDde4jyIcvGdsjcFnihycX.tf1fCz8uJf0.7w; path=/; expires=Tue, 04-Feb-25 22:29:36 GMT; domain=.pu217ev.com; HttpOnly; Secure\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=PwyjWJlAVlvIlTWhFnYGWkCvsKQYvS89CbEfk1n6Ncl3huIUoH2Oahg0W%2FNuoczkPywIeeMcZcMpKuuuVYcEnAy%2BIsnlc8n30%2BwQhQhDAKnEWOttsI8%2Fgy2%2F7bbwymhlgs%2BrIX4v1DfAzXh83UfzInLQo6w9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1305\u0026min_rtt=377\u0026rtt_var=1261\u0026sent=93\u0026recv=63\u0026lost=0\u0026retrans=0\u0026sent_bytes=52683\u0026recv_bytes=3282\u0026delivery_rate=26050974\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=579\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":234951,"size_decoded":234951,"mime_type":"image/png","magic":"PNG image data, 546 x 296, 8-bit/color RGBA, non-interlaced","md5":"f1549d88c94c1ce596da4c54975e4956","sha1":"cdb3425a6d48a5c516193a73eee6c4a4f9aebd60","sha256":"8e032b8d5941d7812fa5917f389c8df94c2ed6573182cd313b5ac9fcf8755b5e","sha512":"a63e308a4a3fb69b386bca644dbb6c9b23ab876601e94526c4035843f182720a05ad6e3acc45e6770e605a8719903fd254e73a1325defe19a1655011d7ceee85","ssdeep":"6144:Ykx+TB9eJ4THVdys1EQTJw19yATTuKHJI+9lXc4H:Ykxg8JSVdy8TJ89yATTXXHs4H","tlshash":"d03423d874a121e548578f3eb4a314c73238bc977d2412bf05a7aee19d89d094cee6cb","first_seen":"2025-02-04T20:14:54.930126Z","last_seen":"2025-02-05T10:22:37.029362Z","times_seen":9,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/img/background.jpg","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:37.157581394Z","timestamp":1738706377157,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/background.jpg HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/main.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=cXaN7Q9b1ioyvyWpySG.amKzBLXnJzFE3rqDXyONrCM-1738706376-1.0.1.1-7l0LxIk0indKRWUQUhDW37moCtQ2Y146vsxNnEj3nHP7mE5VlNIg1PiWVRR4O23VbxdeX0BrWfAmmPzx5pLdow\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 156401\r\ncf-ray: 90cdedc8bc020b51-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"43bdd11fb3b871b0958e2cc9eac1b3ad\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XrK0NSOBsVYa3%2FM5HSjVnRcfx2mC0Lwip5ZNa8VlBdX9Tsy%2B%2BN5B%2BwNMScSzHk%2BpRFUEElSqyxaAP2IHgbI9GfZBOVlUk1W3sShatoYljQIkcAhqSlBcW708vdyXhLfdJbWDOhKl%2BLHYUtEfKvQABfHupDjf\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=1jHROslgJdsOGMFlnWuO9gt.l4PNGmiek8oTP_FY5Bc-1738706377-1.0.1.1-tQl7NrZdINUviFuoIksFWv1PHB8dRZ88azzZ_VurSsv7PtANDYXqkGKBXliEKh8cRx4_Cu3r0OBF_hudJGtcXw; path=/; expires=Tue, 04-Feb-25 22:29:37 GMT; domain=.pu217ev.com; HttpOnly; Secure\n__cf_bm=eXb6AqEYFADDtIjY_oGJb9Vq5sh7eyl6l9csAiSTHxQ-1738706377-1.0.1.1-CvYEoZgiFqqAy6AfbF7Lt3.v31IVgUagqvslqJkcEyg2.3vK_6WCL2RgM3il_sfaP3u7nrCSs3WlW.QoKcCRAA; path=/; expires=Tue, 04-Feb-25 22:29:37 GMT; domain=.pu217ev.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=816\u0026min_rtt=333\u0026rtt_var=621\u0026sent=307\u0026recv=258\u0026lost=0\u0026retrans=1\u0026sent_bytes=317240\u0026recv_bytes=3867\u0026delivery_rate=116166080\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=832\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":156401,"size_decoded":156401,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3","md5":"2e2e10437db90d960fa63aead67ad27c","sha1":"3430305f2f8fed1466c4c1d56ce8f63f51c89239","sha256":"4e534d2fa31aef082876b37d04aa5875f994fba050d3c0ac5c01e250d24b5aa7","sha512":"7b597622242df7f6afb4168a1d1ca14a091675ad6047671cdd22e35b66b6b5bb2230e3407a4e9f0947a1bef323a81e8b98ef4452f7782bbfed2b62213f0237a9","ssdeep":"3072:eqf6GrSjydOoKnC5eNYIEJxqjWNWL+EkVUFcdEZGQWBNQv:x6/JRn5LL+fElZGQ1v","tlshash":"fee312d84bf3b406ebd99139e60f6a90a082d8db9fc247e1d92938bc5d4d35941ef704","first_seen":"2025-02-04T20:14:54.932114Z","last_seen":"2025-02-05T10:22:37.032949Z","times_seen":9,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/fonts/src/fonts/Pinup-Black/Pinup-Black.woff","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:37.176857309Z","timestamp":1738706377176,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /fonts/src/fonts/Pinup-Black/Pinup-Black.woff HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://jetx-v2-geo.pu217ev.com/main.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=cXaN7Q9b1ioyvyWpySG.amKzBLXnJzFE3rqDXyONrCM-1738706376-1.0.1.1-7l0LxIk0indKRWUQUhDW37moCtQ2Y146vsxNnEj3nHP7mE5VlNIg1PiWVRR4O23VbxdeX0BrWfAmmPzx5pLdow\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:37 GMT\r\ncontent-type: font/woff\r\ncontent-length: 102380\r\ncf-ray: 90cdedc8cc090b51-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"00d8e27795e4988e66708f5baf315d1f\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=KgREF712PERskHCA8MNc82QzzWi1UFfDzEZXt5%2B%2B%2BO791ouuEZb0gqLyNwGpUeFCHgYnWjpNPxMxeX6I1S1x7XGkedjNxBc5PKEDDPCJ0kY0kDaDmNCACBgcmcWu0L9pGiegOBL3myserbbV4cmxpGM3yKC8\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=2FxhmMBCMhi.ZYG6PGIj9889D3g2C1rIm284rA5rFxg-1738706377-1.0.1.1-qtUO1AYzEmKmmLuO9SmQJqr2Wz0X8j_lo2mS2G.P4cNZ1_f.lMPYFkPTTBvVwjLQy73CpL_cWtypsKRxuKRgfg; path=/; expires=Tue, 04-Feb-25 22:29:37 GMT; domain=.pu217ev.com; HttpOnly; Secure\n__cf_bm=L0_bj0q6sE_F49BFrxeXYS6f4_29jInEiLmkzcBvc9U-1738706377-1.0.1.1-YNcToTkM_kmLNl7sHv4uqz5r5GAGpKy_VfAZw2lVeBhQZt9uryzqp6SJZFqPS2WXguJeeKIw26KFeCdQakTMhg; path=/; expires=Tue, 04-Feb-25 22:29:37 GMT; domain=.pu217ev.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1490\u0026min_rtt=333\u0026rtt_var=106\u0026sent=426\u0026recv=309\u0026lost=0\u0026retrans=1\u0026sent_bytes=475229\u0026recv_bytes=3867\u0026delivery_rate=116166080\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=834\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102380,"size_decoded":102380,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 102380, version 0.0","md5":"a9fbc3df134338d218ed9f555c9ecee8","sha1":"37982d974361917f1ddd6555fef3acae3e6911ce","sha256":"d0071e5cf68a74c19bd55355486916183bff7afa7f1d16aea03e04736aa621e3","sha512":"7c6ed101986b735a5ea8fb2cde3fa60368fb25983120a71ffb22aba8c94a8d244d2f49110498080295a5cff1a7c20311b33adffc77a07c927ef3083365043d7d","ssdeep":"3072:WIpD/BWEA9uv1ew5TkQNrTa/XR0h4ATbG:WIZUEAsvN5oyTo64AW","tlshash":"dda312c28361cd81e64c843490e46e9a3c3bd74da9f32512345fd398d09cfe94e65b7a","first_seen":"2023-05-31T20:30:20Z","last_seen":"2026-05-14T14:38:05.448661Z","times_seen":1099,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"fs.pudaf.com/fp.js","fqdn":"fs.pudaf.com","domain":"pudaf.com","tld":"com"},"ip":{"addr":"52.29.169.153","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:37.225217417Z","timestamp":1738706377225,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /fp.js HTTP/1.1\r\nHost: fs.pudaf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:37 GMT\r\ncontent-type: application/javascript\r\nserver: nginx/1.27.3\r\nlast-modified: Fri, 17 Jan 2025 10:17:40 GMT\r\netag: W/\"678a2e44-3d4cd\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77858,"size_decoded":77858,"mime_type":"application/x-gzip","magic":"gzip compressed data, max compression, from Unix","md5":"54bd3721c25583c4c9d9497b7d773694","sha1":"e9719821bed69ae38a191baec6661ae7a751ff78","sha256":"a6386d08acbbb1c414e0b2e8715e378274612e50265bc986e14fe9ca700e4a7d","sha512":"00b49359b4cb8d53704e6a9fc610c034519d0bdf6105947c67dd06ccf08d5de4400a3a12d3303734272a891566083665322caea72fd720ac0781f40675c78635","ssdeep":"1536:JuBD+PqdqxebjmcORLkeKu12Xt9ah+B3M23MgAmaTe:JMaSdBbjKRLkeKs2Xt9ahgMXv7Te","tlshash":"a873120f865dc2266adfe23e9228e26ddd5c3118e774435fa162d7c585060d74cf072e","first_seen":"2025-02-04T22:00:08.661491Z","last_seen":"2025-02-04T22:00:08.661491Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.googletagmanager.com/gtm.js?id=GTM-MFB4T883","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:37.414617582Z","timestamp":1738706377414,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /gtm.js?id=GTM-MFB4T883 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 04 Feb 2025 21:59:37 GMT\r\nexpires: Tue, 04 Feb 2025 21:59:37 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 04 Feb 2025 21:39:40 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1080:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1080:0\r\nreport-to: {\"group\":\"ascgcycc:1080:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1080:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 87340\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87340,"size_decoded":252582,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8649)","md5":"8c5055bacedc5d173c4d5b961bb975f5","sha1":"ff03ef586644c234cb53225490e30fc738cfb916","sha256":"b1f1132988b683a971ff81a1e870ad551dcbb3e4ecde8187b717a6e182a57130","sha512":"b2697d702f99e0e927b54e5fc5f885d4054ef71d5647cb47163ed0dd1a549c86e74ea83c78c9174ebc6d935d4e70d7e42906b306e32b2be001123dbf680e547b","ssdeep":"3072:xByWA515IOyaXTf0dp06WFvLJrdhzMApM8ni5x/4YET6/:xv9OBDf0A8N8ni5x/4C","tlshash":"6c34e6cdb7c6b86683a36474503f010bb13a6dd2b80cd894f186d8d82e74aa95277f7d","first_seen":"2025-02-04T22:00:08.662551Z","last_seen":"2025-02-04T22:00:08.662551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/img/favicon/favicon-16x16.png","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:37.496605353Z","timestamp":1738706377496,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/favicon/favicon-16x16.png HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/?form_email={form_email}\u0026form_phone={form_phone}\u0026lrrpath=casino/provider/smartsoft/jetx\u0026p_id={p_id}\u0026pc=30\u0026s1=\u0026s2=\u0026s3=\u0026s4=\u0026s5=\u0026source=https:/bing.com/\u0026st=jdaoja1h\u0026starttime=1736959991181075991\u0026trid=cu3uftoa3eu4rcfs9570\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=ME2hnR5Hvo_sxCohh9_UKbozFAQhfJ6ATh4wxbokEuo-1738706377-1.0.1.1-4ncUJ4jguzCrC_ctAQVGIykhZkoZAquvIcN0MD_DEEqgzoGvHX6HfVzY9gHQMZ9uVfknQ5MyeHADUPrG7NQzBg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 916\r\ncf-ray: 90cdedcafd8a0b51-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"12076a2bedce8ffa6db555768dad7b48\"\r\nset-cookie: __cf_bm=wChnHR6LNCOMH6YgC53V3f1s0.KadSXa4Jt.A3kQsrE-1738706377-1.0.1.1-5Z7v7dcAWZyEqpXgFLxN0hBpwTyqEXW8jOHvbbVl5qtMiWYSAiYq1uJvYhLdLSVZdtue_4Cb3_g6ozKcT.d2Xw; path=/; expires=Tue, 04-Feb-25 22:29:37 GMT; domain=.pu217ev.com; HttpOnly; Secure\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JRkfkJfMYsDJFxvDan3NPaAK%2BgG9hGmSbC%2FsUyPVtG8CTxzIURwPZm00C6BM8PplZ5QG8GQkZ7QYcGbsCMjJdPrvr91PqJjXErX1Dep8SMTMEZ%2BKsV4uS2SHJTjKK5tqmze9DjGH1Sgb0jOSV%2FRKyS45x9YX\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7244\u0026min_rtt=333\u0026rtt_var=12058\u0026sent=597\u0026recv=323\u0026lost=0\u0026retrans=2\u0026sent_bytes=671502\u0026recv_bytes=4258\u0026delivery_rate=116166080\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=1199\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":916,"size_decoded":916,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"4002504e6a7b16eae1a825909650ec25","sha1":"857543e6566871461da4c299a186471611925829","sha256":"0a1fdd6dc7a85ac17b99a484b1fe4f0a926b9e1b1c80c4929f3b312e73e781d1","sha512":"1f7baf472ac60eaea5130e066cfc64d971af961d805ec59ae2ccffe0222647a279ba5b61d55d023427e5404ed263e4acbb142f73c50e2b423745979ff25993c2","ssdeep":"","tlshash":"a81140f3b872da92f48e06334257e798f17401ce24470c4f562cf890b82c7a95626881","first_seen":"2023-05-01T20:20:53Z","last_seen":"2026-05-14T14:38:05.440389Z","times_seen":4368,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/img/favicon/apple-touch-icon.png","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:37.509687117Z","timestamp":1738706377509,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/?form_email={form_email}\u0026form_phone={form_phone}\u0026lrrpath=casino/provider/smartsoft/jetx\u0026p_id={p_id}\u0026pc=30\u0026s1=\u0026s2=\u0026s3=\u0026s4=\u0026s5=\u0026source=https:/bing.com/\u0026st=jdaoja1h\u0026starttime=1736959991181075991\u0026trid=cu3uftoa3eu4rcfs9570\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=ME2hnR5Hvo_sxCohh9_UKbozFAQhfJ6ATh4wxbokEuo-1738706377-1.0.1.1-4ncUJ4jguzCrC_ctAQVGIykhZkoZAquvIcN0MD_DEEqgzoGvHX6HfVzY9gHQMZ9uVfknQ5MyeHADUPrG7NQzBg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 8328\r\ncf-ray: 90cdedcafd890b51-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"6753e701c89e2f0d6245ac1498dae6f7\"\r\nset-cookie: __cf_bm=aeQhXXUgvIQoH5Sj.GPn.ILLDlJ7lL1KpiVo4b6t3q0-1738706377-1.0.1.1-LHRtKl3hn3st_x5oyxyTHsNSPn4B.l6LQ9.gOH7HIaVrBU9sXpIx4BpKACsd5hPeRLzbRL9QzhBCV25ZCyxfPw; path=/; expires=Tue, 04-Feb-25 22:29:37 GMT; domain=.pu217ev.com; HttpOnly; Secure\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=eQkrrf%2BTplAo3h2jNwmuDF3F0f4%2FOpKS1%2FCSQNvB59d5EuistOU601Bs1dIgYTt5YPMZRkUkM3heXK6zQV%2Fb4HjW4Rmi4tWA5SHqcU2zVAda0IzQG0%2FNhckfS%2F7yyn3LX4mWjHutEQLjia%2BWVPUrXbetE8xT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5023\u0026min_rtt=333\u0026rtt_var=8426\u0026sent=600\u0026recv=326\u0026lost=0\u0026retrans=2\u0026sent_bytes=673173\u0026recv_bytes=4258\u0026delivery_rate=116166080\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=1200\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8328,"size_decoded":8328,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"3d9d4246e24dadbf068e62602252a659","sha1":"47a90a20e08cbd42ca6f5f84c48d71091a14f05a","sha256":"8034cbfa45ae85777a394137bfc8b0a1a8ba60e68c187dff4c0cb0035d5c0cb0","sha512":"83c810c79a44604e4daf176ccbce38e0d05e2e77c25dd745d555e0fea23a190eced2f31a71a4799bad1c0ec384966cfa191d0c65813fe63ab29d5bc57df3e30a","ssdeep":"192:tF1ZUTt/NnwHOV2wfez3vgCcRP/SABr3nWn5ugdCg0NpGj6FJt4:zUTRkvwfek1RXtBMogMg1Mt4","tlshash":"b302c0f05272e1fb818303244735425e2aac602d353735097e3e85beb8e477f64654e7","first_seen":"2023-05-02T00:22:12Z","last_seen":"2026-05-14T14:38:05.43753Z","times_seen":4361,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.gstatic.com/recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:37.802065611Z","timestamp":1738706377802,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/\r\nOrigin: https://jetx-v2-geo.pu217ev.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha\"\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 219318\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 04 Feb 2025 06:56:13 GMT\r\nexpires: Wed, 04 Feb 2026 06:56:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 26 Jan 2025 23:01:57 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 54204\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":219318,"size_decoded":556015,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (620)","md5":"29a58adc5d7834866fd236b05f781dfd","sha1":"1921cd2cc3df5830baf47570c902e00f188cadf6","sha256":"01e8f94227bcdc2b0894ea9e2655b35b7cdb82a04e4d0618296e8bc8e29aa687","sha512":"264a3297ec9ba66d99bd3e2a2729c92d81aeae00f8824655aefc2fbd9a0f591b30155d5a5be384efdbcc43e014830426f106f5592d10cff4341f8a2690c959b1","ssdeep":"6144:6fEADm+BmyQcOx1ddlvRpWLdJA/4rrxMC+yiO7rYqlwLrmKtSxhxIDAUKYh8Bjo7:6BBtOzAnAedR7dlwLrmKtqu8BoRhkO9","tlshash":"b8c408dcb151b8a2d332b5f2647b2098a67e5524c44d092e719dc8f02ff4c4e617aebb","first_seen":"2025-01-29T13:36:32.729361Z","last_seen":"2025-02-20T13:29:24.558289Z","times_seen":2217,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/bundle.js","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:37.840957265Z","timestamp":1738706377840,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /bundle.js HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/?form_email={form_email}\u0026form_phone={form_phone}\u0026lrrpath=casino/provider/smartsoft/jetx\u0026p_id={p_id}\u0026pc=30\u0026s1=\u0026s2=\u0026s3=\u0026s4=\u0026s5=\u0026source=https:/bing.com/\u0026st=jdaoja1h\u0026starttime=1736959991181075991\u0026trid=cu3uftoa3eu4rcfs9570\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=HWf2YUkfwZX9IP9I3_zcGvLnPvB7QVJjrHOpW6.sPUk-1738706376-1.0.1.1-6Ij7g_6CVT.3nNjGyAj8epDmeoHJ7s4e52HI5FSHPnl.twWhOCjY8uuhiEF1gUOJkmqGwHpbJI7RiWua0_s3Ew\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:36 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 90cdedc72ac00b51-OSL\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"4202a8b0486d80c7e762306ab66e4619\"\r\nset-cookie: __cf_bm=cXaN7Q9b1ioyvyWpySG.amKzBLXnJzFE3rqDXyONrCM-1738706376-1.0.1.1-7l0LxIk0indKRWUQUhDW37moCtQ2Y146vsxNnEj3nHP7mE5VlNIg1PiWVRR4O23VbxdeX0BrWfAmmPzx5pLdow; path=/; expires=Tue, 04-Feb-25 22:29:36 GMT; domain=.pu217ev.com; HttpOnly; Secure\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0PsScgFfV0ykRsQ1FtbW5IU3lei8RdVP6FvawrVZwaRQluvlgAcwvYCSWOR9cTHoOmQ7FKqaxgqWMCO0ZhcKBWy7UZ1JhXA9vU%2F%2F7o0wRJsHbd4DVngpy83WXOeSfgR%2Fpgo3czuy7hQDE29ddMYifwXOqDTY\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1367\u0026min_rtt=377\u0026rtt_var=60\u0026sent=264\u0026recv=223\u0026lost=0\u0026retrans=0\u0026sent_bytes=291505\u0026recv_bytes=3282\u0026delivery_rate=116166080\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=585\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23316,"size_decoded":110185,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58575), with no line terminators","md5":"16ac20a06643e42ffbe3e5165fb3f074","sha1":"52395310f31d05924738314bc9ce303dacdfee5c","sha256":"d86c71c599bca85be6dbf9273afa836c93fb1946d813466eba7b57dde6da6603","sha512":"8e28ed72268b6021836d71f41a544b0c42f3db24408e6238e903aadad65bbe9db2e371fb429b1be84630f207dfb2e5633fabbe0063f4664714e4511909cc7f84","ssdeep":"1536:tGGtv3w/3wx3woDwwZQZkAj/UgvhkQvdrIuPfKy2A3wZYY3wQ8hUobvWvwR:sGtv3Y3w3dD7mCYnqyN3I38bWvwR","tlshash":"0fb3292c9a25a57f4c76f1de75cb1b3660300d65a891d9094eb88acd18e8cb25333fe9","first_seen":"2025-02-04T20:14:55.122502Z","last_seen":"2025-02-05T10:22:37.203697Z","times_seen":9,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/main.css","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:37.874346101Z","timestamp":1738706377874,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /main.css HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/?form_email={form_email}\u0026form_phone={form_phone}\u0026lrrpath=casino/provider/smartsoft/jetx\u0026p_id={p_id}\u0026pc=30\u0026s1=\u0026s2=\u0026s3=\u0026s4=\u0026s5=\u0026source=https:/bing.com/\u0026st=jdaoja1h\u0026starttime=1736959991181075991\u0026trid=cu3uftoa3eu4rcfs9570\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=HWf2YUkfwZX9IP9I3_zcGvLnPvB7QVJjrHOpW6.sPUk-1738706376-1.0.1.1-6Ij7g_6CVT.3nNjGyAj8epDmeoHJ7s4e52HI5FSHPnl.twWhOCjY8uuhiEF1gUOJkmqGwHpbJI7RiWua0_s3Ew\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 90cdedc70aa20b51-OSL\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"0018099357f4c3c2e57ef0321383cd2f\"\r\nset-cookie: __cf_bm=VmSmeqr2qGWlbSkRJt3OUHEjBY84UxgoadLxRyDKNkg-1738706376-1.0.1.1-y4q8LejQ1OhXC3tFdb_VitGz_MZYaTtoCnkyj0.jUDXJwVfdAfsr.EweXhOyiya3W.9pFfELqy_5Cy1qEQodBQ; path=/; expires=Tue, 04-Feb-25 22:29:36 GMT; domain=.pu217ev.com; HttpOnly; Secure\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ESbzU00gUYDod01hTJULLatb3NvitXJgR3QA%2F7VHVgphI%2FebiUoH2V0L3Z7Vb38TzQ9eNnFpTpv7xjtyha8m8sTn7%2By7%2FSWgcUg2CLNICVIGdrTNyL292eAZYeVN6PIVQyg6WKMNfiiSNBV%2Bc4V6RFoC7eVy\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=767\u0026min_rtt=407\u0026rtt_var=575\u0026sent=42\u0026recv=51\u0026lost=0\u0026retrans=0\u0026sent_bytes=20661\u0026recv_bytes=3282\u0026delivery_rate=26050974\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=564\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7214,"size_decoded":34398,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (34398), with no line terminators","md5":"fa85b89781ca422ed430b9818a4f023b","sha1":"4de7da515310eff3721ffc3ec31c3542ced15db1","sha256":"911b48c351657b9d18f7e99660e874e2c8e82e0d586ae9a87c47fb49a290668d","sha512":"f681ad2dcbe9ef41718cc066a4b5c84acbd34f71e02271c40f3f544b7b3082a6fcd6f80c9102e1b84d9c4fdae7ff893d59d5b4bbac651185982b8d877cce59d4","ssdeep":"384:QePBL7uIBo/f1C1dKq0ZArKzGNVqRGNUfWexeejk4x8WqpqL1CPXv659Kh81l/bf:QM1rhhl5J+Wltj6CsZkW","tlshash":"48f2c5338fc0129cb167dd07b9d58a183634d426fa066de6e544a13cdbd3a86137af8a","first_seen":"2025-02-04T20:14:54.933155Z","last_seen":"2025-02-05T10:22:37.147292Z","times_seen":7,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"jetx-v2-geo.pu217ev.com/img/arrow.svg","fqdn":"jetx-v2-geo.pu217ev.com","domain":"pu217ev.com","tld":"com"},"ip":{"addr":"104.26.4.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:37.879194466Z","timestamp":1738706377879,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /img/arrow.svg HTTP/1.1\r\nHost: jetx-v2-geo.pu217ev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/main.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=cXaN7Q9b1ioyvyWpySG.amKzBLXnJzFE3rqDXyONrCM-1738706376-1.0.1.1-7l0LxIk0indKRWUQUhDW37moCtQ2Y146vsxNnEj3nHP7mE5VlNIg1PiWVRR4O23VbxdeX0BrWfAmmPzx5pLdow\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:37 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: 90cdedc8bc040b51-OSL\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"a4376becbae0634b540bf81c09c46d4f\"\r\nvary: Accept-Encoding\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OFeHjh6p4RaOoCeThDmanQRqg5Yow4T9QQJ3BmEZ7omZWgubUFJpzBTKR82jGbk21C03p5F10YyQAWY48q3FXMS66F7TOKAH6VBuC2iH2i3jj7wGze1vByOvQCMeZE44ei812rc0M0PyGFtRrJPssANOFxj7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=LTR8XuvmanhMm1ncbZPAveYpPLexA.bW9BFXFHwwQJ0-1738706377-1.0.1.1-isG.L4RgodL8nsGY.DuegMaLbajM_QvfpLE7Rh0bmwUyyyhAqg4b2wu_e3TneFV0HvPCljnRq0FG_Esbwk9tJA; path=/; expires=Tue, 04-Feb-25 22:29:37 GMT; domain=.pu217ev.com; HttpOnly; Secure\n__cf_bm=YXuJq7QqELXajxgQwgAAS1kOx0ZOdbGSM4aWVSzfGLg-1738706377-1.0.1.1-8Gbe53jLdNQNKvTT6fGw5u_XqQ3duuHeg8qds1U_i9nGuaVZxa244jJoVGI14UNlBOWqYAGlVGKjoWk0awcmvw; path=/; expires=Tue, 04-Feb-25 22:29:37 GMT; domain=.pu217ev.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=996\u0026min_rtt=333\u0026rtt_var=1210\u0026sent=303\u0026recv=254\u0026lost=0\u0026retrans=1\u0026sent_bytes=316103\u0026recv_bytes=3867\u0026delivery_rate=116166080\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=808343038b7bd109\u0026ts=829\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4306,"size_decoded":189,"mime_type":"text/plain; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"8ba411c9f8fe2424e69eae4505ab50fe","sha1":"d115df5520a8fdad41f2e1b9a509adb915c39042","sha256":"0bcddb4c2d34f9466d41360759ebde4008b966c0571b9a62d99ecb976153b435","sha512":"6bfd3d9b6a75569c76fe2c7c566b95ac72dc819b781c3abaedec0ba3c1f1e150ae944410c9b6207e5573c9403404133c13b9972bfe21f618d8cdd5de90a5c9d6","ssdeep":"","tlshash":"1ec012b95314481cf6568a10e76c7225557750aa420d14ade8503175e01179f2c33bed","first_seen":"2025-02-04T20:14:54.934119Z","last_seen":"2025-02-05T10:08:55.858533Z","times_seen":6,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-04","alert":"Sinkholed","trigger":"pu217ev.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eu-staging.ssgportal.com/GameLauncher/Loader.aspx?GameCategory=JetX\u0026GameName=JetX\u0026Token=DEMO\u0026PortalName=DEMO\u0026ReturnUrl=google.com\u0026Lang=en","fqdn":"eu-staging.ssgportal.com","domain":"ssgportal.com","tld":"com"},"ip":{"addr":"172.67.43.115","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:37.935439382Z","timestamp":1738706377935,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /GameLauncher/Loader.aspx?GameCategory=JetX\u0026GameName=JetX\u0026Token=DEMO\u0026PortalName=DEMO\u0026ReturnUrl=google.com\u0026Lang=en HTTP/1.1\r\nHost: eu-staging.ssgportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:37 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: private\r\nset-cookie: ASP.NET_SessionId=gu0uxjovtkiqvpapc0yqe3m4; path=/; HttpOnly; SameSite=Lax\r\nx-aspnet-version: 4.0.30319\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 90cdedc7cbb50b02-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":61792,"size_decoded":95382,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (657), with CRLF line terminators","md5":"22526b9856200ca4c767b0e0c9e1ee9b","sha1":"00275a8610a952d284c8e028ea168f808e034463","sha256":"de85fa769aafff586796c9acf188df4e148fe9ac60871f7bd0f85e504faef823","sha512":"9fa2117459a4463e4f24f1ed328589af23e4e4085cdb23abeacd22e8345a4af23cf3e362fed73c775a9856c77174307575d57de16015f049d0edb0ea21ccb572","ssdeep":"1536:o0ijglV6u9A6cId9R6u9Lm3rFIWUHRR4LayTxb3tiQXwwClSbvhtdeKt7TDbNgt4:iLGuvht1","tlshash":"54939860e4d1443380f38ad29aa58fd9feb6e307d60a924432ec53a75ff6e54f813664","first_seen":"2025-02-04T22:00:08.668595Z","last_seen":"2025-02-04T22:00:08.668595Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-staging.ssgportal.com/GameLauncher/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tacomn3YZ4wcEK5nlnJwStf2AB6LnWAXCPLq_1R4Q-nQlScopJS2bFH9T7Px2snkQiQ1H99JLV5l8xYUNBquNvQUHWBmGPNUA1TQRLaObixyhELzJii52yfGwhaHxiJxpIHFc_FworJzODX9rm3a3qOli54Da7bf0FAN8siUiCXh0\u0026t=7a0cc936","fqdn":"eu-staging.ssgportal.com","domain":"ssgportal.com","tld":"com"},"ip":{"addr":"172.67.43.115","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:37.971128056Z","timestamp":1738706377971,"http_version":"","security_state":"secure","security_info":null,"request":{"raw":"GET /GameLauncher/ScriptResource.axd?d=JnUc-DEDOM5KzzVKtsL1tacomn3YZ4wcEK5nlnJwStf2AB6LnWAXCPLq_1R4Q-nQlScopJS2bFH9T7Px2snkQiQ1H99JLV5l8xYUNBquNvQUHWBmGPNUA1TQRLaObixyhELzJii52yfGwhaHxiJxpIHFc_FworJzODX9rm3a3qOli54Da7bf0FAN8siUiCXh0\u0026t=7a0cc936 HTTP/1.1\r\nHost: eu-staging.ssgportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eu-staging.ssgportal.com/GameLauncher/Loader.aspx?GameCategory=JetX\u0026GameName=JetX\u0026Token=DEMO\u0026PortalName=DEMO\u0026ReturnUrl=google.com\u0026Lang=en\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:37 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 15431\r\ncache-control: public\r\ncontent-encoding: gzip\r\nexpires: Wed, 04 Feb 2026 05:26:55 GMT\r\nlast-modified: Tue, 04 Feb 2025 05:26:55 GMT\r\nx-aspnet-version: 4.0.30319\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 90cdedcd98b30b02-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15431,"size_decoded":101390,"mime_type":"text/plain; charset=utf-8","magic":"Unicode text, UTF-8 (with BOM) text, with CRLF line terminators","md5":"555e92c1268f52e0e8f90380a1b944e6","sha1":"f3c2eec12016ba886d2e0bbc9561faab2c3ad7a7","sha256":"8480831fd6b3c9e103526a5b4d7bd2c80808114cceef9fe4852fdee1524de632","sha512":"23a05a453b3f5c150545aa7b9744424a355713110898858c1b3aa31a0c15bed3b20c374652b9a577c041b1f84e2ac9d29afc8b372c9d161852e862d9214fc901","ssdeep":"1536:qoL8C02ARffpHun3UCHMMll/UValWqOIOt:qflfJun3UCHMHCWdIOt","tlshash":"6fa3638a6b1a8175c47b233eefb3c146ea3551231202c0a77e5c6fc90f7496196adfa4","first_seen":"2024-08-14T11:24:33Z","last_seen":"2025-02-05T10:22:37.04432Z","times_seen":18,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.googletagmanager.com/gtag/js?id=UA-170481692-1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:38.106285802Z","timestamp":1738706378106,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /gtag/js?id=UA-170481692-1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eu-staging.ssgportal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 04 Feb 2025 21:59:37 GMT\r\nexpires: Tue, 04 Feb 2025 21:59:37 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 04 Feb 2025 21:39:40 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:838:0\r\nreport-to: {\"group\":\"ascgcycc:838:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 85037\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85037,"size_decoded":238651,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5268)","md5":"1c8dbe2ab7d0f91dd45fd098b1e780d7","sha1":"6bf102d4483674c02559dd481d7c9cd9302e3cd4","sha256":"2ea187bb11108f61ed1059344d8fafc2317e9cdd9b2885b70e88cdb9c1abda1e","sha512":"e4324ed83b569edee527ddfc54c701afdb05c258398d83b6824209a12a4234a03b915735940c7e0e9ebf2082aa795def0b3c7f2baeebb80170b81575c5aa09fb","ssdeep":"3072:qvA515IOyiXT403p0gfMvLJrdhzMSIVji8ni5x/GsSkLzIv6e:c9ODD40PzrE8ni5x/rpLEj","tlshash":"0e3407c8b3d6b42683a36474507f014bb13a6dd6f80cc894e186d9d83e74aaa5277f3d","first_seen":"2025-02-04T22:00:08.670475Z","last_seen":"2025-02-04T22:00:08.670475Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.googletagmanager.com/gtm.js?id=GTM-T9G48VJ5","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:38.187008005Z","timestamp":1738706378187,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /gtm.js?id=GTM-T9G48VJ5 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eu-staging.ssgportal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 04 Feb 2025 21:59:38 GMT\r\nexpires: Tue, 04 Feb 2025 21:59:38 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 04 Feb 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1080:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1080:0\r\nreport-to: {\"group\":\"ascgcycc:1080:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1080:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 78888\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":78888,"size_decoded":223019,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2227)","md5":"31ea075ff36ab2c68e407393e977a467","sha1":"dc5e24ac743b727d6a809f53c03759705fbb9f7f","sha256":"b77bab988f96b1ddf697efaed794da66416fd9d95ba4a705e8f08cd27738367f","sha512":"67fedf2ccd1917276848a88c7087f3c2d5991e0a153e25505cb1544dbce08c26a6a3d52083dd75bf175f40bf40a3fff2a92728efda22369ff44dcf7503181fdb","ssdeep":"3072:ifA515IOyiXTf0qp0GWEvLJrdhzMApM8ni5x/I6e6/:S9ODDf0JrN8ni5x/IG","tlshash":"8724f8c8b3d6b42683a36478507f010bb23a6dd6f80cd890f186d4d96e74aa95277f7c","first_seen":"2025-02-04T20:14:54.961073Z","last_seen":"2025-02-04T22:00:08.671383Z","times_seen":2,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"staging.ssg-content.com/cache/b2/GamblingLoader/Content/Scripts/menu.js","fqdn":"staging.ssg-content.com","domain":"ssg-content.com","tld":"com"},"ip":{"addr":"104.26.3.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:38.919051998Z","timestamp":1738706378919,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cache/b2/GamblingLoader/Content/Scripts/menu.js HTTP/1.1\r\nHost: staging.ssg-content.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eu-staging.ssgportal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 13 Jan 2025 12:21:21 GMT\r\netag: W/\"57b6da7b565db1:0\"\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\ncache-control: max-age=691200\r\ncf-cache-status: HIT\r\nage: 6511\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WYBLGsZ6SuHAam1O6C%2BdJrC01ZOKM7KNHNfJwv5HBKLi1qnBXoC13cdvpsNUeNqqR7gV1zSFnlzfRsM6PFeiVE9SLZbKfAo%2BiFRC1Gn6JXTvFLskkM8%2Bg8oERfbx201XIa%2B67VzSHkfb\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 90cdedceefa20b31-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=709\u0026min_rtt=428\u0026rtt_var=301\u0026sent=99\u0026recv=47\u0026lost=0\u0026retrans=0\u0026sent_bytes=85114\u0026recv_bytes=4467\u0026delivery_rate=52134727\u0026cwnd=257\u0026unsent_bytes=31856\u0026cid=be55ac6eafbbe39c\u0026ts=93\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":123670,"size_decoded":47201,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (513), with CRLF line terminators","md5":"7226aa2c9e19a25d307a557e4330a394","sha1":"2e3ec6f7379a6e73e63829b7b782039a60bc41df","sha256":"9a63bef38aa68b6595436b6a769b4f622f5724961ea0c4f67ff68a260da67847","sha512":"1028765b63f3c09883e68b54b62f31e40a47a8da94684720a0daa8af4394df8dd5dff09b5554975fe4fdd62b77f62f3a80cd666fcaab5191aa74a6f3ea15b70f","ssdeep":"768:V+AXSLA0Nu5WenSOFpc86B09uHKUfB/qaFMny03hboy0gmeT0k+xptcny0xPFjwR:V+AkuYHylT+VCcn+Ngq/Euo","tlshash":"d123840d6541213a4577b376af86b608ff36516b92020a94bc9c4d893ff09a1d3f1fae","first_seen":"2025-02-04T20:14:54.971264Z","last_seen":"2025-02-05T10:22:37.159856Z","times_seen":8,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"staging.ssg-content.com/cache/b2/GamblingLoader/Content/Images/universal-loader.gif","fqdn":"staging.ssg-content.com","domain":"ssg-content.com","tld":"com"},"ip":{"addr":"104.26.3.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:38.927290186Z","timestamp":1738706378927,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cache/b2/GamblingLoader/Content/Images/universal-loader.gif HTTP/1.1\r\nHost: staging.ssg-content.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://staging.ssg-content.com/cache/b2/GamblingLoader/Content/Styles/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:38 GMT\r\ncontent-type: image/gif\r\ncontent-length: 46937\r\nlast-modified: Mon, 13 Jan 2025 12:21:20 GMT\r\netag: \"90186ba7b565db1:0\"\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\ncache-control: max-age=691200\r\ncf-cache-status: HIT\r\nage: 6510\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ya%2BEkUNrLccE4Trjrw%2BYq2lql6y955xwkBcskNpBobsONCcMPrCdOMUc7pBawmh5G4P4WlXN5EiY9BxKCg41h%2Fe%2FKT3v4%2FWxP3%2FAeuIxO2UhB3v5eN1fAEdeOnNjb52%2FTrDVEK%2FQl48t\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 90cdedd3fc080b31-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=6976\u0026min_rtt=412\u0026rtt_var=12416\u0026sent=597\u0026recv=223\u0026lost=0\u0026retrans=1\u0026sent_bytes=755257\u0026recv_bytes=5720\u0026delivery_rate=147978052\u0026cwnd=266\u0026unsent_bytes=0\u0026cid=be55ac6eafbbe39c\u0026ts=897\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46937,"size_decoded":46937,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 169","md5":"db130b5a17150bbccc1b172d5b012ad2","sha1":"d00a7624e09f3d9dcb4c8017da742847c52cb024","sha256":"4d5662742ebb6a6c564a9c225040c034062c1fdc7d4e12e0b1f227350ad26c99","sha512":"27f8398be1dcb4aa2a26cc7c286e4d6dffb8863c702432b0e0ed242ca452f0a3b711e992c6833f9bd05471cb070a39d4f753e219b005fff557578f13ea991b6e","ssdeep":"768:dGTIGTxlpFZb89LPo4JrtPTM1Mg7F0h2r532Kyg+zV32b89LPo4JrtPTM1Mg7F0D:dPmpFZbELQ4Jr1I71GKyg+zMbELQ4Jr/","tlshash":"6c23d0df444ffca5a8aef6b9a1608b4653ae14e8ac02bf4485253c63390c37ef905d5c","first_seen":"2025-02-04T20:34:48.76385Z","last_seen":"2026-04-14T19:27:41.017397Z","times_seen":35,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"staging.ssg-content.com/cache/b2/GamblingLoader/Content/Scripts/integration.js","fqdn":"staging.ssg-content.com","domain":"ssg-content.com","tld":"com"},"ip":{"addr":"104.26.3.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:38.946327281Z","timestamp":1738706378946,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cache/b2/GamblingLoader/Content/Scripts/integration.js HTTP/1.1\r\nHost: staging.ssg-content.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eu-staging.ssgportal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jan 2025 10:53:14 GMT\r\netag: W/\"bd74aad7468db1:0\"\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\ncache-control: max-age=691200\r\ncf-cache-status: HIT\r\nage: 6511\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sUhX6J%2BYAv5ns0Dgzeu3WFgvAvRsnhSkqOPetmjsOEZR%2BZ74FgrLlBw2eD9ELOIzWi08NdXOmJA9GW1rSYVepyaqGCLutm52WFtp7GhMPvKUCjjWq8SxFqKsjoq9Fr1u60NDF53eTNxM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 90cdedceffa60b31-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=709\u0026min_rtt=428\u0026rtt_var=301\u0026sent=99\u0026recv=47\u0026lost=0\u0026retrans=0\u0026sent_bytes=85114\u0026recv_bytes=4467\u0026delivery_rate=52134727\u0026cwnd=257\u0026unsent_bytes=31856\u0026cid=be55ac6eafbbe39c\u0026ts=96\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19753,"size_decoded":27836,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"2a5193db32f2571a092468c0d2d8460b","sha1":"7ba5aef8572a6538ebf1eeabd820bbf586958f27","sha256":"d08ce2d27444220ba10260dba842c158ce7c774f79150c7fa745cda99ed3e2dd","sha512":"b63e45f2508fab9b983ca38e3263136a64b5c65773559faf602f61d25e496d4ded75e9c2048904ac94d4ea26374a764fe8010f623bd189426f0e16bf1e105020","ssdeep":"384:KdL2sdA27MsaHJFhVzclpZsZUzMsiL/o92M/L+np8rUU5pHfSxD175yMxII1+oNM:KfqJF/clpZsZUzgR75R1+0c4cGLI","tlshash":"23c2fb8c758a541985333b35ef9b3208f731a8bb024263067d9c8e962fb146946d7fad","first_seen":"2025-02-04T20:14:55.14481Z","last_seen":"2025-02-05T10:22:37.243192Z","times_seen":7,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"staging.ssg-content.com/cache/b2/GamblingLoader/Content/Images/connection-lost-button.png","fqdn":"staging.ssg-content.com","domain":"ssg-content.com","tld":"com"},"ip":{"addr":"104.26.3.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:38.947112843Z","timestamp":1738706378947,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cache/b2/GamblingLoader/Content/Images/connection-lost-button.png HTTP/1.1\r\nHost: staging.ssg-content.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://staging.ssg-content.com/cache/b2/GamblingLoader/Content/Styles/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 1876\r\nlast-modified: Mon, 13 Jan 2025 12:21:20 GMT\r\netag: \"794234a7b565db1:0\"\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\ncache-control: max-age=691200\r\ncf-cache-status: HIT\r\nage: 6510\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=OJ1BdAD0fUi6PQDYfQ2I7C8Z0nWE6%2FBLQZInUsnpl2TARraRuibP3iJmtyZb6CxMT3zHavxeb%2BKzIbNWwg4oCJrf8K%2BMfnXTv3VUiQhQyOnKtMHfm0KOD%2Fsgt7SARVLT5VphQyODhFzw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 90cdedd3fc130b31-OSL\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=938\u0026min_rtt=412\u0026rtt_var=134\u0026sent=646\u0026recv=264\u0026lost=0\u0026retrans=1\u0026sent_bytes=817949\u0026recv_bytes=5948\u0026delivery_rate=147978052\u0026cwnd=266\u0026unsent_bytes=0\u0026cid=be55ac6eafbbe39c\u0026ts=903\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1876,"size_decoded":1876,"mime_type":"image/png","magic":"PNG image data, 160 x 102, 8-bit/color RGBA, non-interlaced","md5":"450ba25791d52302c21831353926f8ea","sha1":"c348d2488cfa69534d37315dd134a5574ba507c2","sha256":"f0da897f9191065a949079bad6a093ec4dc091a231b9405d1e0505cb751cab12","sha512":"3d595c660bc14e5f9f7f49e4084705e177b75f5aa8677c754a3fe5abb788bb3d43f9fdabaa5288ee255c76720d262f56abe7b066be4c05b352e04a9c8be2835e","ssdeep":"","tlshash":"fb318646f6d3acc15260a4a12cff70236e5145c99dc8e8b1b9deb6ba28a01fe412d4d7","first_seen":"2024-07-30T04:49:08Z","last_seen":"2026-03-22T22:13:42.880175Z","times_seen":12,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"staging.ssg-content.com/cache/b2/GamblingLoader/Content/Scripts/round-history.js","fqdn":"staging.ssg-content.com","domain":"ssg-content.com","tld":"com"},"ip":{"addr":"104.26.3.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:39.095116603Z","timestamp":1738706379095,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cache/b2/GamblingLoader/Content/Scripts/round-history.js HTTP/1.1\r\nHost: staging.ssg-content.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eu-staging.ssgportal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 13 Jan 2025 12:21:21 GMT\r\netag: W/\"62dd6fa7b565db1:0\"\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\ncache-control: max-age=691200\r\ncf-cache-status: HIT\r\nage: 6511\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=eABzwt4WluLMQ3vdc9%2BePgyboQcH3LYD5bTgA9hE01pEM3pymlZVhbGcd66LrfjxY9Bqs1nCyzAwm%2BRve8%2Fhenqak1vv30TkIch6SpOVhapVuFfbKO18nDDZojqdFhuXZ2vwRnDFR311\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 90cdedceefa40b31-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=709\u0026min_rtt=428\u0026rtt_var=301\u0026sent=100\u0026recv=47\u0026lost=0\u0026retrans=1\u0026sent_bytes=86371\u0026recv_bytes=4467\u0026delivery_rate=52134727\u0026cwnd=257\u0026unsent_bytes=31856\u0026cid=be55ac6eafbbe39c\u0026ts=98\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":111198,"size_decoded":10996,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"bc1effc84ff26369acd4b6ec21aaa716","sha1":"8c3eda2408e2a14a59dfa6d9ea6e7c65e79e60c7","sha256":"5eed6e75fe5f87913454fc9eb3ce2d61f2ec88d4528a4daa812e880296eaef17","sha512":"7691225b7c36fb123549521d26c1cf1e2894eb4de8cf1a9cdb0db72eabd81ac35763d5ed965d33eb7417025c8e92d15c72a1b845f57072f67ddb86dd2344c7b2","ssdeep":"192:cWyWZ91lEvZj8i6zuzyxmWvx7nZYHi4vet13F:cWP9XMjhEviv+","tlshash":"7d32e11e6492147de8f7a2740e21071efe26ab079a03475076ec47de0ffad48de5ba18","first_seen":"2025-02-04T20:14:54.95894Z","last_seen":"2026-04-14T19:27:41.012053Z","times_seen":36,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"staging.ssg-content.com/cache/b2/GamblingLoader/Content/Scripts/lib/soundjs.combined.js","fqdn":"staging.ssg-content.com","domain":"ssg-content.com","tld":"com"},"ip":{"addr":"104.26.3.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:39.456935447Z","timestamp":1738706379456,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cache/b2/GamblingLoader/Content/Scripts/lib/soundjs.combined.js HTTP/1.1\r\nHost: staging.ssg-content.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eu-staging.ssgportal.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:38 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 13 Jan 2025 12:21:21 GMT\r\netag: W/\"57b6da7b565db1:0\"\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\ncache-control: max-age=691200\r\ncf-cache-status: HIT\r\nage: 6512\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=zDV%2B2XReZd9tJAoH5R%2BddBffXChixYqIUueXP5Pt87p9ZHbkG6Zw8fgmQ6fr8oSHXaINePIZ%2BARMSgQzyfx1ggugdgOBIgpfa58f%2BUDAKXufuIt63ip0kcZGiWgqWF000TDcQPWFTU93\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 90cdedceef8b0b31-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=709\u0026min_rtt=428\u0026rtt_var=301\u0026sent=99\u0026recv=47\u0026lost=0\u0026retrans=0\u0026sent_bytes=85114\u0026recv_bytes=4467\u0026delivery_rate=52134727\u0026cwnd=257\u0026unsent_bytes=31856\u0026cid=be55ac6eafbbe39c\u0026ts=92\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":147789,"size_decoded":278486,"mime_type":"text/plain; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"a6f73b6bc9f5f8de56d7669b4cf20d46","sha1":"8c8c23e9e4222777eae05cbe756b5db1a1c49df3","sha256":"0db40a3175483b00f50039850b2061ec7c1c2d7e390b6e6e25280c75c636f124","sha512":"210b8bcb508283365f1dde6d10bcff40b2cf2cd43b90069de6cf234b6b279e8e4c2d55a0d5426e6c1406be5af26e808695bef68ca4719250fb849ebdb5b904ea","ssdeep":"3072:EWijq7D78y7aKFyluJY+xjMHgstTsbKlEYBEO/4EW7CWt+6C88z:sjq7vc+xjMHtTsOMkPz","tlshash":"0544f9e9f38e72660f70a36062f83381e23c83719e139b89746dd99c3f64466417d9e9","first_seen":"2024-08-19T15:18:48.23337Z","last_seen":"2026-04-14T19:27:41.006269Z","times_seen":37,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.gstatic.com/recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:39.49074257Z","timestamp":1738706379490,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha\"\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42054\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 04 Feb 2025 05:41:08 GMT\r\nexpires: Wed, 04 Feb 2026 05:41:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 26 Jan 2025 23:01:57 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 58711\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42054,"size_decoded":78633,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e6fce3535dadede6291b6b755489a4c0","sha1":"5fd4ba99212c0289e7c6f5a85b29e4a36a84fb8f","sha256":"e8240323ee880b0e1f92671d098a7960a9f1f4622c82b6ff37b4934f2f1d124b","sha512":"0b02b3d20013b107b38ccd769d971e7274c6a1ca9f52f27a8dd5d033695eaa472194a025f95464f685bcb04324da483ba89af239056c1ce178a4c5674090e464","ssdeep":"1536:ZfGNbFoZJSUYOOaLnAW8+IcTOIGaCthXwW5vxM:pGRFauOxLA/+IcTOJLXK","tlshash":"c7738fb338513a39bc3b976560c6b9ecf21cc527e5114bfab65a7920c2c70e68253b47","first_seen":"2025-01-29T13:36:32.761051Z","last_seen":"2025-02-20T13:29:24.591502Z","times_seen":1886,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"staging.ssg-content.com/cache/b2/GamblingLoader/Content/Styles/Promotions/Wheel.css","fqdn":"staging.ssg-content.com","domain":"ssg-content.com","tld":"com"},"ip":{"addr":"104.26.3.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:39.54962767Z","timestamp":1738706379549,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cache/b2/GamblingLoader/Content/Styles/Promotions/Wheel.css HTTP/1.1\r\nHost: staging.ssg-content.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eu-staging.ssgportal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 13 Jan 2025 12:21:21 GMT\r\netag: W/\"a03f72a7b565db1:0\"\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\ncache-control: max-age=691200\r\ncf-cache-status: HIT\r\nage: 6509\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4m2iETuImPND8ckctQt1fAX2vTZ7VvXahjSbal%2BmypKzqSvQyyslVN9AeRpRouZDIhz%2BHYm7NKFc0eEDpQIwBGE9sSAyJZ76LrkXMFDyB4Y8tTa1lC1mBky8ftTWUS1ebtFndQGxxFRR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 90cdedceef890b31-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=641\u0026min_rtt=428\u0026rtt_var=221\u0026sent=64\u0026recv=46\u0026lost=0\u0026retrans=0\u0026sent_bytes=54309\u0026recv_bytes=4467\u0026delivery_rate=52134727\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=be55ac6eafbbe39c\u0026ts=88\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":224242,"size_decoded":32191,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"334f1dc6b429ab5d7da503a634fd079b","sha1":"84261b56c587291059f2c1a4e1d11306b5b726eb","sha256":"8c320adc49acc7a3a4750226a6942e4fcd3f99614712d845bf7cb8fea0ec76c4","sha512":"a26873b9746c4133858bb28fd21cdb4f61155a3ffd3a36e98658a6cd2e1a82cf766c41252811c0439dbf2ceeab4e7df76dec74f0296abb62c5b9f5b3a50ec8ff","ssdeep":"192:y7y0RXieqvMo1jjtrloFbeIdiiGXpM2Jy79r+E7Hzt6fYrfdCZMYMKN1jfMaYg7N:E8LvMo75oBnkopduUiMMzMdQzD3b","tlshash":"7ee22169cb15228a7637d5647fa08b41c33e4143da024a2c7badb2594fb71d884b3fdd","first_seen":"2024-07-30T04:49:07Z","last_seen":"2026-04-14T19:27:41.038343Z","times_seen":35,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"pagead2.googlesyndication.com/pagead/js/adsbygoogle.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"142.250.74.162","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:39.785594159Z","timestamp":1738706379785,"http_version":"","security_state":"","security_info":null,"request":{"raw":"HEAD /pagead/js/adsbygoogle.js HTTP/1.1\r\nHost: pagead2.googlesyndication.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlink: \u003chttps://googleads.g.doubleclick.net\u003e; rel=\"preconnect\"; crossorigin\r\nvary: Accept-Encoding\r\ndate: Tue, 04 Feb 2025 21:59:39 GMT\r\nexpires: Tue, 04 Feb 2025 21:59:39 GMT\r\ncache-control: private, max-age=3600, stale-while-revalidate=3600\r\ncontent-type: text/javascript; charset=UTF-8\r\netag: 2860006973480759979\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 53543\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-14T14:59:10.506438Z","times_seen":15171651,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"staging.ssg-content.com/cache/b2/GamblingLoader/Content/Styles/Promotions/BetAndWinSummary.css","fqdn":"staging.ssg-content.com","domain":"ssg-content.com","tld":"com"},"ip":{"addr":"104.26.3.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:39.837699005Z","timestamp":1738706379837,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /cache/b2/GamblingLoader/Content/Styles/Promotions/BetAndWinSummary.css HTTP/1.1\r\nHost: staging.ssg-content.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eu-staging.ssgportal.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 04 Feb 2025 21:59:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 13 Jan 2025 12:21:21 GMT\r\netag: W/\"62dd6fa7b565db1:0\"\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\ncache-control: max-age=691200\r\ncf-cache-status: HIT\r\nage: 6509\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JAzr0iSL8u6HIqSuNlKH%2FUkSw0l4sGRNzatdyc1XJVHE1kJxT%2FvSDboriECon4hjAxbayn%2F7EBp9%2Fvef6ByH4EnuGrL1J2Xdf2W7oJlPtgjQaJrEX3JgLf27GW8bF3jnm2wJOX4%2FAYtO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 90cdedcedf810b31-OSL\r\ncontent-encoding: br\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=803\u0026min_rtt=461\u0026rtt_var=553\u0026sent=19\u0026recv=37\u0026lost=0\u0026retrans=0\u0026sent_bytes=7004\u0026recv_bytes=4048\u0026delivery_rate=8074349\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=be55ac6eafbbe39c\u0026ts=85\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18448,"size_decoded":20689,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"91a3d2784d3257fa9383583da67c72e4","sha1":"dcea22fa8025aa8221af997aead4393e731065d6","sha256":"0bddeec11ddf6be1e4760b3a9aef5bf1a588b93beb4e7081f9742d5484f934ed","sha512":"68942253fc7e7510b25ea45377e83621698ba3bc216caac2707b4cc3cc8714cd1da891feee7fb83b85f66c2988cee2d3ce0d7f7fb175f3e32cfe5a5361d58276","ssdeep":"192:gCOqwTkDt552JwlYUO9HVCzsyAF8H49nar8miQWzbl47PBsscuvi5Mmn0unczlnN:DJeScuZ3N","tlshash":"f4923f99ce121247f23797585ba18284e72f2437e7101a1d3acfa5619ffe138c5b2ed8","first_seen":"2024-07-30T04:49:10Z","last_seen":"2026-04-14T19:27:41.009859Z","times_seen":35,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:39.853477751Z","timestamp":1738706379853,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/I0bG74fWAenNf3Z5ncHSz-bd/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha\"\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 31 Jan 2025 19:49:08 GMT\r\nexpires: Fri, 07 Feb 2025 19:49:08 GMT\r\ncache-control: public, max-age=604800\r\nage: 353431\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":2228,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-05-14T14:58:44.990785Z","times_seen":612597,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-staging.ssgportal.com/favicon.ico","fqdn":"eu-staging.ssgportal.com","domain":"ssgportal.com","tld":"com"},"ip":{"addr":"104.22.16.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://eu-staging.ssgportal.com/GameLauncher/google.com","date":"2025-02-04T21:59:39.958Z","timestamp":1738706379958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssgportal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Dec 2024 00:44:18 GMT","end":"Thu, 27 Mar 2025 01:44:12 GMT"},"fingerprint":{"sha1":"40:8A:EF:9F:32:2C:0A:A8:FC:D4:9A:D1:6B:8E:B6:97:47:5D:E6:52","sha256":"D3:85:3A:3F:97:81:50:2C:40:11:14:27:5E:5F:21:14:AD:42:CB:F1:CC:0B:A3:D1:97:FC:92:A2:74:A7:E9:A6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: eu-staging.ssgportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eu-staging.ssgportal.com/GameLauncher/google.com\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 04 Feb 2025 21:59:40 GMT\r\ncontent-type: text/html\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 90cdeddabd30b50c-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":7723,"size_decoded":1245,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"5343c1a8b203c162a3bf3870d9f50fd4","sha1":"04b5b886c20d88b57eea6d8ff882624a4ac1e51d","sha256":"dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f","sha512":"e0f50acb6061744e825a4051765cebf23e8c489b55b190739409d8a79bb08dac8f919247a4e5f65a015ea9c57d326bbef7ea045163915129e01f316c4958d949","ssdeep":"","tlshash":"7b21422992983814f69384a061f277c23f078286e66f1b68a023b263e4c26e281d33c4","first_seen":"2023-03-09T23:36:42Z","last_seen":"2026-05-14T15:02:58.653336Z","times_seen":57696,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6Lfxs6UUAAAAAE3kzerSlj_d5OF7IeWoXvzOE_50\u0026co=aHR0cHM6Ly9qZXR4LXYyLWdlby5wdTIxN2V2LmNvbTo0NDM.\u0026hl=en\u0026v=I0bG74fWAenNf3Z5ncHSz-bd\u0026size=invisible\u0026cb=pivbzgem17ep","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2025-02-04T21:59:49.186263963Z","timestamp":1738706389186,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /recaptcha/enterprise/anchor?ar=1\u0026k=6Lfxs6UUAAAAAE3kzerSlj_d5OF7IeWoXvzOE_50\u0026co=aHR0cHM6Ly9qZXR4LXYyLWdlby5wdTIxN2V2LmNvbTo0NDM.\u0026hl=en\u0026v=I0bG74fWAenNf3Z5ncHSz-bd\u0026size=invisible\u0026cb=pivbzgem17ep HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://jetx-v2-geo.pu217ev.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 04 Feb 2025 21:59:39 GMT\r\ncontent-security-policy: script-src 'nonce-UnM0ycuhKk4d7g-3T4Evxw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8030,"size_decoded":8030,"mime_type":"application/x-gzip","magic":"gzip compressed data, max compression","md5":"cf989d9a72ba88f0c423c635b32f946e","sha1":"2cc7d31d1531988d3188adbef2fd803e73a0092f","sha256":"f3e8f20264812c6460717a69dbbe3a1d7196a322457e43082031394f163459bb","sha512":"766c5a0f11c7fa7d89ba7625854d53672fc050b3ec87e6ff5fdefc695952a9ff45426207565d68acb553dd5f376b128117756ed035b34a33b0865756c88cdf90","ssdeep":"192:4CkLE8gHdM1hAmpgkMl5adBw08gJb9PZq1P4s+DT4T:5SE8gy1hACgp5ady08W9xPs/T","tlshash":"aaf1af2b9f9dda63f9345470fb562f38370e188549b8ee819480f123ec3b1ca68114f9","first_seen":"2025-02-04T22:00:08.679919Z","last_seen":"2025-02-04T22:00:08.679919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"eu-staging.ssgportal.com/GameLauncher/google.com","fqdn":"eu-staging.ssgportal.com","domain":"ssgportal.com","tld":"com"},"ip":{"addr":"104.22.16.194","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-04T21:59:39.394Z","timestamp":1738706379394,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ssgportal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Dec 2024 00:44:18 GMT","end":"Thu, 27 Mar 2025 01:44:12 GMT"},"fingerprint":{"sha1":"40:8A:EF:9F:32:2C:0A:A8:FC:D4:9A:D1:6B:8E:B6:97:47:5D:E6:52","sha256":"D3:85:3A:3F:97:81:50:2C:40:11:14:27:5E:5F:21:14:AD:42:CB:F1:CC:0B:A3:D1:97:FC:92:A2:74:A7:E9:A6"}}},"request":{"raw":"GET /GameLauncher/google.com HTTP/1.1\r\nHost: eu-staging.ssgportal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://eu-staging.ssgportal.com/GameLauncher/Loader.aspx?GameCategory=JetX\u0026GameName=JetX\u0026Token=DEMO\u0026PortalName=DEMO\u0026ReturnUrl=google.com\u0026Lang=en\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 04 Feb 2025 21:59:39 GMT\r\ncontent-type: text/html\r\nx-powered-by: ASP.NET\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 90cdedd87acdb50c-OSL\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":1245,"size_decoded":1245,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1323), with no line terminators","md5":"f5064cd10293c25f15ab1c0a2aeade6b","sha1":"b54330652c047a485de5304d6418ea3d5d552d85","sha256":"e38cefce8d4330e6ee50a34f59229388ea75af218645c21cbffbe9a027ab3f22","sha512":"bf64cd7a6ef75ba20ffa3eb4ee22d576128b8ec948df1d79bde66c3a3442a061d3518dbc894c8bb92377375acbcfdad927ed527b95b6f9efa3b5d3d251858f17","ssdeep":"","tlshash":"2321202ee2083000e68789d429b237a63e058147f57b0f25b1a6b629f4d6af1c1b67c4","first_seen":"2023-04-05T07:53:37Z","last_seen":"2025-04-06T20:55:24.229166Z","times_seen":2950,"resource_available":false,"data":null}},"time_used":675,"timings":{"blocked":199,"dns":202,"connect":1,"send":0,"wait":252,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}