{"report_id":"0bf3b1d1-949e-4193-b2fc-058ed9823290","version":6,"status":"done","tags":[],"date":"2026-01-10T19:28:55Z","url":{"schema":"http","addr":"rarepike.com/four-colors/?player_id=645337760730972177","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rarepike.com/four-colors/?player_id=645337760730972177","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"title":"Play Four Colors Online","dom":{"size":6086,"mime_type":"text/html; charset=utf-8","magic":"C++ source, ASCII text","md5":"2d2191ee83c25836ca6e79ae02bb896e","sha1":"6ec0d892a1438d0fc166ba1f8e92424f65d81430","sha256":"f6c6c80da91571fdb7b53133710b24b871007337180148fc4e8fd6a091dbf1e8","sha512":"301e3e660f38d6a6a0e010d169b1e6321ce0a522a1b63eaa471782fd495b472fb1f90ff3ba9223deb022226766efb1630ffcbf65daa1be212be172620822d341","ssdeep":"96:kWRH5ZF5j5t30P3QV6O/v3JzbuX81BCTbvQQZL35Xb54W65Tu:jr5B0vQV6S/Jzq71J6c","tlshash":"22c1749b28f454214257e0252a47f026f625d05f768edc50bbcc78b97f8933dcab1b8a","dom_hash":"domhashe7878feada357c83b98d617f7576c066","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rarepike.com/four-colors/?player_id=645337760730972177","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-14T19:28:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-10","alert":"Hunting_JS_WebAssembly","trigger":"s.nitropay.com/ads-2270.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"rarepike.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.confiant-integrations.net","ip":{"addr":"104.18.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-07-28","domain_rank":9120,"first_seen":"2022-09-15T09:38:48Z","last_seen":"2026-01-09T11:26:28.000291Z","alert_count":0,"request_count":4,"received_data":1283366,"sent_data":1817,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s.nitropay.com","ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2003-11-04","domain_rank":155654,"first_seen":"2018-05-21T15:18:02Z","last_seen":"2026-01-10T17:37:07.138109Z","alert_count":1,"request_count":12,"received_data":936668,"sent_data":7296,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"ats-wrapper.privacymanager.io","ip":{"addr":"3.167.2.22","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2019-11-21","domain_rank":15932,"first_seen":"2021-09-15T20:22:08Z","last_seen":"2026-01-08T17:41:29.182068Z","alert_count":0,"request_count":2,"received_data":233490,"sent_data":940,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"t.nit.ro","ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":102716,"first_seen":"2023-12-02T03:29:23Z","last_seen":"2026-01-08T23:58:42.824543Z","alert_count":0,"request_count":4,"received_data":680,"sent_data":2694,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"ad-delivery.net","ip":{"addr":"104.20.47.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-05-03","domain_rank":3060,"first_seen":"2017-06-22T05:33:30Z","last_seen":"2026-01-06T10:57:32.926161Z","alert_count":0,"request_count":11,"received_data":13079,"sent_data":4756,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":2,"received_data":13451,"sent_data":1014,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"consent.nitrocnct.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-21","domain_rank":164926,"first_seen":"2022-10-31T21:02:17Z","last_seen":"2026-01-03T01:05:09.600559Z","alert_count":0,"request_count":2,"received_data":883549,"sent_data":917,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":3,"received_data":158464,"sent_data":1636,"comment":"","tags":null,"fingerprints":null},{"fqdn":"rarepike.com","ip":{"addr":"104.21.20.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-12","domain_rank":0,"first_seen":"2025-12-26T12:41:16.936476Z","last_seen":"2025-12-26T12:41:16.936477Z","alert_count":15,"request_count":15,"received_data":1658772,"sent_data":7612,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-04T22:18:41.67311Z","alert_count":0,"request_count":1,"received_data":435166,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ib.adnxs-simple.com","ip":{"addr":"185.89.211.116","port":443,"asn":29990,"as":"ASN-APPNEX","country":"Germany","country_code":"DE"},"domain_registered":"2021-03-03","domain_rank":115353,"first_seen":"2021-04-06T13:01:30Z","last_seen":"2026-01-05T06:16:05.708219Z","alert_count":0,"request_count":3,"received_data":2229,"sent_data":1491,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pbs.nitropay.com","ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2003-11-04","domain_rank":161825,"first_seen":"2024-12-31T09:33:48.566269Z","last_seen":"2026-01-09T20:35:38.280793Z","alert_count":0,"request_count":4,"received_data":2579,"sent_data":2718,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"btloader.com","ip":{"addr":"172.66.171.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-10-06","domain_rank":975,"first_seen":"2020-10-22T20:38:52Z","last_seen":"2026-01-05T16:54:35.206591Z","alert_count":0,"request_count":2,"received_data":158813,"sent_data":990,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"ab.dns-finder.com","ip":{"addr":"34.36.200.111","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2024-07-18","domain_rank":0,"first_seen":"2025-10-24T08:56:49.667026Z","last_seen":"2026-01-09T20:35:38.133793Z","alert_count":0,"request_count":2,"received_data":810,"sent_data":874,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"qsearch-a.akamaihd.net","ip":{"addr":"23.36.77.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2009-09-14","domain_rank":13022,"first_seen":"2014-02-27T14:18:30Z","last_seen":"2026-01-07T01:38:44.087691Z","alert_count":0,"request_count":1,"received_data":296,"sent_data":716,"comment":"","tags":null,"fingerprints":null},{"fqdn":"floors.nitropay.com","ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2003-11-04","domain_rank":194472,"first_seen":"2025-01-13T15:35:22.272241Z","last_seen":"2026-01-05T06:28:52.906423Z","alert_count":0,"request_count":1,"received_data":272,"sent_data":448,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"securepubads.g.doubleclick.net/tag/js/gpt.js","fqdn":"securepubads.g.doubleclick.net","domain":"doubleclick.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c9ed134ae3d5ffe972da2a3e59dc428","sha1":"620df222551395592e46e4c5f425cf23dcdad891","sha256":"5f9efa604bfe2aee8c1a90376125a098306ba390530a6f9b2ecb0a67cdac178d","sha512":"439231f58951b81e4a2587649aa79dbad9d39f64456569301ce3290cc5c537cea970eac765da2e60d4eb06b1d84012ce8e63b75cf5ee1c4d0742d92297946dba","ssdeep":"192:AzZ0ltIlcoaplEbajdKRFQ1A3kutlpg4m4EDac2AV7Lek8wVI+ZQkb8YkCavaun4:UqGbax07e4K22ykJUa8LHT7tBgG8h84","tlshash":"c1421e193af369ba55a3f0af0b6f510ab13888533d0df9407d6c92195f8d82d82f17e9","size":13104,"data":"","first_seen":"2023-04-05T04:46:03Z","last_seen":"2026-05-05T16:12:12.298256Z","times_seen":135596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rarepike.com/four-colors/?player_id=645337760730972177","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"08fa8b73eb2ce0ca5fda890f20ff7f29","sha1":"02bcccacbc77336b1b79796c62fc8eb3255ee520","sha256":"a54b7e1ce284bb4f39a3922943fb6f29daa58684e600bb2bddab8227ee75de97","sha512":"e9a12285aedcd7be6576f2a3d2069fda86f13a6c31644e20bdd05cef34b8f7255a0b26035468c297c83f41062e9b3a471736c1b1e87500fd077254897990897e","ssdeep":"","tlshash":"cdc08c88250a4cb140a636408b3f6301b0022214909568324849a304ce30e2ba348804","size":156,"data":"","first_seen":"2026-01-10T19:29:03.428255Z","last_seen":"2026-01-10T19:29:03.428255Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rarepike.com/four-colors/sandbox%20eval%20code","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"fb4eb094524daea58bf7f82331598541","sha1":"f5ca39eb98fa1685f8647514a627d3d7f216f7ef","sha256":"7cbf1e77bb9277bac7030ded2087246adf5c59564a5a1f28ce8c09be6ef48683","sha512":"316e84930b062a939f8ae6e0f256bf68257e8c01b0f56f499ccf557628a1fdc99258a069b0e11aa956b96109ccc6fd63225f13191abf42ea4f36b89485c66ba4","ssdeep":"","tlshash":"f4c02b63f77025dd1f183ab07511600363c6eb044bb74002f006003f5440fb519b80a4","size":136,"data":"","first_seen":"2023-04-11T21:23:25Z","last_seen":"2026-05-05T16:12:12.334454Z","times_seen":148076,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-floating.20717bbc62018d5e8163.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48064892d7d6fd18d24b27e4722919a0","sha1":"1a1de4a7e4afd31395ad153c299db9b80e6081bc","sha256":"579b12c5fe22b6271364252f944555fd736fedabe12f7988a91b0113a15f69c7","sha512":"eb5cdbed9e5cd4e09ea3d4556d77ab04df5b209619b2347dc04bbbc4711becc68145e676f9a1b61ed1675ea980d07c40af92bf4ffd481860e203b2b6c05438fe","ssdeep":"96:VL2BqWXgRSkm6lgLVpOT65jC984BFt0WgV8Nixj3j7Xb9uWnJ8Kfu+50oG2toDqB:VL2BqEbGwpG0C98q0ZRB4W2fW0moDqB","tlshash":"52c1311922509e7f00e2c2da60998e40b53037962886981c7abdeefb7527dcd7172bf4","size":5826,"data":"","first_seen":"2025-11-14T19:14:34.026542Z","last_seen":"2026-02-02T06:09:41.546354Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rarepike.com/js/main.23cd0c7d837263b9eaeb96ee2d9ccfa2969daa3fa00fa1c1fe8701a9b87251a1.js","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c80072f4007561ecb8e26ac7e63d9b","sha1":"7e659c82528e2983c2139ec06b28f0f792c7e9c3","sha256":"23cd0c7d837263b9eaeb96ee2d9ccfa2969daa3fa00fa1c1fe8701a9b87251a1","sha512":"e3c2203b0c59e4cf5d458095b032ea15edfe1c61acc1fdeba6916a8efebaf2a460ccae578458f72322b293e2845ad4128268cd6c39aff8c34bf128e8bdce3ba0","ssdeep":"","tlshash":"69a022300cc0b023000080082300803802e00e00c320e203300c2caaa200c0c8020cc8","size":60,"data":"","first_seen":"2023-12-08T21:04:08Z","last_seen":"2026-03-22T13:21:29.76121Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/gpp-61d490e.min.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f395e7dd1a28244d02ec61ab69555c1b","sha1":"6eb5f963cf2cdc08f9272909481535932491d8af","sha256":"fc5521185e7dec9f2c67fdf916d6a81db3ca1d571b1e8d89ffb7dec282e83d31","sha512":"7000e497d5d64c35303d43a8dbaa225091040a7f97a8d2273d84528ea8bdb9a1bbfcc146ea00d9c4e004ffb3659a421226cff0900937b5cc696094014d12ca49","ssdeep":"6144:KDkB6373jBqwke6WYr4mVeMrGlX6mUJVneJ7ODnt1fQLZPlTwGLf5qHDIf4RakOh:EEyi4m2WWvyO5jIsy0","tlshash":"72342b4476f0a0b6115f40a3c62af5267a353968940818607ebc7ccd1fc6ace9c6bfbd","size":232723,"data":"","first_seen":"2025-06-27T23:48:54.667058Z","last_seen":"2026-05-04T23:07:04.937972Z","times_seen":2456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/video/202510211058/wrap.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"104.18.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5349fcd235a9f4a17112e90ee9c14bcb","sha1":"735cbfbd24432109a9d82c8a46ed58e578f859b1","sha256":"7d47419abf4488eacbeca36a336b5f48a20a267063be0dc3570f31870de4a6b9","sha512":"21cad49d5f288d237b87366115f0392565cf62395569cd281488217ed2c3dd112c822bc99a1934c104f0d955344667022fb0d52b7f66de78ef138b7c9a86343c","ssdeep":"","tlshash":"1f117b192d84a1a1235ec6cf3b2b91d1e755dd9a12960142a238b3cdbe0cc64cdd397a","size":1001,"data":"","first_seen":"2025-11-02T18:46:48.191505Z","last_seen":"2026-01-12T09:45:33.026144Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ats-wrapper.privacymanager.io/ats-modules/438cb908-ed61-41e9-b716-05d5f4122a64/ats.js","fqdn":"ats-wrapper.privacymanager.io","domain":"privacymanager.io","tld":"io"},"ip":{"addr":"3.167.2.22","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7c65721c4315670f8923421ced6ef15","sha1":"f3b24a1ab4805575e5e4e430ef55ffdf8a520825","sha256":"edaf8efc176e17af398e5c78a6aba83c4a301eaf656e6705ec2dc68bad9b2bdb","sha512":"f3ec8e8807b510083dff376e7eae8741f0141ba94584a05207459f40e1b255b1908b28774afbe04c0a20a24813c95791c44be763f5253a9ea5ded7c27a94f1c7","ssdeep":"1536:nVkCrsjiIwWTOZ5Yb3oguutaD6vAgxYfXbwaY9NHxfAgQp0GViZtODDKkn5Hq6Fg:GjiIwWTgYb3UuQD6xYbYJf29s","tlshash":"7ab31ace31e1b4e203e754f1902f610ab3b2586a280cd494f7a4dce56d75b8e52b3f69","size":116129,"data":"","first_seen":"2025-12-17T12:53:34.128192Z","last_seen":"2026-01-13T09:51:15.903014Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-arcspan.8fc7578a2d00f8aa7a18.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbe2f3d8d7a18d0914dc44bd15c0d5df","sha1":"6854a48cec3864ae05beede8804e7b64e13460f6","sha256":"6d51cc4c1338720545dc666f4df3fe1a78b2e9d97058dad6afe5c9353b60312c","sha512":"7095baa45125fc87d834eeeb173ebdf710198596ad24a472ad8114dcf019c6ea1837eed19e27aec0ef368c660978315b56870cabe516c1e8a25ce88d38865a38","ssdeep":"","tlshash":"10f0235a3689c49e11dd18e980b5d555ec0d10082685cd96a29b0cc4b83eedf7126f4c","size":652,"data":"","first_seen":"2025-12-16T22:05:48.084242Z","last_seen":"2026-05-04T23:07:04.871819Z","times_seen":381,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btloader.com/tag?o=6278260873756672\u0026upapi=true","fqdn":"btloader.com","domain":"btloader.com","tld":"com"},"ip":{"addr":"172.66.171.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a524640fc38caf88b99687f0f9980d4","sha1":"0ea667d523b801a79b352d43418f688085e59963","sha256":"6e1877d2eea9e85755a162d0d9d6048898f083042af0cbe055a0db6eb41b387e","sha512":"30f3cf638e20bd33ea8fb8b0f5b3bca5c34ad6d3aa5a040b0d5d93043c25285d9ed1f9e3afade98ec022b24c3880fb8af77be28b82a384575dbc6bff208f4173","ssdeep":"1536:rVCz++FOpLobdFsovpr7Od+oiSpVqnxeHqYBbygySIiONZt:Aaonr7O4UpIeHqYBbygyStOrt","tlshash":"a8e3728db66065fe46ce8255c1263b026f6c356ab687b840fc0f5e8138ff5ca243597b","size":151835,"data":"","first_seen":"2026-01-09T20:35:42.916398Z","last_seen":"2026-01-17T01:58:01.147384Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rarepike.com/js/four-colors-matchmake.min.f893a7b855cc80ddea02a9c5aaf034514da5ff4530d4ac2fcfd01f27e0aed344.js","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e39aec82a8f756c6b9a4a628f15cf4f","sha1":"9bc5855287ebdb89314e2ae8914e8e93ead0101d","sha256":"f893a7b855cc80ddea02a9c5aaf034514da5ff4530d4ac2fcfd01f27e0aed344","sha512":"9aff6379c0689635e8dd849b28d45d5b090fba7880c85f29319ef6cfea0f9724c90f771ce56817137a2f45b072fa94eb033262fde6d7491cf3536b06e17bdd09","ssdeep":"192:kByhNQ2KFtTfKy82ty8SHyM59tay+R55DXFuauynjY2YxEhgS2DYwy5yKtBGPwfl:kByhNQHFtTfKy82ty8gyMfQy+b9XsdyL","tlshash":"8012727161aa183080e5b5ae16642355bdb309203f92d2c4f53d543f9e7ec4ea73eeac","size":9062,"data":"","first_seen":"2026-01-10T19:29:03.397054Z","last_seen":"2026-01-10T19:29:03.397054Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-captify.2015da149c7dcef90582.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a84a120fe9e7fc2d94e23f9507c5d848","sha1":"4f8cfb304111c0186893260b2b6f30184bd3b03d","sha256":"eeaf94da90366254c9bd9e785dd8885dc14eb2802b41626208d111aea09c8fdb","sha512":"1bd201c3adf8796217770b11caf006023216e172e040ac87ea181cabcb9682dd10a84df8a259df8ed498d2d763df579c7ef8f5bbae33a1d9f16998840d5933a2","ssdeep":"","tlshash":"3211230fe246a37a31e818ff5577a210e4791090f81c812065aa4c813d64dcf47b9ecf","size":892,"data":"","first_seen":"2026-01-07T08:55:16.621861Z","last_seen":"2026-05-04T23:07:04.919405Z","times_seen":302,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/gptprebidnative/202510211058/wrap.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"104.18.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"30ecef15a90a58bc1b6d2f072d1c99a4","sha1":"8e8d6fcaeab99090e71bc9dca7e0dcd337e07c32","sha256":"f0a25201fe65affc4253ad0c2bff974d05c65e8c066bf6d4adcbbfa8838cac82","sha512":"668d1f91005b7e5f9f38c9780c06e5b3b57cc880a9be3452e56a2c9fd3ad83d7aa25a33c7d127f774ae8999e81cc36049fe0272b0507df199e5f476134549db1","ssdeep":"6144:5M1DwwSFShG2bJjCsCu3F5AUdpZzRTMMknX63+h4njtvsur6rstp+2zhhzIvqBsG:yils+sCu17dpZzBh2vkZfw4","tlshash":"fe84d6416ac0bc8913979f7a762f70c1ed5b4ab628d40c9bd105fca469dca13fec66b0","size":401897,"data":"","first_seen":"2025-10-21T18:44:12.541757Z","last_seen":"2026-01-12T10:12:00.985415Z","times_seen":472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rarepike.com/four-colors/sandbox%20eval%20code","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"f019f144761e15f741f6ab1e4cf566a5","sha1":"1c73bccb222e44ae4633750eda7c357460a81a03","sha256":"4cacaf0fd3e370c4840c87c79f923f1ffb69ff7ce5d8172390783c8f83861d62","sha512":"614dbb696b7185a4291bf2c43c4b7442e46740b0a76ec537472bb0fdae208c239642f5160175cef935876f72df688409f170513809606f8aefdfe6613f88947f","ssdeep":"","tlshash":"04c08c92aa5018ed2a602ab176206013e2c676012be3d585f00a00ab5080eba18585a0","size":148,"data":"","first_seen":"2023-05-05T22:57:25Z","last_seen":"2026-05-05T15:57:45.805054Z","times_seen":34535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/QwN0KdjTe-a-6y-70Vps9qMqCzM/gpt_and_prebid/config.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"104.18.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9755f58b8b68b9d36f7a67c18bdfe698","sha1":"2101dc8da396628fe87425ed1cdc8213fe9e136d","sha256":"1a6f332273613a1566a567f5ff806a0de949a9d35028e6c5cc7fb7922a3e0ac5","sha512":"723716e42c2d811d27ce62fc864b4aaa17313040f564d2bc6715f104fba1a538ee65577346bf5c95d9386deb831c9f6cc76f3fcc958f87e45a9db7af350b49f5","ssdeep":"3072:3le1szqmix+0KbefhKHX5wsIcoTMpLuldbUb:3le1sGjxlpaXqsIcoTM5KdE","tlshash":"e464d21e081f242cb5623adb9baf5d6455ed21cb6fedd994d2533f8c034a7012e3b868","size":321422,"data":"","first_seen":"2026-01-10T19:29:03.399047Z","last_seen":"2026-01-10T19:29:03.399047Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ats-wrapper.privacymanager.io/ats-modules/438cb908-ed61-41e9-b716-05d5f4122a64/ats.js","fqdn":"ats-wrapper.privacymanager.io","domain":"privacymanager.io","tld":"io"},"ip":{"addr":"3.167.2.22","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7c65721c4315670f8923421ced6ef15","sha1":"f3b24a1ab4805575e5e4e430ef55ffdf8a520825","sha256":"edaf8efc176e17af398e5c78a6aba83c4a301eaf656e6705ec2dc68bad9b2bdb","sha512":"f3ec8e8807b510083dff376e7eae8741f0141ba94584a05207459f40e1b255b1908b28774afbe04c0a20a24813c95791c44be763f5253a9ea5ded7c27a94f1c7","ssdeep":"1536:nVkCrsjiIwWTOZ5Yb3oguutaD6vAgxYfXbwaY9NHxfAgQp0GViZtODDKkn5Hq6Fg:GjiIwWTgYb3UuQD6xYbYJf29s","tlshash":"7ab31ace31e1b4e203e754f1902f610ab3b2586a280cd494f7a4dce56d75b8e52b3f69","size":116129,"data":"","first_seen":"2025-12-17T12:53:34.128192Z","last_seen":"2026-01-13T09:51:15.903014Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/IKOzVPjtHv3tevs-RDaJOMdtkBI/video/config.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"104.18.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"adce8942b69d025872fa8de534020541","sha1":"290811844e7420c95d5544fb3dc5b18aac691309","sha256":"72dbfc486826c594c1e5e7f76783cd395fde6f61b9d88b33739bee635c140145","sha512":"9ec59ae44bd190b37d4c31cebfba13067b33738600901a3f2c3cc4378fd6ff63f9817ab6728c2c009f060c9aa47febfa6afd780784deac0c62b7a736766633e0","ssdeep":"1536:gHoVHWom0h4zsN16CKHXsqIdroIz5j3itBIMU8LfwcvDA3LvCW8CuO9eP0eL6EwE:jkk4CKHX5wsIcoTMpLu/8uQWUj","tlshash":"34147b2e082e246df56739cbd69f1d31a69d12dbabecc8d496137f8c424bb402d2f464","size":201076,"data":"","first_seen":"2026-01-10T19:29:03.388355Z","last_seen":"2026-01-10T19:29:03.388355Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rarepike.com/css/homepage.min.dae9a40108d78a05ac38081bb513b831f555c9c0a168899f6bf373fa742459d7.css","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rarepike.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 19:31:35 GMT","end":"Tue, 10 Feb 2026 20:31:24 GMT"},"fingerprint":{"sha1":"5C:3D:1F:70:2E:60:CE:C9:4E:0A:D5:AA:9C:A5:7C:0A:0C:FE:31:C2","sha256":"BA:96:ED:9F:8B:4E:01:03:11:E1:C8:B1:B5:46:35:18:3C:A1:0A:6D:AB:A7:F6:40:C3:6E:2C:57:1C:71:6E:49"}}},"request":{"raw":"GET /css/homepage.min.dae9a40108d78a05ac38081bb513b831f555c9c0a168899f6bf373fa742459d7.css HTTP/1.1\r\nHost: rarepike.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/four-colors/?player_id=645337760730972177\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:32 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XuaQ8ltrbfc3vl7XrNhJSm5xs0fmSUd31cXHqhxOaarb02KDQE7Hmx7a6iZAVXpVCt%2BCq%2BN0M%2FOaca0mB%2BqpnwwbAV6nYhFLlCoo4Q%3D%3D\"}]}\r\netag: W/\"b537647056549273af2c416834616a56\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bbe93f86a0b56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2287,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2287), with no line terminators","md5":"c12aa1407d47165dd188f6a53e242fa4","sha1":"8f81cb4b111e17818e22c524049b22886e3cf2b1","sha256":"dae9a40108d78a05ac38081bb513b831f555c9c0a168899f6bf373fa742459d7","sha512":"dc9d36aeea030755e6139a1f08d5faa9664031eb2f69087cff7727f466de042ab57034b143dee657d8195f8cb7c9a9e764d97ee6852a901ca4b70fe04dab8ef2","ssdeep":"","tlshash":"3b4131311556ea24f427a46552e06acd30094a1bd7e3d7e2eee5d937c0c92e377f4328","first_seen":"2026-01-10T19:29:03.349646Z","last_seen":"2026-03-07T02:48:17.694377Z","times_seen":3,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"rarepike.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rarepike.com/js/main.23cd0c7d837263b9eaeb96ee2d9ccfa2969daa3fa00fa1c1fe8701a9b87251a1.js","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rarepike.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 19:31:35 GMT","end":"Tue, 10 Feb 2026 20:31:24 GMT"},"fingerprint":{"sha1":"5C:3D:1F:70:2E:60:CE:C9:4E:0A:D5:AA:9C:A5:7C:0A:0C:FE:31:C2","sha256":"BA:96:ED:9F:8B:4E:01:03:11:E1:C8:B1:B5:46:35:18:3C:A1:0A:6D:AB:A7:F6:40:C3:6E:2C:57:1C:71:6E:49"}}},"request":{"raw":"GET /js/main.23cd0c7d837263b9eaeb96ee2d9ccfa2969daa3fa00fa1c1fe8701a9b87251a1.js HTTP/1.1\r\nHost: rarepike.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/four-colors/?player_id=645337760730972177\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:32 GMT\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=frfBVsTSCKe8r%2B1ole6P0KMIEAbqODFgw6mp5LAR1RGZWQHZLUGw1yEBigsuYZbbxgl1%2By8lGbb9o0U8IHEb6Gy0LwCXBes%2BO5vRhQ%3D%3D\"}]}\r\netag: W/\"de8ecf465f0e46ff545e0f2cc551664f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bbe93f86a0c56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"d9c80072f4007561ecb8e26ac7e63d9b","sha1":"7e659c82528e2983c2139ec06b28f0f792c7e9c3","sha256":"23cd0c7d837263b9eaeb96ee2d9ccfa2969daa3fa00fa1c1fe8701a9b87251a1","sha512":"e3c2203b0c59e4cf5d458095b032ea15edfe1c61acc1fdeba6916a8efebaf2a460ccae578458f72322b293e2845ad4128268cd6c39aff8c34bf128e8bdce3ba0","ssdeep":"","tlshash":"69a022300cc0b023000080082300803802e00e00c320e203300c2caaa200c0c8020cc8","first_seen":"2023-12-08T21:04:08Z","last_seen":"2026-03-22T13:21:29.76121Z","times_seen":11,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"rarepike.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rarepike.com/four-colors/api/player?player_id=645337760730972177","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rarepike.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 19:31:35 GMT","end":"Tue, 10 Feb 2026 20:31:24 GMT"},"fingerprint":{"sha1":"5C:3D:1F:70:2E:60:CE:C9:4E:0A:D5:AA:9C:A5:7C:0A:0C:FE:31:C2","sha256":"BA:96:ED:9F:8B:4E:01:03:11:E1:C8:B1:B5:46:35:18:3C:A1:0A:6D:AB:A7:F6:40:C3:6E:2C:57:1C:71:6E:49"}}},"request":{"raw":"GET /four-colors/api/player?player_id=645337760730972177 HTTP/1.1\r\nHost: rarepike.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/four-colors/?player_id=645337760730972177\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 10 Jan 2026 19:28:32 GMT\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IfAl1jvq8hFYjKdIqcemHilEgN4RT5i%2BhIoEe0XRFmxj9dw4Ul0EPuUwYuSwdiWOu%2B5m4s2T6IXOkejPsYb448mD7kZuYtvpJXo%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bbe93faca2556af-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d32b5c59c213115347c1ce4eb597f44f","sha1":"100061527a3a16317a48f212862bcc1a9edfb81c","sha256":"c31b759b026594ef458296b5c9585b8eaf129c9c63a7a12df5b820e73efd67ed","sha512":"fa5f51f25520f0f8ff8716b569cdb836113ecc57daf1a3a9627056056744cbf746f51350bce8c6376eeb614ccf654ef52abae999959e54cd89e2199fa021d8b6","ssdeep":"","tlshash":"c880000c288b028e0202a2202bc8283028c802c208208e30a002e00c008808e8c0208e","first_seen":"2024-08-31T08:32:11.263011Z","last_seen":"2026-04-07T19:47:25.563719Z","times_seen":21,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"rarepike.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/video/202510211058/wrap.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"104.18.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:34.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"confiant-integrations.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 05:27:32 GMT","end":"Wed, 25 Mar 2026 06:27:29 GMT"},"fingerprint":{"sha1":"0E:ED:E7:87:58:01:87:1A:5B:B4:9F:3C:98:EE:4D:C3:A8:3C:7C:0F","sha256":"71:8F:3A:C1:AD:9B:8C:8F:77:04:D3:23:35:E7:77:07:4F:5B:C8:00:AE:C9:D0:45:43:D2:46:84:DC:F8:99:41"}}},"request":{"raw":"GET /video/202510211058/wrap.js HTTP/1.1\r\nHost: cdn.confiant-integrations.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 126676\r\ncf-ray: 9bbe9406af4456ba-OSL\r\nx-amz-id-2: Sl6aYHNaaSoDqrrobkC9F+eT5tKgft7S+YSMiydVhap6uGOU5sbYKefXZtOPqaqqj4V7GPTz/uGibhROIODAkQ==\r\nx-amz-request-id: E0K6MVJYYC1Y4JTY\r\nlast-modified: Tue, 21 Oct 2025 15:08:02 GMT\r\netag: \"d2e4638c027084d2f3510713e8c94be4\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nage: 3147443\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":356342,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10747)","md5":"da2027f98d47489668262f483f34d75b","sha1":"f50422f630b4ee31bc4aa98154a0d7b31f1b4d89","sha256":"0f6a56ae87955eb8ee46b97c3b4b8a6f068c4bfbb6bcc64993c1081307ff5c78","sha512":"66d30d0e9804a8750526dfd049cf5d21d58ee5acb5c3bb263fffe38aae8d691946312146b8468502f499dea3311e2bf7ba4a0285c6e022fe5745ae785db9d790","ssdeep":"6144:5M1DwwSFShG2bJjCsCu3F5AUdpZzRgMknX63+h4njtvunGR4x:yils+sCu17dpZzj2E4x","tlshash":"6974e7002bd0a84513979fbb372f60d1fd5b8a5b2d98089bd116fce07a5ca13fad5a70","first_seen":"2025-10-21T22:39:00.564778Z","last_seen":"2026-01-12T09:45:32.94496Z","times_seen":248,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.nit.ro/i?d=ChFuaXRyby1zaWRlYmFyLXRvcBoFYmxhbmtCPmh0dHBzOi8vcmFyZXBpa2UuY29tL2ZvdXItY29sb3JzLz9wbGF5ZXJfaWQ9NjQ1MzM3NzYwNzMwOTcyMTc3WiQwMTliYTk2MS1jZjViLTdmMTYtODEzNS0yMWU3NmUyN2Q0NjZiAk5PagIwM5IBIGY3NjljMjdiMzIyMWZmZjZhYWMzZWZhZGQzNTU5NmFhmgEHMmU2OGEyZKIBB2Rpc3BsYXm4AQDQAd4R6gEMCgZmbG9vcnMSAm9u8gEA","fqdn":"t.nit.ro","domain":"nit.ro","tld":"ro"},"ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:44.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nit.ro","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 11:10:04 GMT","end":"Mon, 30 Mar 2026 12:05:59 GMT"},"fingerprint":{"sha1":"92:6D:AD:73:BD:1A:80:BB:5F:0D:5A:8F:E2:5E:1A:94:82:43:B6:CE","sha256":"9F:DE:79:2B:33:4B:8F:C2:71:49:95:3B:5F:95:4D:9D:F0:8D:A4:3B:B4:3C:5A:65:8A:E2:C4:25:AB:B9:56:EC"}}},"request":{"raw":"GET /i?d=ChFuaXRyby1zaWRlYmFyLXRvcBoFYmxhbmtCPmh0dHBzOi8vcmFyZXBpa2UuY29tL2ZvdXItY29sb3JzLz9wbGF5ZXJfaWQ9NjQ1MzM3NzYwNzMwOTcyMTc3WiQwMTliYTk2MS1jZjViLTdmMTYtODEzNS0yMWU3NmUyN2Q0NjZiAk5PagIwM5IBIGY3NjljMjdiMzIyMWZmZjZhYWMzZWZhZGQzNTU5NmFhmgEHMmU2OGEyZKIBB2Rpc3BsYXm4AQDQAd4R6gEMCgZmbG9vcnMSAm9u8gEA HTTP/1.1\r\nHost: t.nit.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nvary: Origin\r\ndate: Sat, 10 Jan 2026 19:28:44 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T16:09:50.836081Z","times_seen":14695563,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-K80XGJDZEE","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:40 GMT","end":"Wed, 25 Feb 2026 15:49:39 GMT"},"fingerprint":{"sha1":"A1:49:37:FE:E0:3E:26:88:A3:64:37:DC:04:D7:8D:D1:D3:F3:91:75","sha256":"BB:61:22:1A:6C:67:5D:C0:C8:A6:73:93:B9:53:82:98:95:54:B5:52:8B:33:FC:08:58:01:D2:3B:FF:E6:35:12"}}},"request":{"raw":"GET /gtag/js?id=G-K80XGJDZEE HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Jan 2026 19:28:32 GMT\r\nexpires: Sat, 10 Jan 2026 19:28:32 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143675\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":434562,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"03006844873550b51cc280d064c5f524","sha1":"633d76176ec44dd56bb3187310a097b931f7bc34","sha256":"76338c4a9c6e0f42c463a823bdfab856e4b439fe232ac7be3268861b88bdbba3","sha512":"0e01008fce4d0155c7c408323f4a67b44e42ea8a4579d722ff818979f9c153b40f07ba005665551fe016b467e942fc2a1edaf0966a06cb3d1831c37eec783c6e","ssdeep":"6144:vGrVfsMxo6qWroAizhQkc1/po7YA+TkIzvovBQVnFRA:qBrqLAi1C7TkI0t","tlshash":"09941ace73d674269396f078503f018ba57b29a2b45dc896f189cce02d74a9a0277f7c","first_seen":"2026-01-10T19:29:03.360994Z","last_seen":"2026-01-10T19:29:03.360994Z","times_seen":1,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":113,"dns":0,"connect":15,"send":0,"wait":43,"receive":52,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=1\u0026e=0.5073430534588785","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"104.20.47.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:38.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 20:01:29 GMT","end":"Sat, 28 Mar 2026 21:01:13 GMT"},"fingerprint":{"sha1":"0A:4F:59:C0:9E:D6:F2:3A:7A:3A:91:58:DF:93:B0:73:D2:92:D4:7C","sha256":"91:F6:B5:02:2B:E0:82:BA:A7:9C:50:A8:5F:96:F2:49:AA:2A:A0:0F:85:D5:5F:76:F0:0A:D4:A6:B6:93:80:75"}}},"request":{"raw":"GET /px.gif?ch=1\u0026e=0.5073430534588785 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:38 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 17 Dec 2025 07:35:13 GMT\r\ncache-control: public, max-age=86400\r\nage: 2116961\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9bbe941edf0d76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-05T16:09:38.866835Z","times_seen":347087,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.21938186724823883","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"104.20.47.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:38.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 20:01:29 GMT","end":"Sat, 28 Mar 2026 21:01:13 GMT"},"fingerprint":{"sha1":"0A:4F:59:C0:9E:D6:F2:3A:7A:3A:91:58:DF:93:B0:73:D2:92:D4:7C","sha256":"91:F6:B5:02:2B:E0:82:BA:A7:9C:50:A8:5F:96:F2:49:AA:2A:A0:0F:85:D5:5F:76:F0:0A:D4:A6:B6:93:80:75"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.21938186724823883 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:38 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 17 Dec 2025 07:35:13 GMT\r\ncache-control: public, max-age=86400\r\nage: 2116961\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9bbe941edf0f76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-05T16:09:38.866835Z","times_seen":347087,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-floating.d67d22508ef41ecbe965.css","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:38.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 10:02:28 GMT","end":"Wed, 25 Mar 2026 11:02:16 GMT"},"fingerprint":{"sha1":"BE:2C:8F:96:6F:C8:3F:B0:C2:37:3B:C5:08:E6:CC:09:AB:FC:68:AE","sha256":"25:49:78:BA:EE:A8:03:BC:30:D0:30:29:56:E1:D5:D8:A2:A1:B0:F5:B6:FA:BB:7D:10:70:D9:C9:07:96:AB:DE"}}},"request":{"raw":"GET /ads-floating.d67d22508ef41ecbe965.css HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=SsPD7N.sGE5x8YPcWVGt2P8gy_HeqPnwSa2.2i5l7tk-1768073312-1.0.1.1-PtVOAfysf960pOrMQm3VmHEvl06RWxxng6hv0ek.Dfbqv5TA5Z.I8auKw7kmRW5nUu9fVyNrKleeIiQ4BtleFspZnXYFekt6vDa5zTCUqkk\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:38 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncf-ray: 9bbe941f3b5ab518-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 352155\r\ncache-control: public, max-age:43200\r\netag: W/\"d9031ff2af6ced2d730d76463f7f26ee\"\r\nexpires: Wed, 06 Jan 2027 17:39:15 GMT\r\nlast-modified: Tue, 06 Jan 2026 17:38:35 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: Content-Type\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-goog-generation: 1767651342967768\r\nx-goog-hash: crc32c=bdpLPQ==, md5=2QMf8q9s7S1zDXZGP38m7g==\r\nx-goog-meta-goog-reserved-file-mtime: 1767651287\r\nx-goog-metageneration: 1\r\nx-goog-storage-class: MULTI_REGIONAL\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1149\r\nx-guploader-uploadid: AHVrFxNxqjJmLjCZV2l8A3R-SLLsqPwOW8aoEyjRVoJXdeD8n-E7cQQWml4qMqFRDSYG5qtuypYIJck\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1149,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1149), with no line terminators","md5":"d9031ff2af6ced2d730d76463f7f26ee","sha1":"b8ac80a5742aaecbd46210df6a88d35a67916819","sha256":"3a16b6fe0a26fecd8d0bfb084c415b3981f3ba2046ac0983d1c3b1b2859be26c","sha512":"270e05b4dbc29512cb423e55c904bb7769b0e30a71536c35d66a8fa019803212e756481bebc93d9ec40e033e444ea6f3a019929393b40f5318958f5bcdb19358","ssdeep":"","tlshash":"8a218e7cc4cd111fe525d18c2a91bcc299a2c593e22230cfa79851e3decf9f686d0594","first_seen":"2025-10-07T03:12:15.344676Z","last_seen":"2026-05-04T01:46:19.505105Z","times_seen":252,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.691978257846018","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"104.20.47.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:40.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 20:01:29 GMT","end":"Sat, 28 Mar 2026 21:01:13 GMT"},"fingerprint":{"sha1":"0A:4F:59:C0:9E:D6:F2:3A:7A:3A:91:58:DF:93:B0:73:D2:92:D4:7C","sha256":"91:F6:B5:02:2B:E0:82:BA:A7:9C:50:A8:5F:96:F2:49:AA:2A:A0:0F:85:D5:5F:76:F0:0A:D4:A6:B6:93:80:75"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.691978257846018 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:40 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 17 Dec 2025 07:35:13 GMT\r\ncache-control: public, max-age=86400\r\nage: 2116962\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9bbe942a3ac176ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-05T16:09:38.866835Z","times_seen":347087,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ib.adnxs-simple.com/openrtb2/prebidjs","fqdn":"ib.adnxs-simple.com","domain":"adnxs-simple.com","tld":"com"},"ip":{"addr":"185.89.211.116","port":443,"asn":29990,"as":"ASN-APPNEX","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:43.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adnxs-simple.com","organization":""},"issuer":{"commonName":"GeoTrust TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Mon, 26 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:93:03:3E:0F:5D:3C:DC:60:F3:0B:D2:4F:42:C2:A8:93:9D:65:29","sha256":"AC:86:20:31:09:6A:E5:52:9F:F3:85:B4:7A:30:47:34:2E:03:71:15:B6:50:D7:B9:8E:AD:49:2D:07:CD:86:56"}}},"request":{"raw":"POST /openrtb2/prebidjs HTTP/1.1\r\nHost: ib.adnxs-simple.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\ncontent-type: text/plain\r\nContent-Length: 2280\r\nOrigin: https://rarepike.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2280,"data":"{\"imp\":[{\"instl\":0,\"ext\":{\"gpid\":\"/nitro/1680/2270/nitro-video\",\"data\":{\"pbadslot\":\"/nitro/1680/2270/nitro-video\",\"adserver\":{\"adslot\":\"nitro-video\"},\"keywords\":[]},\"tid\":\"u40e6a1d5-5506-40a2-82bb-41f839b7aa97\",\"tidSource\":\"pbjs\",\"appnexus\":{\"placement_id\":35743232}},\"video\":{\"pos\":1,\"api\":[1,2,7],\"delivery\":[2],\"placement\":4,\"mimes\":[\"application/javascript\",\"video/mp4\",\"video/webm\"],\"protocols\":[1,2,3,4,5,6,7,8,11,12,13,14],\"playbackmethod\":[3],\"minduration\":5,\"maxduration\":30,\"w\":300,\"h\":169,\"startdelay\":0,\"linearity\":1,\"skip\":0},\"id\":\"24d99094-73fa-480d-8021-c6ff31080d2c\",\"secure\":1}],\"device\":{\"w\":1280,\"h\":1024,\"dnt\":0,\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en\",\"ext\":{\"vpw\":1280,\"vph\":1024}},\"site\":{\"domain\":\"rarepike.com\",\"publisher\":{\"domain\":\"rarepike.com\"},\"page\":\"https://rarepike.com/four-colors/?player_id=645337760730972177\",\"name\":\"rarepike.com\",\"privacypolicy\":1,\"cattax\":7,\"cat\":[\"270\"],\"kwarray\":[\"Mobile Gaming\",\"Wiki\",\"Guides\",\"Game Database\",\"Casual Game\",\"Creature Collection\",\"Game Companion\",\"Fantasy\",\"Fansite\",\"Dragon Mania Legends\"],\"ext\":{\"data\":{\"documentLang\":\"en-us\"}},\"content\":{\"language\":\"en\"}},\"source\":{\"ext\":{\"schain\":{\"ver\":\"1.0\",\"complete\":1,\"nodes\":[{\"asi\":\"nitropay.com\",\"sid\":\"1680\",\"hp\":1}]},\"tidSource\":\"pbjs\",\"omidpn\":\"AppNexus\",\"omidpv\":\"10.16.0\"},\"tid\":\"u5c63587e-42ad-4247-9e4b-f46de37c62a0\"},\"user\":{\"geo\":{\"region\":\"03\",\"country\":\"NO\"},\"ext\":{\"consent\":\"CQdz-EAQdz-EADyvWAENCMFAAAAAAAAAAAAAAAAAAAAA.IAAA\",\"eids\":[{\"source\":\"rarepike.com\",\"uids\":[{\"id\":\"f769c27b3221fff6aac3efadd35596aa\",\"atype\":1,\"ext\":{\"stype\":\"ppuid\"}}]},{\"source\":\"pubcid.org\",\"uids\":[{\"id\":\"f90e837f-b544-41fd-a905-31b94e8fd077\",\"atype\":1}]}],\"ConsentedProvidersSettings\":{\"consented_providers\":\"1~\"}}},\"regs\":{\"gpp_sid\":[],\"ext\":{\"gdpr\":1,\"us_privacy\":\"1---\"}},\"id\":\"c2f23f30-55a5-45c9-bae2-67238812a5ec\",\"test\":0,\"tmax\":2200,\"ext\":{\"appnexus\":{\"prebid\":true,\"hb_source\":1,\"sdk\":{\"version\":\"10.16.0\",\"source\":\"pbjs\"},\"referrer_detection\":{\"rd_ref\":\"https%3A%2F%2Frarepike.com%2Ffour-colors%2F%3Fplayer_id%3D645337760730972177\",\"rd_top\":true,\"rd_ifs\":0,\"rd_stk\":\"https%3A%2F%2Frarepike.com%2Ffour-colors%2F%3Fplayer_id%3D645337760730972177\",\"rd_can\":\"https://rarepike.com/four-colors/\"}}}}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.25.5\r\ndate: Sat, 10 Jan 2026 19:28:44 GMT\r\ncache-control: no-store, no-cache, private\r\npragma: no-cache\r\nexpires: Sat, 15 Nov 2008 16:00:00 GMT\r\np3p: policyref=\"http://cdn.adnxs-simple.com/w3c/policy/p3p.xml\", CP=\"NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE\"\r\nx-xss-protection: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rarepike.com\r\naccept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness\r\nan-x-request-uuid: e269449e-9835-496b-9da6-8453cbe7455f\r\nx-proxy-origin: 91.90.42.154; 91.90.42.154; 956.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs-simple.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T16:09:50.836081Z","times_seen":14695563,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.7310366800564824","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"104.20.47.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:39.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 20:01:29 GMT","end":"Sat, 28 Mar 2026 21:01:13 GMT"},"fingerprint":{"sha1":"0A:4F:59:C0:9E:D6:F2:3A:7A:3A:91:58:DF:93:B0:73:D2:92:D4:7C","sha256":"91:F6:B5:02:2B:E0:82:BA:A7:9C:50:A8:5F:96:F2:49:AA:2A:A0:0F:85:D5:5F:76:F0:0A:D4:A6:B6:93:80:75"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.7310366800564824 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 17 Dec 2025 07:35:13 GMT\r\ncache-control: public, max-age=86400\r\nage: 2116962\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9bbe94251ecc76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-05T16:09:38.866835Z","times_seen":347087,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Maven+Pro:wght@400..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Maven+Pro:wght@400..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 10 Jan 2026 19:28:32 GMT\r\ndate: Sat, 10 Jan 2026 19:28:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1260,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5e273fdf0079328ccee40760fdabd249","sha1":"0ee172e2b94edc55bd1e0e1566dd7a04664c09b3","sha256":"e89efc2266212c50cae1f1322212b5175829849876ad0de38e2542932af34645","sha512":"18cc7ef3ccba7a9b18487ac45849e2fd985fa94ae8953ebe2122e4b6e90b31fba053697c2c44cf4f82f53bb4e2825bc235c010dd81e3580ee322247386384284","ssdeep":"","tlshash":"2921cd91852ba104eb570cc223de7e32bd4e62616444c6396ffe2889ac6ec22631571d","first_seen":"2025-09-06T07:27:40.68551Z","last_seen":"2026-05-04T08:26:39.506856Z","times_seen":69,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":126,"dns":0,"connect":21,"send":0,"wait":33,"receive":0,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/gpp-61d490e.min.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:33.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 10:02:28 GMT","end":"Wed, 25 Mar 2026 11:02:16 GMT"},"fingerprint":{"sha1":"BE:2C:8F:96:6F:C8:3F:B0:C2:37:3B:C5:08:E6:CC:09:AB:FC:68:AE","sha256":"25:49:78:BA:EE:A8:03:BC:30:D0:30:29:56:E1:D5:D8:A2:A1:B0:F5:B6:FA:BB:7D:10:70:D9:C9:07:96:AB:DE"}}},"request":{"raw":"GET /gpp-61d490e.min.js HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=SsPD7N.sGE5x8YPcWVGt2P8gy_HeqPnwSa2.2i5l7tk-1768073312-1.0.1.1-PtVOAfysf960pOrMQm3VmHEvl06RWxxng6hv0ek.Dfbqv5TA5Z.I8auKw7kmRW5nUu9fVyNrKleeIiQ4BtleFspZnXYFekt6vDa5zTCUqkk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:33 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\nx-guploader-uploadid: AHVrFxOGzm8JoeAvrDdBrFLGSmXTEq0hUifHXZfpeLwRu2jhbS5wUidZQk3AVF1xeui0l7euGieo_C8\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 13 Jan 2026 17:39:15 GMT\r\nlast-modified: Mon, 23 Jun 2025 17:15:57 GMT\r\netag: W/\"f395e7dd1a28244d02ec61ab69555c1b\"\r\nx-goog-generation: 1750698957275780\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 232723\r\nx-goog-hash: crc32c=kd50Hw==, md5=85Xn3RooJE0C7GGraVVcGw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 352157\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nserver: cloudflare\r\ncf-ray: 9bbe94039821b518-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232723,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65471)","md5":"f395e7dd1a28244d02ec61ab69555c1b","sha1":"6eb5f963cf2cdc08f9272909481535932491d8af","sha256":"fc5521185e7dec9f2c67fdf916d6a81db3ca1d571b1e8d89ffb7dec282e83d31","sha512":"7000e497d5d64c35303d43a8dbaa225091040a7f97a8d2273d84528ea8bdb9a1bbfcc146ea00d9c4e004ffb3659a421226cff0900937b5cc696094014d12ca49","ssdeep":"6144:KDkB6373jBqwke6WYr4mVeMrGlX6mUJVneJ7ODnt1fQLZPlTwGLf5qHDIf4RakOh:EEyi4m2WWvyO5jIsy0","tlshash":"72342b4476f0a0b6115f40a3c62af5267a353968940818607ebc7ccd1fc6ace9c6bfbd","first_seen":"2025-06-27T23:48:54.667058Z","last_seen":"2026-05-04T23:07:04.937972Z","times_seen":2456,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":17,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.nitrocnct.com/additional-consent-providers.csv","fqdn":"consent.nitrocnct.com","domain":"nitrocnct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:34.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitrocnct.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 15:53:02 GMT","end":"Mon, 02 Mar 2026 16:51:36 GMT"},"fingerprint":{"sha1":"63:A0:FD:B9:FA:6E:F1:2D:C8:E2:C7:69:5E:BA:F7:89:E5:F1:06:43","sha256":"C8:05:7D:73:35:9A:6F:1C:CB:8E:7A:93:58:22:1D:17:88:3E:DE:92:8B:DE:41:EA:3F:DC:8C:12:95:69:AF:6E"}}},"request":{"raw":"GET /additional-consent-providers.csv HTTP/1.1\r\nHost: consent.nitrocnct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nOrigin: https://rarepike.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:34 GMT\r\ncontent-type: text/csv\r\ncontent-length: 109172\r\nx-guploader-uploadid: AJRbA5W0vCzMHQUYuPwkS5QftJIuP7Qj_CKu7-ziiFJpYbR8tzL4u1HzvnCgzVJ5qYWgglm1\r\nx-goog-generation: 1740499050366347\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 109172\r\nx-goog-hash: crc32c=46FWvA==, md5=C5ebpuopeCk4sUi4/a0dgg==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Type, Date, Origin, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Sat, 10 Jan 2026 19:27:25 GMT\r\ncache-control: public, max-age=3600\r\nage: 2519\r\nlast-modified: Tue, 25 Feb 2025 15:57:30 GMT\r\netag: \"0b979ba6ea29782938b148b8fdad1d82\"\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZWnr5bmghXDtRLPVJ33a42W7uU03h5aZq%2BqcbDWScoglR7tNZeAbhjJ3wOtcGu4WQsQn5f8Cx9YhEKHv5uaELhZWzr%2BeMvbNYusRCMNzmscOCj8%3D\"}]}\r\ncf-ray: 9bbe94072c6f56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":109172,"size_decoded":0,"mime_type":"text/csv","magic":"CSV Unicode text, UTF-8 text","md5":"0b979ba6ea29782938b148b8fdad1d82","sha1":"7bca27fc650b8d19ca89858e78db11884b0440b5","sha256":"e476ab4a8be9030adc26a696199faae8701289ba6c25a9c9465bfda00987f705","sha512":"9f02e60655b048eda854b22db620d1c8e7ebbd1e4e25eb44c0ee96ee12e7defd999b23b21f6799692db0b95f1991d038f43e8c19c4dd60664df488fd73694f1b","ssdeep":"1536:Ofu2YtuSGzMTaUWcvRfWnosn7gDP8aOXHMCPaLtj1kfTSXopyPn7o42ad:YYrGzFcgnRn7gDDOXHMCPaLtjqLSXrB","tlshash":"e5b3a67f8441d22c4b7441ccba7fa34cb5ca116fa9e9cefbcf94841656827da30586e8","first_seen":"2025-03-01T19:40:51.861483Z","last_seen":"2026-05-04T23:07:04.969526Z","times_seen":2698,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":37,"dns":16,"connect":4,"send":0,"wait":6,"receive":4,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"consent.nitrocnct.com/vendor-list-v3.json","fqdn":"consent.nitrocnct.com","domain":"nitrocnct.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:34.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitrocnct.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Dec 2025 15:53:02 GMT","end":"Mon, 02 Mar 2026 16:51:36 GMT"},"fingerprint":{"sha1":"63:A0:FD:B9:FA:6E:F1:2D:C8:E2:C7:69:5E:BA:F7:89:E5:F1:06:43","sha256":"C8:05:7D:73:35:9A:6F:1C:CB:8E:7A:93:58:22:1D:17:88:3E:DE:92:8B:DE:41:EA:3F:DC:8C:12:95:69:AF:6E"}}},"request":{"raw":"GET /vendor-list-v3.json HTTP/1.1\r\nHost: consent.nitrocnct.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nOrigin: https://rarepike.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:34 GMT\r\ncontent-type: application/json\r\nx-guploader-uploadid: AHVrFxNGAOFCVGfhmabwJr0fmj_jQvJaJ0KyCULzV3mhsMGqTtg1FxSw04kFTBTG7SbOtoRS\r\nx-goog-generation: 1767284104143189\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 771889\r\nx-goog-hash: crc32c=K0DGxw==, md5=HZ/Z8mlGU/+ChZiPzBmsrg==\r\nx-goog-storage-class: STANDARD\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RZ8bh2weQn79L8wF1eO53gNfqjNrzILhzTOs1%2FDjJw8P%2B4BYrULSxGTUetiWsBASz8VKW3gLILrRsRLdiDTN0o64KSDci7AHm3mk3GSjgnRdbrc%3D\"}]}\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Length, Content-Type, Date, Origin, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Sun, 11 Jan 2026 02:45:30 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Thu, 01 Jan 2026 16:15:04 GMT\r\nvary: accept-encoding\r\nage: 575315\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"1d9fd9f2694653ff8285988fcc19acae\"\r\ncontent-encoding: br\r\ncf-ray: 9bbe94072c6c56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":771889,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1d9fd9f2694653ff8285988fcc19acae","sha1":"986efe66e5720206aa4f656b7e4aa667b72ad192","sha256":"fdd764ac164ac695853a5312840ddeff675ae43208b58640021e1746e0dc5062","sha512":"e21e7677750093f912ea0ce1964602d9eb8d0ff43e66a3e1920645b97ce3dc131ecc1d7ca730a9868caf019e2ecbfce887f85398db58d84b7e51e39380b08912","ssdeep":"3072:7sR02Ngi15G19/jmgIDdqhIIQzXdvHOt4S5nD1:gRz0jnIISNvHQZx","tlshash":"c6f4356f1284083977bb5399d60677c759d9307e4fac18e9b89d193e07e41e33a2228f","first_seen":"2026-01-02T05:49:04.356062Z","last_seen":"2026-01-14T16:12:34.998071Z","times_seen":105,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":32,"dns":20,"connect":1,"send":0,"wait":8,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ib.adnxs-simple.com/openrtb2/prebidjs","fqdn":"ib.adnxs-simple.com","domain":"adnxs-simple.com","tld":"com"},"ip":{"addr":"185.89.211.116","port":443,"asn":29990,"as":"ASN-APPNEX","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:43.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adnxs-simple.com","organization":""},"issuer":{"commonName":"GeoTrust TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Mon, 26 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:93:03:3E:0F:5D:3C:DC:60:F3:0B:D2:4F:42:C2:A8:93:9D:65:29","sha256":"AC:86:20:31:09:6A:E5:52:9F:F3:85:B4:7A:30:47:34:2E:03:71:15:B6:50:D7:B9:8E:AD:49:2D:07:CD:86:56"}}},"request":{"raw":"POST /openrtb2/prebidjs HTTP/1.1\r\nHost: ib.adnxs-simple.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\ncontent-type: text/plain\r\nContent-Length: 2709\r\nOrigin: https://rarepike.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2709,"data":"{\"imp\":[{\"instl\":0,\"ext\":{\"gpid\":\"/nitro/1680/2270/nitro-sidebar-top\",\"data\":{\"pbadslot\":\"/nitro/1680/2270/nitro-sidebar-top\",\"adserver\":{\"adslot\":\"nitro-sidebar-top\"},\"keywords\":[]},\"tid\":\"u5102d6f1-687b-4db3-86c1-31e1d34346d9\",\"tidSource\":\"pbjs\",\"appnexus\":{\"placement_id\":35743232}},\"banner\":{\"topframe\":1,\"format\":[{\"w\":300,\"h\":250}],\"pos\":1,\"w\":300,\"h\":250},\"id\":\"7a9f1c8b-c115-49dd-ab3d-9f5495c95454\",\"secure\":1},{\"instl\":0,\"ext\":{\"gpid\":\"/nitro/1680/2270/nitro-sidebar-top\",\"data\":{\"pbadslot\":\"/nitro/1680/2270/nitro-sidebar-top\",\"adserver\":{\"adslot\":\"nitro-sidebar-top\"},\"keywords\":[]},\"tid\":\"u5102d6f1-687b-4db3-86c1-31e1d34346d9\",\"tidSource\":\"pbjs\",\"appnexus\":{\"placement_id\":35743232}},\"video\":{\"pos\":1,\"api\":[1,2,7],\"delivery\":[2],\"placement\":4,\"mimes\":[\"application/javascript\",\"video/mp4\",\"video/webm\"],\"protocols\":[1,2,3,4,5,6,7,8,11,12,13,14],\"playbackmethod\":[3],\"minduration\":5,\"maxduration\":30,\"w\":300,\"h\":225,\"startdelay\":0,\"linearity\":1,\"skip\":0},\"id\":\"a7983f78-5871-4d7a-9b46-6bcf73c53814\",\"secure\":1}],\"device\":{\"w\":1280,\"h\":1024,\"dnt\":0,\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en\",\"ext\":{\"vpw\":1280,\"vph\":1024}},\"site\":{\"domain\":\"rarepike.com\",\"publisher\":{\"domain\":\"rarepike.com\"},\"page\":\"https://rarepike.com/four-colors/?player_id=645337760730972177\",\"name\":\"rarepike.com\",\"privacypolicy\":1,\"cattax\":7,\"cat\":[\"270\"],\"kwarray\":[\"Mobile Gaming\",\"Wiki\",\"Guides\",\"Game Database\",\"Casual Game\",\"Creature Collection\",\"Game Companion\",\"Fantasy\",\"Fansite\",\"Dragon Mania Legends\"],\"ext\":{\"data\":{\"documentLang\":\"en-us\"}},\"content\":{\"language\":\"en\"}},\"source\":{\"ext\":{\"schain\":{\"ver\":\"1.0\",\"complete\":1,\"nodes\":[{\"asi\":\"nitropay.com\",\"sid\":\"1680\",\"hp\":1}]},\"tidSource\":\"pbjs\",\"omidpn\":\"AppNexus\",\"omidpv\":\"10.16.0\"},\"tid\":\"uee84d780-371e-460a-8762-55f600ac964f\"},\"user\":{\"geo\":{\"region\":\"03\",\"country\":\"NO\"},\"ext\":{\"consent\":\"CQdz-EAQdz-EADyvWAENCMFAAAAAAAAAAAAAAAAAAAAA.IAAA\",\"eids\":[{\"source\":\"rarepike.com\",\"uids\":[{\"id\":\"f769c27b3221fff6aac3efadd35596aa\",\"atype\":1,\"ext\":{\"stype\":\"ppuid\"}}]},{\"source\":\"pubcid.org\",\"uids\":[{\"id\":\"f90e837f-b544-41fd-a905-31b94e8fd077\",\"atype\":1}]}],\"ConsentedProvidersSettings\":{\"consented_providers\":\"1~\"}}},\"regs\":{\"gpp_sid\":[],\"ext\":{\"gdpr\":1,\"us_privacy\":\"1---\"}},\"id\":\"ffc75920-e53e-441a-8bc1-eb234b77684e\",\"test\":0,\"tmax\":2200,\"ext\":{\"appnexus\":{\"prebid\":true,\"hb_source\":1,\"sdk\":{\"version\":\"10.16.0\",\"source\":\"pbjs\"},\"referrer_detection\":{\"rd_ref\":\"https%3A%2F%2Frarepike.com%2Ffour-colors%2F%3Fplayer_id%3D645337760730972177\",\"rd_top\":true,\"rd_ifs\":0,\"rd_stk\":\"https%3A%2F%2Frarepike.com%2Ffour-colors%2F%3Fplayer_id%3D645337760730972177\",\"rd_can\":\"https://rarepike.com/four-colors/\"}}}}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.25.5\r\ndate: Sat, 10 Jan 2026 19:28:44 GMT\r\ncache-control: no-store, no-cache, private\r\npragma: no-cache\r\nexpires: Sat, 15 Nov 2008 16:00:00 GMT\r\np3p: policyref=\"http://cdn.adnxs-simple.com/w3c/policy/p3p.xml\", CP=\"NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE\"\r\nx-xss-protection: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rarepike.com\r\naccept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness\r\nan-x-request-uuid: 63b3e161-c0c5-44fd-b8d5-7e1b71cd2645\r\nx-proxy-origin: 91.90.42.154; 91.90.42.154; 956.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs-simple.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T16:09:50.836081Z","times_seen":14695563,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":179,"dns":119,"connect":17,"send":0,"wait":19,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rarepike.com/four-colors/api/my-rank?player_id=645337760730972177","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rarepike.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 19:31:35 GMT","end":"Tue, 10 Feb 2026 20:31:24 GMT"},"fingerprint":{"sha1":"5C:3D:1F:70:2E:60:CE:C9:4E:0A:D5:AA:9C:A5:7C:0A:0C:FE:31:C2","sha256":"BA:96:ED:9F:8B:4E:01:03:11:E1:C8:B1:B5:46:35:18:3C:A1:0A:6D:AB:A7:F6:40:C3:6E:2C:57:1C:71:6E:49"}}},"request":{"raw":"GET /four-colors/api/my-rank?player_id=645337760730972177 HTTP/1.1\r\nHost: rarepike.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/four-colors/?player_id=645337760730972177\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 10 Jan 2026 19:28:32 GMT\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nFFMbONig92oP8LLAftgHVc3%2FM1Q3YWm3PyLM1zA%2F99i9to0TXriZEu5TtNASnPE%2FzHk41geXl7iwnj9Ymv%2B7IKtPkSHIO8rAcQ%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bbe93faca2856af-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"eba3657e303a0ea4579fb2f7cea84327","sha1":"3cf19aac2f1b17f26e5bf71b0bb663e2633ba9cf","sha256":"089bbda17e35d54d323241b56eb6ccd7814e5570a5207d0401b6156945a9b4f8","sha512":"ae52fc1eca2315c4ecec316b1098fe411ace2009df1782e7e0a42ff899c4cdf43d76f086d30664a6e46a022adbfa613ef734505fee761f3fc477c16b3d6cdb4f","ssdeep":"","tlshash":"cfc0928903a27e3dd60105857856bf43106f718362d20db4a3f89f0904f00398f2148e","first_seen":"2026-01-10T19:29:03.36931Z","last_seen":"2026-01-10T19:29:03.36931Z","times_seen":1,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"rarepike.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rarepike.com/four-colors/api/yesterday-winners","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rarepike.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 19:31:35 GMT","end":"Tue, 10 Feb 2026 20:31:24 GMT"},"fingerprint":{"sha1":"5C:3D:1F:70:2E:60:CE:C9:4E:0A:D5:AA:9C:A5:7C:0A:0C:FE:31:C2","sha256":"BA:96:ED:9F:8B:4E:01:03:11:E1:C8:B1:B5:46:35:18:3C:A1:0A:6D:AB:A7:F6:40:C3:6E:2C:57:1C:71:6E:49"}}},"request":{"raw":"GET /four-colors/api/yesterday-winners HTTP/1.1\r\nHost: rarepike.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/four-colors/?player_id=645337760730972177\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 10 Jan 2026 19:28:32 GMT\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1RRJIMN92boS8b%2FAGUSgjLVVcHyu7la11NEtlUWyYz%2Bd0JK0Krw5XGR2j2nVLWdjMRo0Fof7sWs%2FcY561%2FqVoipnvpwym2r%2F0wk%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bbe93faca2656af-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":388,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d7b0a6acc9f8f478e7dac790cfdce6f3","sha1":"d80775c4e3be21ba6150d4d2d47c9d48d3dd2acd","sha256":"9880cfdb0f9246aa7fdf14aaa7a1530e9239fdd830079d3e87ecbd6fe979fb4f","sha512":"580576fd3e0e614fde0285786fef1ea721866ee9336ec125cf211ea05069f6b83e1b9ebdf104ab14b03e3bde6b7a0611be5514f0e539d5d9d608d62e5577dd1e","ssdeep":"","tlshash":"62e022448c0a4cfeaa9504859a103b8b70fe301351c4cc68e761dc0d06d856d6260a2b","first_seen":"2026-01-10T19:29:03.371391Z","last_seen":"2026-01-10T19:29:03.371391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"rarepike.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-video.c740523671257b19988c.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:33.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 10:02:28 GMT","end":"Wed, 25 Mar 2026 11:02:16 GMT"},"fingerprint":{"sha1":"BE:2C:8F:96:6F:C8:3F:B0:C2:37:3B:C5:08:E6:CC:09:AB:FC:68:AE","sha256":"25:49:78:BA:EE:A8:03:BC:30:D0:30:29:56:E1:D5:D8:A2:A1:B0:F5:B6:FA:BB:7D:10:70:D9:C9:07:96:AB:DE"}}},"request":{"raw":"GET /ads-video.c740523671257b19988c.js HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=SsPD7N.sGE5x8YPcWVGt2P8gy_HeqPnwSa2.2i5l7tk-1768073312-1.0.1.1-PtVOAfysf960pOrMQm3VmHEvl06RWxxng6hv0ek.Dfbqv5TA5Z.I8auKw7kmRW5nUu9fVyNrKleeIiQ4BtleFspZnXYFekt6vDa5zTCUqkk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T16:09:50.836081Z","times_seen":14695563,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-arcspan.8fc7578a2d00f8aa7a18.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:33.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 10:02:28 GMT","end":"Wed, 25 Mar 2026 11:02:16 GMT"},"fingerprint":{"sha1":"BE:2C:8F:96:6F:C8:3F:B0:C2:37:3B:C5:08:E6:CC:09:AB:FC:68:AE","sha256":"25:49:78:BA:EE:A8:03:BC:30:D0:30:29:56:E1:D5:D8:A2:A1:B0:F5:B6:FA:BB:7D:10:70:D9:C9:07:96:AB:DE"}}},"request":{"raw":"GET /ads-arcspan.8fc7578a2d00f8aa7a18.js HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=SsPD7N.sGE5x8YPcWVGt2P8gy_HeqPnwSa2.2i5l7tk-1768073312-1.0.1.1-PtVOAfysf960pOrMQm3VmHEvl06RWxxng6hv0ek.Dfbqv5TA5Z.I8auKw7kmRW5nUu9fVyNrKleeIiQ4BtleFspZnXYFekt6vDa5zTCUqkk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:33 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncf-ray: 9bbe9403981eb518-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 352157\r\ncache-control: public, max-age:43200\r\netag: W/\"cbe2f3d8d7a18d0914dc44bd15c0d5df\"\r\nexpires: Wed, 06 Jan 2027 17:39:15 GMT\r\nlast-modified: Tue, 06 Jan 2026 17:38:35 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: Content-Type\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-goog-generation: 1767721115216163\r\nx-goog-hash: crc32c=ANbcIA==, md5=y+Lz2NehjQkU3ES9FcDV3w==\r\nx-goog-meta-goog-reserved-file-mtime: 1767720118\r\nx-goog-metageneration: 1\r\nx-goog-storage-class: MULTI_REGIONAL\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 652\r\nx-guploader-uploadid: AHVrFxMvUte_-FAvWxFiHnW1uLJB2M-Q4TFNYQj4gnMvJ7DgZdl-jQJIYz2xek3rvaHtfiQFguNf5As\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":652,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (652), with no line terminators","md5":"cbe2f3d8d7a18d0914dc44bd15c0d5df","sha1":"6854a48cec3864ae05beede8804e7b64e13460f6","sha256":"6d51cc4c1338720545dc666f4df3fe1a78b2e9d97058dad6afe5c9353b60312c","sha512":"7095baa45125fc87d834eeeb173ebdf710198596ad24a472ad8114dcf019c6ea1837eed19e27aec0ef368c660978315b56870cabe516c1e8a25ce88d38865a38","ssdeep":"","tlshash":"10f0235a3689c49e11dd18e980b5d555ec0d10082685cd96a29b0cc4b83eedf7126f4c","first_seen":"2025-12-16T22:05:48.084242Z","last_seen":"2026-05-04T23:07:04.871819Z","times_seen":381,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":94,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=1\u0026e=0.1360601880677733","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"104.20.47.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:39.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 20:01:29 GMT","end":"Sat, 28 Mar 2026 21:01:13 GMT"},"fingerprint":{"sha1":"0A:4F:59:C0:9E:D6:F2:3A:7A:3A:91:58:DF:93:B0:73:D2:92:D4:7C","sha256":"91:F6:B5:02:2B:E0:82:BA:A7:9C:50:A8:5F:96:F2:49:AA:2A:A0:0F:85:D5:5F:76:F0:0A:D4:A6:B6:93:80:75"}}},"request":{"raw":"GET /px.gif?ch=1\u0026e=0.1360601880677733 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 17 Dec 2025 07:35:13 GMT\r\ncache-control: public, max-age=86400\r\nage: 2116962\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9bbe94251edf76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-05T16:09:38.866835Z","times_seen":347087,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rarepike.com/css/header.min.53517f89c0180f9898353edfc1bc7c20ee3b56d7538eff3deb55a9e6ccd060f8.css","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rarepike.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 19:31:35 GMT","end":"Tue, 10 Feb 2026 20:31:24 GMT"},"fingerprint":{"sha1":"5C:3D:1F:70:2E:60:CE:C9:4E:0A:D5:AA:9C:A5:7C:0A:0C:FE:31:C2","sha256":"BA:96:ED:9F:8B:4E:01:03:11:E1:C8:B1:B5:46:35:18:3C:A1:0A:6D:AB:A7:F6:40:C3:6E:2C:57:1C:71:6E:49"}}},"request":{"raw":"GET /css/header.min.53517f89c0180f9898353edfc1bc7c20ee3b56d7538eff3deb55a9e6ccd060f8.css HTTP/1.1\r\nHost: rarepike.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/four-colors/?player_id=645337760730972177\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:32 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bP1b5Gg6HDaDyqpmhj4yc3uqe16Pw%2F%2Fk%2Fa0BY3RKDAgf%2Flv1ktwkaq68OJ7OI19HUM%2FLzAobP2pXMda%2BfogRcIWgwx%2FRcASHBwo%3D\"}]}\r\netag: W/\"91a150f0f6a74487569b00ad462d29d5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bbe93f85a0956af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4412,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4412), with no line terminators","md5":"5686ed9b3575e6ad51d56cd607e0f2a7","sha1":"8bff0243f0826f045cedfc6f8cd2fcb54eb85b43","sha256":"53517f89c0180f9898353edfc1bc7c20ee3b56d7538eff3deb55a9e6ccd060f8","sha512":"10dd73374ff0d5bf4fd9bf75e7d57c1cbc89f7eac41d496d45b51b570e9d459a5e2b7de41514efeedb387dd9a94bec5bb6d0baa65bc4fef4e8c88e58854ed193","ssdeep":"96:2syGbwzwlHgPdLqInJU8zqxHSRgpkv1/E9c/ElH:2syGbM0HYd2Iy8zqxHSRgpkv1gSEd","tlshash":"c1910f1ad68512183827c05199d16f5f31b54983ea3b5bbeb13b722e8bc31d76363f88","first_seen":"2026-01-10T19:29:03.375001Z","last_seen":"2026-01-11T18:51:55.797731Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"rarepike.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rarepike.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 10 Jan 2026 15:23:47 GMT\r\nexpires: Sun, 10 Jan 2027 15:23:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 14685\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-05-05T16:09:21.773154Z","times_seen":166980,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":116,"dns":1,"connect":20,"send":0,"wait":31,"receive":27,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pbs.nitropay.com/openrtb2/auction","fqdn":"pbs.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:43.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nitropay.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 06:21:50 GMT","end":"Fri, 10 Apr 2026 07:17:46 GMT"},"fingerprint":{"sha1":"51:E6:99:26:82:BD:D8:A4:08:7B:87:D9:92:6F:98:35:52:77:BB:48","sha256":"4A:26:58:12:4F:A7:E1:54:9B:11:BF:01:B6:E9:A7:80:78:64:A5:8A:50:0D:7F:FC:4B:4A:2E:3D:1F:D1:F7:34"}}},"request":{"raw":"POST /openrtb2/auction HTTP/1.1\r\nHost: pbs.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\ncontent-type: text/plain\r\nContent-Length: 2205\r\nOrigin: https://rarepike.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=SsPD7N.sGE5x8YPcWVGt2P8gy_HeqPnwSa2.2i5l7tk-1768073312-1.0.1.1-PtVOAfysf960pOrMQm3VmHEvl06RWxxng6hv0ek.Dfbqv5TA5Z.I8auKw7kmRW5nUu9fVyNrKleeIiQ4BtleFspZnXYFekt6vDa5zTCUqkk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2205,"data":"{\"imp\":[{\"instl\":0,\"ext\":{\"gpid\":\"/nitro/1680/2270/nitro-sidebar-bottom\",\"data\":{\"pbadslot\":\"/nitro/1680/2270/nitro-sidebar-bottom\",\"adserver\":{\"adslot\":\"nitro-sidebar-bottom\"},\"keywords\":[]},\"prebid\":{\"bidder\":{\"inmobi-s2s\":{\"plc\":\"10000344133\"},\"msft-s2s\":{\"placement_id\":35743233}},\"adunitcode\":\"nitro-sidebar-bottom\"}},\"banner\":{\"topframe\":1,\"format\":[{\"w\":300,\"h\":600},{\"w\":300,\"h\":250},{\"w\":320,\"h\":50},{\"w\":320,\"h\":100},{\"w\":160,\"h\":600},{\"w\":320,\"h\":480}],\"pos\":1},\"id\":\"nitro-sidebar-bottom\",\"secure\":1}],\"source\":{\"tid\":\"32bb6e5c-38ab-4adf-9f99-068271dfebbd\",\"ext\":{\"schain\":{\"ver\":\"1.0\",\"complete\":1,\"nodes\":[{\"asi\":\"nitropay.com\",\"sid\":\"1680\",\"hp\":1}]}}},\"device\":{\"w\":1280,\"h\":1024,\"dnt\":0,\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en\",\"ext\":{\"vpw\":1280,\"vph\":1024}},\"site\":{\"domain\":\"rarepike.com\",\"publisher\":{\"domain\":\"rarepike.com\",\"id\":\"1\"},\"page\":\"https://rarepike.com/four-colors/?player_id=645337760730972177\",\"name\":\"rarepike.com\",\"privacypolicy\":1,\"cattax\":7,\"cat\":[\"270\"],\"kwarray\":[\"Mobile Gaming\",\"Wiki\",\"Guides\",\"Game Database\",\"Casual Game\",\"Creature Collection\",\"Game Companion\",\"Fantasy\",\"Fansite\",\"Dragon Mania Legends\"],\"ext\":{\"data\":{\"documentLang\":\"en-us\"}},\"content\":{\"language\":\"en\"}},\"user\":{\"geo\":{\"region\":\"03\",\"country\":\"NO\"},\"ext\":{\"consent\":\"CQdz-EAQdz-EADyvWAENCMFAAAAAAAAAAAAAAAAAAAAA.IAAA\",\"eids\":[{\"source\":\"rarepike.com\",\"uids\":[{\"id\":\"f769c27b3221fff6aac3efadd35596aa\",\"atype\":1,\"ext\":{\"stype\":\"ppuid\"}}]},{\"source\":\"pubcid.org\",\"uids\":[{\"id\":\"f90e837f-b544-41fd-a905-31b94e8fd077\",\"atype\":1}]}],\"ConsentedProvidersSettings\":{\"consented_providers\":\"1~\"}}},\"regs\":{\"gpp_sid\":[],\"ext\":{\"gdpr\":1,\"us_privacy\":\"1---\"}},\"ext\":{\"prebid\":{\"auctiontimestamp\":1768073323853,\"targeting\":{\"includewinners\":true,\"includebidderkeys\":false},\"aliases\":{\"inmobi-s2s\":\"inmobi\",\"msft-s2s\":\"appnexus\",\"sonobi-s2s\":\"sonobi\"},\"floors\":{\"enabled\":true},\"schains\":[{\"bidders\":[\"inmobi-s2s\",\"msft-s2s\"],\"schain\":{\"ver\":\"1.0\",\"complete\":1,\"nodes\":[{\"asi\":\"nitropay.com\",\"sid\":\"1680\",\"hp\":1}]}}],\"channel\":{\"name\":\"pbjs\",\"version\":\"v10.16.0\"}},\"tmaxmax\":2200},\"id\":\"9b01cade-30ab-4ce7-9b53-20cceba1f967\",\"test\":0,\"tmax\":1500}"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rarepike.com\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: application/json\r\nexpires: 0\r\npragma: no-cache\r\nvary: Accept-Encoding,Origin\r\nx-prebid: pbs-go/3.29.0\r\ndate: Sat, 10 Jan 2026 19:28:43 GMT\r\ncontent-length: 304\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":304,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"14421bbc87f69aab2c4d8c9b7a7f3dd5","sha1":"4eeb81e043f0df447004cd7eb15f41fde5ce5b78","sha256":"12bd9e37e9487d886d487f01d4c509b8cd5060ce15eab704645c8a648a757ca8","sha512":"31457827c94b0c14d1feb38a3ca7de2289810c1fef436e573c7ddbf394689400452b0f792c163983b9dc6865b9f2582533ecea0c4faf90f17adb3800b161f762","ssdeep":"","tlshash":"b9e0c2a7681e9af56b273643b90f2d6040ea3064a6999c1a4f6cc3bc266586e0526226","first_seen":"2026-01-10T19:29:03.378338Z","last_seen":"2026-01-10T19:29:03.378338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rarepike.com/four-colors/game-promo-four-colors.png","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rarepike.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 19:31:35 GMT","end":"Tue, 10 Feb 2026 20:31:24 GMT"},"fingerprint":{"sha1":"5C:3D:1F:70:2E:60:CE:C9:4E:0A:D5:AA:9C:A5:7C:0A:0C:FE:31:C2","sha256":"BA:96:ED:9F:8B:4E:01:03:11:E1:C8:B1:B5:46:35:18:3C:A1:0A:6D:AB:A7:F6:40:C3:6E:2C:57:1C:71:6E:49"}}},"request":{"raw":"GET /four-colors/game-promo-four-colors.png HTTP/1.1\r\nHost: rarepike.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/four-colors/?player_id=645337760730972177\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 141671\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"eeb238cc5fd5384924cb86f1e4bbf17b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RiUo6zMtwh1eFDysX8QHZozUODUpAF8EpH0T6KYEOAUcM%2Bp5zhaoDwdhpjuS0QlOPwQZuIygFwsmuUaf9Ogv%2FxX7A43yyM88A84%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sat, 10 Jan 2026 19:28:32 GMT\r\ncf-ray: 9bbe93f86a0e56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141671,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 382 x 705, 8-bit/color RGBA, non-interlaced","md5":"6071bc2cf85dd94c06dffc69eb55c6bb","sha1":"8c0788a898f0f514d609c2c45444ea27961ffd70","sha256":"0fd0e1d5ffd9bf3748dc0e7a9fd600e77591ebb6390e756a8014940619ec5c11","sha512":"3c10dc51464f78c893e19f6b67461ff95de4d6c4ae18a374d29bce6f6ab80d64e0fa709874bddf3416fdf96560a7da884088ce06d632447fbb8845184c762688","ssdeep":"3072:TaVUwkQpOrFYPf36BNPwg3w9dOT2stlBLPcKVQcX6SOtjjhmUGDQwoh4g9:TaV1eGKjogYM1LZVn6SAXhmzDQDhJ","tlshash":"2cd312b236a39296afd8c10fb36a81924f177b256594b85313477d5bf1c32eb3832493","first_seen":"2026-01-10T19:29:03.380452Z","last_seen":"2026-01-10T19:29:03.380452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"rarepike.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-floating.20717bbc62018d5e8163.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:38.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 10:02:28 GMT","end":"Wed, 25 Mar 2026 11:02:16 GMT"},"fingerprint":{"sha1":"BE:2C:8F:96:6F:C8:3F:B0:C2:37:3B:C5:08:E6:CC:09:AB:FC:68:AE","sha256":"25:49:78:BA:EE:A8:03:BC:30:D0:30:29:56:E1:D5:D8:A2:A1:B0:F5:B6:FA:BB:7D:10:70:D9:C9:07:96:AB:DE"}}},"request":{"raw":"GET /ads-floating.20717bbc62018d5e8163.js HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=SsPD7N.sGE5x8YPcWVGt2P8gy_HeqPnwSa2.2i5l7tk-1768073312-1.0.1.1-PtVOAfysf960pOrMQm3VmHEvl06RWxxng6hv0ek.Dfbqv5TA5Z.I8auKw7kmRW5nUu9fVyNrKleeIiQ4BtleFspZnXYFekt6vDa5zTCUqkk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:38 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncf-ray: 9bbe941f0b0fb518-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 352162\r\ncache-control: public, max-age:43200\r\netag: W/\"48064892d7d6fd18d24b27e4722919a0\"\r\nexpires: Wed, 06 Jan 2027 17:39:15 GMT\r\nlast-modified: Tue, 06 Jan 2026 17:38:35 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: Content-Type\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-goog-generation: 1767721115234289\r\nx-goog-hash: crc32c=/sRdGg==, md5=SAZIktfW/RjSSyfkcikZoA==\r\nx-goog-meta-goog-reserved-file-mtime: 1767720118\r\nx-goog-metageneration: 1\r\nx-goog-storage-class: MULTI_REGIONAL\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 5826\r\nx-guploader-uploadid: AHVrFxPQj1i3DUOEvuMKBJ9thbqcMDscXG_R5tBSOxrqCz0mjFjYM9UzQi9CHXg_FATSjK_b\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5826,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5826), with no line terminators","md5":"48064892d7d6fd18d24b27e4722919a0","sha1":"1a1de4a7e4afd31395ad153c299db9b80e6081bc","sha256":"579b12c5fe22b6271364252f944555fd736fedabe12f7988a91b0113a15f69c7","sha512":"eb5cdbed9e5cd4e09ea3d4556d77ab04df5b209619b2347dc04bbbc4711becc68145e676f9a1b61ed1675ea980d07c40af92bf4ffd481860e203b2b6c05438fe","ssdeep":"96:VL2BqWXgRSkm6lgLVpOT65jC984BFt0WgV8Nixj3j7Xb9uWnJ8Kfu+50oG2toDqB:VL2BqEbGwpG0C98q0ZRB4W2fW0moDqB","tlshash":"52c1311922509e7f00e2c2da60998e40b53037962886981c7abdeefb7527dcd7172bf4","first_seen":"2025-11-14T19:14:34.026542Z","last_seen":"2026-02-02T06:09:41.546354Z","times_seen":98,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.011739407494395615","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"104.20.47.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:40.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 20:01:29 GMT","end":"Sat, 28 Mar 2026 21:01:13 GMT"},"fingerprint":{"sha1":"0A:4F:59:C0:9E:D6:F2:3A:7A:3A:91:58:DF:93:B0:73:D2:92:D4:7C","sha256":"91:F6:B5:02:2B:E0:82:BA:A7:9C:50:A8:5F:96:F2:49:AA:2A:A0:0F:85:D5:5F:76:F0:0A:D4:A6:B6:93:80:75"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.011739407494395615 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:40 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 17 Dec 2025 07:35:13 GMT\r\ncache-control: public, max-age=86400\r\nage: 2116963\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9bbe942f597b76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-05T16:09:38.866835Z","times_seen":347087,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pbs.nitropay.com/openrtb2/auction","fqdn":"pbs.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:43.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nitropay.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 06:21:50 GMT","end":"Fri, 10 Apr 2026 07:17:46 GMT"},"fingerprint":{"sha1":"51:E6:99:26:82:BD:D8:A4:08:7B:87:D9:92:6F:98:35:52:77:BB:48","sha256":"4A:26:58:12:4F:A7:E1:54:9B:11:BF:01:B6:E9:A7:80:78:64:A5:8A:50:0D:7F:FC:4B:4A:2E:3D:1F:D1:F7:34"}}},"request":{"raw":"POST /openrtb2/auction HTTP/1.1\r\nHost: pbs.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\ncontent-type: text/plain\r\nContent-Length: 2724\r\nOrigin: https://rarepike.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=SsPD7N.sGE5x8YPcWVGt2P8gy_HeqPnwSa2.2i5l7tk-1768073312-1.0.1.1-PtVOAfysf960pOrMQm3VmHEvl06RWxxng6hv0ek.Dfbqv5TA5Z.I8auKw7kmRW5nUu9fVyNrKleeIiQ4BtleFspZnXYFekt6vDa5zTCUqkk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2724,"data":"{\"imp\":[{\"instl\":0,\"ext\":{\"gpid\":\"/nitro/1680/2270/nitro-sidebar-top\",\"data\":{\"pbadslot\":\"/nitro/1680/2270/nitro-sidebar-top\",\"adserver\":{\"adslot\":\"nitro-sidebar-top\"},\"keywords\":[]},\"prebid\":{\"bidder\":{\"inmobi-s2s\":{\"plc\":\"10000344133\"},\"msft-s2s\":{\"placement_id\":35743233}},\"adunitcode\":\"nitro-sidebar-top\"}},\"banner\":{\"topframe\":1,\"format\":[{\"w\":300,\"h\":250}],\"pos\":1},\"id\":\"nitro-sidebar-top\",\"secure\":1},{\"instl\":0,\"ext\":{\"gpid\":\"/nitro/1680/2270/nitro-sidebar-top\",\"data\":{\"pbadslot\":\"/nitro/1680/2270/nitro-sidebar-top\",\"adserver\":{\"adslot\":\"nitro-sidebar-top\"},\"keywords\":[]},\"prebid\":{\"bidder\":{\"inmobi-s2s\":{\"plc\":\"10000344134\"},\"msft-s2s\":{\"placement_id\":35743233}},\"adunitcode\":\"nitro-sidebar-top\"}},\"video\":{\"pos\":1,\"api\":[1,2,7],\"delivery\":[2],\"placement\":2,\"plcmt\":4,\"mimes\":[\"application/javascript\",\"video/mp4\",\"video/webm\"],\"protocols\":[1,2,3,4,5,6,7,8,11,12,13,14],\"playbackmethod\":[3],\"minduration\":5,\"maxduration\":30,\"w\":300,\"h\":225,\"startdelay\":0,\"linearity\":1,\"skip\":0},\"id\":\"nitro-sidebar-top-2\",\"secure\":1}],\"source\":{\"tid\":\"70f8489d-8528-4284-bd5d-08fbfc593114\",\"ext\":{\"schain\":{\"ver\":\"1.0\",\"complete\":1,\"nodes\":[{\"asi\":\"nitropay.com\",\"sid\":\"1680\",\"hp\":1}]}}},\"device\":{\"w\":1280,\"h\":1024,\"dnt\":0,\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en\",\"ext\":{\"vpw\":1280,\"vph\":1024}},\"site\":{\"domain\":\"rarepike.com\",\"publisher\":{\"domain\":\"rarepike.com\",\"id\":\"1\"},\"page\":\"https://rarepike.com/four-colors/?player_id=645337760730972177\",\"name\":\"rarepike.com\",\"privacypolicy\":1,\"cattax\":7,\"cat\":[\"270\"],\"kwarray\":[\"Mobile Gaming\",\"Wiki\",\"Guides\",\"Game Database\",\"Casual Game\",\"Creature Collection\",\"Game Companion\",\"Fantasy\",\"Fansite\",\"Dragon Mania Legends\"],\"ext\":{\"data\":{\"documentLang\":\"en-us\"}},\"content\":{\"language\":\"en\"}},\"user\":{\"geo\":{\"region\":\"03\",\"country\":\"NO\"},\"ext\":{\"consent\":\"CQdz-EAQdz-EADyvWAENCMFAAAAAAAAAAAAAAAAAAAAA.IAAA\",\"eids\":[{\"source\":\"rarepike.com\",\"uids\":[{\"id\":\"f769c27b3221fff6aac3efadd35596aa\",\"atype\":1,\"ext\":{\"stype\":\"ppuid\"}}]},{\"source\":\"pubcid.org\",\"uids\":[{\"id\":\"f90e837f-b544-41fd-a905-31b94e8fd077\",\"atype\":1}]}],\"ConsentedProvidersSettings\":{\"consented_providers\":\"1~\"}}},\"regs\":{\"gpp_sid\":[],\"ext\":{\"gdpr\":1,\"us_privacy\":\"1---\"}},\"ext\":{\"prebid\":{\"auctiontimestamp\":1768073323780,\"targeting\":{\"includewinners\":true,\"includebidderkeys\":false},\"aliases\":{\"inmobi-s2s\":\"inmobi\",\"msft-s2s\":\"appnexus\",\"sonobi-s2s\":\"sonobi\"},\"floors\":{\"enabled\":true},\"schains\":[{\"bidders\":[\"inmobi-s2s\",\"msft-s2s\"],\"schain\":{\"ver\":\"1.0\",\"complete\":1,\"nodes\":[{\"asi\":\"nitropay.com\",\"sid\":\"1680\",\"hp\":1}]}}],\"channel\":{\"name\":\"pbjs\",\"version\":\"v10.16.0\"}},\"tmaxmax\":2200},\"id\":\"94c0a896-821c-4260-9819-71538bf9213b\",\"test\":0,\"tmax\":1500}"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rarepike.com\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: application/json\r\nexpires: 0\r\npragma: no-cache\r\nvary: Accept-Encoding,Origin\r\nx-prebid: pbs-go/3.29.0\r\ndate: Sat, 10 Jan 2026 19:28:43 GMT\r\ncontent-length: 304\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":304,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"abeacca48b9c6628027716fd3ba834ae","sha1":"542f94b9a358d981e9f48e20e23732c471e68588","sha256":"06ce4f8d8f31fa6740c4faba9dd4c4e8eb1f6ca446781b01b213bf4efdd250b1","sha512":"e1868289f2cf177a6b70000b2c109ab85d1fdf117b429a63ab92a1588bc1886176781cd7de71b6d46991f3d162de0c04d12adc868786c5083767b2ebfcf2b18f","ssdeep":"","tlshash":"7ee0eb57680a4af2ab2f7717780f292000f63068e588dc5f0facc33c192687e0033111","first_seen":"2026-01-10T19:29:03.383598Z","last_seen":"2026-01-10T19:29:03.383598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":155,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ib.adnxs-simple.com/openrtb2/prebidjs","fqdn":"ib.adnxs-simple.com","domain":"adnxs-simple.com","tld":"com"},"ip":{"addr":"185.89.211.116","port":443,"asn":29990,"as":"ASN-APPNEX","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:43.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.adnxs-simple.com","organization":""},"issuer":{"commonName":"GeoTrust TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 25 Sep 2025 00:00:00 GMT","end":"Mon, 26 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DD:93:03:3E:0F:5D:3C:DC:60:F3:0B:D2:4F:42:C2:A8:93:9D:65:29","sha256":"AC:86:20:31:09:6A:E5:52:9F:F3:85:B4:7A:30:47:34:2E:03:71:15:B6:50:D7:B9:8E:AD:49:2D:07:CD:86:56"}}},"request":{"raw":"POST /openrtb2/prebidjs HTTP/1.1\r\nHost: ib.adnxs-simple.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\ncontent-type: text/plain\r\nContent-Length: 2163\r\nOrigin: https://rarepike.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2163,"data":"{\"imp\":[{\"instl\":0,\"ext\":{\"gpid\":\"/nitro/1680/2270/nitro-sidebar-bottom\",\"data\":{\"pbadslot\":\"/nitro/1680/2270/nitro-sidebar-bottom\",\"adserver\":{\"adslot\":\"nitro-sidebar-bottom\"},\"keywords\":[]},\"tid\":\"uda74e64c-444c-4476-ae4f-5b005474adfc\",\"tidSource\":\"pbjs\",\"appnexus\":{\"placement_id\":35743232}},\"banner\":{\"topframe\":1,\"format\":[{\"w\":300,\"h\":600},{\"w\":300,\"h\":250},{\"w\":320,\"h\":50},{\"w\":320,\"h\":100},{\"w\":160,\"h\":600},{\"w\":320,\"h\":480}],\"pos\":1,\"w\":300,\"h\":600},\"id\":\"7dd43881-55d6-4d89-b3fb-f9a112eb204b\",\"secure\":1}],\"device\":{\"w\":1280,\"h\":1024,\"dnt\":0,\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en\",\"ext\":{\"vpw\":1280,\"vph\":1024}},\"site\":{\"domain\":\"rarepike.com\",\"publisher\":{\"domain\":\"rarepike.com\"},\"page\":\"https://rarepike.com/four-colors/?player_id=645337760730972177\",\"name\":\"rarepike.com\",\"privacypolicy\":1,\"cattax\":7,\"cat\":[\"270\"],\"kwarray\":[\"Mobile Gaming\",\"Wiki\",\"Guides\",\"Game Database\",\"Casual Game\",\"Creature Collection\",\"Game Companion\",\"Fantasy\",\"Fansite\",\"Dragon Mania Legends\"],\"ext\":{\"data\":{\"documentLang\":\"en-us\"}},\"content\":{\"language\":\"en\"}},\"source\":{\"ext\":{\"schain\":{\"ver\":\"1.0\",\"complete\":1,\"nodes\":[{\"asi\":\"nitropay.com\",\"sid\":\"1680\",\"hp\":1}]},\"tidSource\":\"pbjs\"},\"tid\":\"u492c32da-7bd9-4052-9614-13cbfa94c368\"},\"user\":{\"geo\":{\"region\":\"03\",\"country\":\"NO\"},\"ext\":{\"consent\":\"CQdz-EAQdz-EADyvWAENCMFAAAAAAAAAAAAAAAAAAAAA.IAAA\",\"eids\":[{\"source\":\"rarepike.com\",\"uids\":[{\"id\":\"f769c27b3221fff6aac3efadd35596aa\",\"atype\":1,\"ext\":{\"stype\":\"ppuid\"}}]},{\"source\":\"pubcid.org\",\"uids\":[{\"id\":\"f90e837f-b544-41fd-a905-31b94e8fd077\",\"atype\":1}]}],\"ConsentedProvidersSettings\":{\"consented_providers\":\"1~\"}}},\"regs\":{\"gpp_sid\":[],\"ext\":{\"gdpr\":1,\"us_privacy\":\"1---\"}},\"id\":\"6241810a-6b54-4ef3-a23e-e46f6b8b47ad\",\"test\":0,\"tmax\":2200,\"ext\":{\"appnexus\":{\"prebid\":true,\"hb_source\":1,\"sdk\":{\"version\":\"10.16.0\",\"source\":\"pbjs\"},\"referrer_detection\":{\"rd_ref\":\"https%3A%2F%2Frarepike.com%2Ffour-colors%2F%3Fplayer_id%3D645337760730972177\",\"rd_top\":true,\"rd_ifs\":0,\"rd_stk\":\"https%3A%2F%2Frarepike.com%2Ffour-colors%2F%3Fplayer_id%3D645337760730972177\",\"rd_can\":\"https://rarepike.com/four-colors/\"}}}}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx/1.25.5\r\ndate: Sat, 10 Jan 2026 19:28:44 GMT\r\ncache-control: no-store, no-cache, private\r\npragma: no-cache\r\nexpires: Sat, 15 Nov 2008 16:00:00 GMT\r\np3p: policyref=\"http://cdn.adnxs-simple.com/w3c/policy/p3p.xml\", CP=\"NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE\"\r\nx-xss-protection: 0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rarepike.com\r\naccept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness\r\nan-x-request-uuid: cf1838f7-01bd-4dd0-9876-08bb1e3f04e5\r\nx-proxy-origin: 91.90.42.154; 91.90.42.154; 956.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs-simple.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T16:09:50.836081Z","times_seen":14695563,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":153,"dns":1,"connect":17,"send":0,"wait":25,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"qsearch-a.akamaihd.net/log?logid=kfk\u0026evtid=projectevents\u0026project=prebid\u0026dn=rarepike.com\u0026requrl=https%3A%2F%2Frarepike.com%2Ffour-colors%2F%3Fplayer_id%3D645337760730972177\u0026pbav=\u0026pbver=10.16.0\u0026cid=8CU87559X\u0026event=ajax_log_failed\u0026value=\u0026rd=TypeError%3A%20NetworkError%20when%20attempting%20to%20fetch%20resource.","fqdn":"qsearch-a.akamaihd.net","domain":"qsearch-a.akamaihd.net","tld":"akamaihd.net"},"ip":{"addr":"23.36.77.97","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:44.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a248.e.akamai.net","organization":"Akamai Technologies, Inc."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 18 Mar 2025 00:00:00 GMT","end":"Wed, 18 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"51:B3:16:11:9C:44:F0:40:BC:CE:8A:C0:3A:1A:D3:BB:C6:47:40:B3","sha256":"BA:56:C4:EE:2A:1C:8D:B7:10:BF:E7:3A:1F:A3:E4:B0:AD:3F:29:0D:01:92:58:9B:8C:71:DE:44:99:61:C6:96"}}},"request":{"raw":"GET /log?logid=kfk\u0026evtid=projectevents\u0026project=prebid\u0026dn=rarepike.com\u0026requrl=https%3A%2F%2Frarepike.com%2Ffour-colors%2F%3Fplayer_id%3D645337760730972177\u0026pbav=\u0026pbver=10.16.0\u0026cid=8CU87559X\u0026event=ajax_log_failed\u0026value=\u0026rd=TypeError%3A%20NetworkError%20when%20attempting%20to%20fetch%20resource. HTTP/1.1\r\nHost: qsearch-a.akamaihd.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/gif\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 35\r\nExpires: Sat, 10 Jan 2026 19:28:44 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Sat, 10 Jan 2026 19:28:44 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"349909ce1e0bc971d452284590236b09","sha1":"adfc01f8a9de68b9b27e6f98a68737c162167066","sha256":"796c46ec10bc9105545f6f90d51593921b69956bd9087eb72bee83f40ad86f90","sha512":"18115c1109e5f6b67954a5ff697e33c57f749ef877d51aa01a669a218b73b479cfe4a4942e65e3a9c3e28ae6d8a467d07d137d47ece072881001ca5f5736b9cc","ssdeep":"","tlshash":"9c800003f2a0800ac2c2c0300e0ab3a0a282b0a00ac0aa02b08ca3acec2a0b80c00000","first_seen":"2023-04-10T17:49:14Z","last_seen":"2026-05-05T15:51:37.512426Z","times_seen":7139,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":92,"dns":62,"connect":1,"send":0,"wait":2,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh50XSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh50XSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rarepike.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22504\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 07 Jan 2026 12:10:27 GMT\r\nexpires: Thu, 07 Jan 2027 12:10:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 285485\r\nlast-modified: Mon, 15 Sep 2025 17:09:19 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22504,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22504, version 1.0","md5":"1c6c65523675abc6fcd78e804325bd77","sha1":"898d9808304dc157f5dcb18ca169ec6e2b96b3d7","sha256":"08664859baab5ed98f0bf818ed77e38464ff1826dc6406d5ecbd651409afbd92","sha512":"1505e8496c9bee214c5f8815f8d88a31ffe2baeb6fba81a8228bd52220b9b2bb10464c1e1dba11d6881583dfa478cdfb30a79cfa6f069c362fb65443feb06918","ssdeep":"384:ZbL6k1TUlBxUp5VLlLJGv2VulERzgWuXlY9zehEsapJznPEUAAnUgf0n6iXatBbF:pLfTuYfVVJGv2VuIzgWAlYteh6nPEzAF","tlshash":"8aa2f18a13d7a414878983f12c5ed63d7fac7cc7994282d2a606bc494e3dcb6b430bc4","first_seen":"2023-04-17T13:30:58Z","last_seen":"2026-05-05T15:07:57.566436Z","times_seen":31791,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":119,"dns":1,"connect":20,"send":0,"wait":24,"receive":9,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/1.gif?x=1\u0026adslot=","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 10:02:28 GMT","end":"Wed, 25 Mar 2026 11:02:16 GMT"},"fingerprint":{"sha1":"BE:2C:8F:96:6F:C8:3F:B0:C2:37:3B:C5:08:E6:CC:09:AB:FC:68:AE","sha256":"25:49:78:BA:EE:A8:03:BC:30:D0:30:29:56:E1:D5:D8:A2:A1:B0:F5:B6:FA:BB:7D:10:70:D9:C9:07:96:AB:DE"}}},"request":{"raw":"GET /1.gif?x=1\u0026adslot= HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=SsPD7N.sGE5x8YPcWVGt2P8gy_HeqPnwSa2.2i5l7tk-1768073312-1.0.1.1-PtVOAfysf960pOrMQm3VmHEvl06RWxxng6hv0ek.Dfbqv5TA5Z.I8auKw7kmRW5nUu9fVyNrKleeIiQ4BtleFspZnXYFekt6vDa5zTCUqkk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\ncf-ray: 9bbe93fb9d107131-OSL\r\nx-guploader-uploadid: AHVrFxO0ZtcHZaLqU_yePGbjTZ-1HLHqyFWSnhvMpAY3Ixv8y7BGG0DMOdrjwX4TsFVjxICodFCJGZE\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 13 Jan 2026 17:39:15 GMT\r\nlast-modified: Fri, 22 Jan 2021 08:58:45 GMT\r\netag: \"d89746888da2d9510b64a9f031eaecd5\"\r\nx-goog-generation: 1611305925409947\r\nx-goog-metageneration: 3\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 42\r\nx-goog-meta-: \r\nx-goog-custom-time: 1970-01-01T00:00:00Z\r\nx-goog-hash: crc32c=ljrbyA==, md5=2JdGiI2i2VELZKnwMers1Q==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 352155\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-05T16:09:42.292213Z","times_seen":853160,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/IKOzVPjtHv3tevs-RDaJOMdtkBI/video/config.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"104.18.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:33.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"confiant-integrations.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 05:27:32 GMT","end":"Wed, 25 Mar 2026 06:27:29 GMT"},"fingerprint":{"sha1":"0E:ED:E7:87:58:01:87:1A:5B:B4:9F:3C:98:EE:4D:C3:A8:3C:7C:0F","sha256":"71:8F:3A:C1:AD:9B:8C:8F:77:04:D3:23:35:E7:77:07:4F:5B:C8:00:AE:C9:D0:45:43:D2:46:84:DC:F8:99:41"}}},"request":{"raw":"GET /IKOzVPjtHv3tevs-RDaJOMdtkBI/video/config.js HTTP/1.1\r\nHost: cdn.confiant-integrations.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:33 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 41677\r\ncf-ray: 9bbe9402ab3f56ba-OSL\r\nx-amz-id-2: zoK7FIyFQ0TvOTV9WWyrZ5+Iwa/LsDIfSIbcPt8qAToBCkj0wvVylEsYb9X8WB4KTJfleIFgW3jQVMCBkQ/7FGCJSxcs+HbnG0LVS6jUyT0=\r\nx-amz-request-id: KN3KG7EGH8B03C3K\r\nlast-modified: Sat, 10 Jan 2026 19:04:36 GMT\r\netag: \"4a7b54a6dbab8ba12db46a4eb137d777\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=900, stale-while-revalidate=3600\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nage: 466\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201076,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64598)","md5":"adce8942b69d025872fa8de534020541","sha1":"290811844e7420c95d5544fb3dc5b18aac691309","sha256":"72dbfc486826c594c1e5e7f76783cd395fde6f61b9d88b33739bee635c140145","sha512":"9ec59ae44bd190b37d4c31cebfba13067b33738600901a3f2c3cc4378fd6ff63f9817ab6728c2c009f060c9aa47febfa6afd780784deac0c62b7a736766633e0","ssdeep":"1536:gHoVHWom0h4zsN16CKHXsqIdroIz5j3itBIMU8LfwcvDA3LvCW8CuO9eP0eL6EwE:jkk4CKHX5wsIcoTMpLu/8uQWUj","tlshash":"34147b2e082e246df56739cbd69f1d31a69d12dbabecc8d496137f8c424bb402d2f464","first_seen":"2026-01-10T19:29:03.388355Z","last_seen":"2026-01-10T19:29:03.388355Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.9592506050898738","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"104.20.47.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:34.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 20:01:29 GMT","end":"Sat, 28 Mar 2026 21:01:13 GMT"},"fingerprint":{"sha1":"0A:4F:59:C0:9E:D6:F2:3A:7A:3A:91:58:DF:93:B0:73:D2:92:D4:7C","sha256":"91:F6:B5:02:2B:E0:82:BA:A7:9C:50:A8:5F:96:F2:49:AA:2A:A0:0F:85:D5:5F:76:F0:0A:D4:A6:B6:93:80:75"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.9592506050898738 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:34 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 17 Dec 2025 07:35:13 GMT\r\ncache-control: public, max-age=86400\r\nage: 2116957\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9bbe9406fa5c76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-05T16:09:38.866835Z","times_seen":347087,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":5,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-2270.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 10:02:28 GMT","end":"Wed, 25 Mar 2026 11:02:16 GMT"},"fingerprint":{"sha1":"BE:2C:8F:96:6F:C8:3F:B0:C2:37:3B:C5:08:E6:CC:09:AB:FC:68:AE","sha256":"25:49:78:BA:EE:A8:03:BC:30:D0:30:29:56:E1:D5:D8:A2:A1:B0:F5:B6:FA:BB:7D:10:70:D9:C9:07:96:AB:DE"}}},"request":{"raw":"GET /ads-2270.js HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:32 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncf-ray: 9bbe93f8be900b55-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 66453\r\ncache-control: private, max-age=600\r\netag: W/\"aaf8c0ec1055ce3b29dd5807e91a467f:1768006586000:NO\"\r\nexpires: Sun, 10 Jan 2027 01:00:59 GMT\r\nlast-modified: Sat, 10 Jan 2026 00:56:26 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\naccess-control-expose-headers: Content-Type\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-goog-generation: 1767721151123825\r\nx-goog-hash: crc32c=dPl+dA==, md5=qvjA7BBVzjsp3VgH6RpGfw==\r\nx-goog-meta-goog-reserved-file-mtime: 1767721046\r\nx-goog-metageneration: 1\r\nx-goog-storage-class: MULTI_REGIONAL\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 673971\r\nx-guploader-uploadid: AJRbA5WomgZEzZ4S9wk2YuOX1gQrsFpEwhpr_9zqkTtQW0NxPm7KJrdI87UKidtfdaBK0Aq9\r\nset-cookie: __cf_bm=SsPD7N.sGE5x8YPcWVGt2P8gy_HeqPnwSa2.2i5l7tk-1768073312-1.0.1.1-PtVOAfysf960pOrMQm3VmHEvl06RWxxng6hv0ek.Dfbqv5TA5Z.I8auKw7kmRW5nUu9fVyNrKleeIiQ4BtleFspZnXYFekt6vDa5zTCUqkk; path=/; expires=Sat, 10-Jan-26 19:58:32 GMT; domain=.nitropay.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":679589,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (59852)","md5":"ad70e18d1153e8bce8f27c0dc931a24e","sha1":"aba4aa5374e7fe81086ab5ebd4119b457d6ed84b","sha256":"7a21f31291e1bb062f720dc705e5a0ae12a315a9362e405226c305858e9c8405","sha512":"7f7353e19df31409fd7f838fee457848f0a7fb9103edf2f2f7cdef21eb8a3adf6ebfe7cdd6df0274b2ab20f67b9ccf91dbf9ea70e71a9947d87ec2c21bc72b0f","ssdeep":"12288:/JCgak5RlNon42er0FmtHyhHER2QnSBbDT0wCwJA3lBMZdtIpQJfIb:/JCgak5RlNy4yF2HwHc2QnSBT0wCP3lX","tlshash":"ede45c8a3296f4ba43f614e5d03b4705f239aa053409d450f52eadeb3528e9b7273f78","first_seen":"2026-01-10T19:29:03.390502Z","last_seen":"2026-01-14T21:42:12.698829Z","times_seen":3,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":34,"dns":25,"connect":1,"send":0,"wait":29,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-10","alert":"Hunting_JS_WebAssembly","trigger":"s.nitropay.com/ads-2270.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"rarepike.com/css/four-colors.min.3c1610139474e88cf21f93a34f8c0f6b7b83fe83533ece90b986c1b834359ef3.css","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rarepike.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 19:31:35 GMT","end":"Tue, 10 Feb 2026 20:31:24 GMT"},"fingerprint":{"sha1":"5C:3D:1F:70:2E:60:CE:C9:4E:0A:D5:AA:9C:A5:7C:0A:0C:FE:31:C2","sha256":"BA:96:ED:9F:8B:4E:01:03:11:E1:C8:B1:B5:46:35:18:3C:A1:0A:6D:AB:A7:F6:40:C3:6E:2C:57:1C:71:6E:49"}}},"request":{"raw":"GET /css/four-colors.min.3c1610139474e88cf21f93a34f8c0f6b7b83fe83533ece90b986c1b834359ef3.css HTTP/1.1\r\nHost: rarepike.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/four-colors/?player_id=645337760730972177\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:32 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vT3x%2Ffo%2BBhN3%2B5%2Fb%2FVHxGhU6aIv0fv3aCRCT8sBhFWpVhgeyrnu5NntwqHgcBh7oatVZz%2By%2BXs0fkQLuQqEyVTTBQ4O6Nom80isvLBO7hMgy1KW5wfo%3D\"}]}\r\netag: W/\"cb52c515f3abf3cbfff67c0a95d4dedb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bbe93f86a0d56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2117,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2117), with no line terminators","md5":"2127e74fbacfe807f1b8f552439e1801","sha1":"3afa86a9e468c0b9edb2133c27fb660fa460492e","sha256":"3c1610139474e88cf21f93a34f8c0f6b7b83fe83533ece90b986c1b834359ef3","sha512":"6151ae39ec9663a22f028705474afe931a1bc7b8d091cc9021f71a7de2ee1741ef00010ab20cf2fe2ffe7ddf1146fa8eb1c713409d52669978775ded9b8b3046","ssdeep":"","tlshash":"334142267788a55db4bfb07ca4d042bd32184c5ae62a46fff4d47276d0d90f3117aa0a","first_seen":"2026-01-10T19:29:03.392607Z","last_seen":"2026-01-10T19:29:03.392607Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"rarepike.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-standalone.3b313a8b36833b85aa35.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:33.714Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ads-standalone.3b313a8b36833b85aa35.js HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=SsPD7N.sGE5x8YPcWVGt2P8gy_HeqPnwSa2.2i5l7tk-1768073312-1.0.1.1-PtVOAfysf960pOrMQm3VmHEvl06RWxxng6hv0ek.Dfbqv5TA5Z.I8auKw7kmRW5nUu9fVyNrKleeIiQ4BtleFspZnXYFekt6vDa5zTCUqkk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T16:09:50.836081Z","times_seen":14695563,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btloader.com/trustedIframe.html?o=6278260873756672\u0026upapi=true","fqdn":"btloader.com","domain":"btloader.com","tld":"com"},"ip":{"addr":"172.66.171.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:34.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btloader.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 22:30:52 GMT","end":"Mon, 23 Feb 2026 23:30:36 GMT"},"fingerprint":{"sha1":"40:2C:9D:2F:E5:58:9C:2A:66:5D:63:80:3D:ED:AA:7A:7A:D2:2E:01","sha256":"07:51:1D:14:54:2B:68:77:CA:70:DF:BA:54:81:DE:9F:58:DC:F7:C9:0C:36:88:FB:76:3A:36:C9:15:9E:38:DC"}}},"request":{"raw":"GET /trustedIframe.html?o=6278260873756672\u0026upapi=true HTTP/1.1\r\nHost: btloader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:34 GMT\r\ncontent-type: text/html\r\ncache-control: public, max-age=3600, stale-while-revalidate=3600\r\nvary: accept-encoding\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bbe9406c9bc568e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6210,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"558ed2770f0b8ad09c63ad473f111e84","sha1":"97d150e529f6b3e668c4a79ca6f53a00c241693c","sha256":"88ad7cdf7b26856fcba94a6da79d58fc835c3f105bea63c5b390a6130d7f7529","sha512":"d08d8a96ce957f9fe06435856600ef230d0fc08cf010edc8d747bbb00f68ba301af1cc8e316d9c3ce87d2084d80723ce0718f29e0bce863b6099a4b81f1ebdc6","ssdeep":"96:fRH5ZF5j5t30P3QV6O/v3JzbuX81BCTbvQQZL35Xb54W65TBu:pr5B0vQV6S/Jzq71J6Du","tlshash":"65d1759b28f454204257e0252a47f426f525d05f36cedc54bacc78ba7f8933dcab1b8a","first_seen":"2025-12-26T12:41:24.199029Z","last_seen":"2026-01-14T21:42:12.699738Z","times_seen":5,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=1\u0026e=0.42557452967023335","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"104.20.47.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:34.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 20:01:29 GMT","end":"Sat, 28 Mar 2026 21:01:13 GMT"},"fingerprint":{"sha1":"0A:4F:59:C0:9E:D6:F2:3A:7A:3A:91:58:DF:93:B0:73:D2:92:D4:7C","sha256":"91:F6:B5:02:2B:E0:82:BA:A7:9C:50:A8:5F:96:F2:49:AA:2A:A0:0F:85:D5:5F:76:F0:0A:D4:A6:B6:93:80:75"}}},"request":{"raw":"GET /px.gif?ch=1\u0026e=0.42557452967023335 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:34 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 17 Dec 2025 07:35:13 GMT\r\ncache-control: public, max-age=86400\r\nage: 2116957\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9bbe94070a8376ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-05T16:09:38.866835Z","times_seen":347087,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":17,"dns":1,"connect":3,"send":0,"wait":4,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.nit.ro/i?d=CgtuaXRyby12aWRlbxoFYmxhbmtCPmh0dHBzOi8vcmFyZXBpa2UuY29tL2ZvdXItY29sb3JzLz9wbGF5ZXJfaWQ9NjQ1MzM3NzYwNzMwOTcyMTc3WiQwMTliYTk2MS1jZjgxLTc0NTYtYTgwMC0zNGI3ZDc5M2ZjZjRiAk5PagIwM3ADkgEgZjc2OWMyN2IzMjIxZmZmNmFhYzNlZmFkZDM1NTk2YWGaAQcyZTY4YTJkogEIZmxvYXRpbme4AQDQAd4R6gEMCgZmbG9vcnMSAm9u8gEA","fqdn":"t.nit.ro","domain":"nit.ro","tld":"ro"},"ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:44.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nit.ro","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 11:10:04 GMT","end":"Mon, 30 Mar 2026 12:05:59 GMT"},"fingerprint":{"sha1":"92:6D:AD:73:BD:1A:80:BB:5F:0D:5A:8F:E2:5E:1A:94:82:43:B6:CE","sha256":"9F:DE:79:2B:33:4B:8F:C2:71:49:95:3B:5F:95:4D:9D:F0:8D:A4:3B:B4:3C:5A:65:8A:E2:C4:25:AB:B9:56:EC"}}},"request":{"raw":"GET /i?d=CgtuaXRyby12aWRlbxoFYmxhbmtCPmh0dHBzOi8vcmFyZXBpa2UuY29tL2ZvdXItY29sb3JzLz9wbGF5ZXJfaWQ9NjQ1MzM3NzYwNzMwOTcyMTc3WiQwMTliYTk2MS1jZjgxLTc0NTYtYTgwMC0zNGI3ZDc5M2ZjZjRiAk5PagIwM3ADkgEgZjc2OWMyN2IzMjIxZmZmNmFhYzNlZmFkZDM1NTk2YWGaAQcyZTY4YTJkogEIZmxvYXRpbme4AQDQAd4R6gEMCgZmbG9vcnMSAm9u8gEA HTTP/1.1\r\nHost: t.nit.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nvary: Origin\r\ndate: Sat, 10 Jan 2026 19:28:44 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T16:09:50.836081Z","times_seen":14695563,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rarepike.com/js/four-colors-matchmake.min.f893a7b855cc80ddea02a9c5aaf034514da5ff4530d4ac2fcfd01f27e0aed344.js","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rarepike.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 19:31:35 GMT","end":"Tue, 10 Feb 2026 20:31:24 GMT"},"fingerprint":{"sha1":"5C:3D:1F:70:2E:60:CE:C9:4E:0A:D5:AA:9C:A5:7C:0A:0C:FE:31:C2","sha256":"BA:96:ED:9F:8B:4E:01:03:11:E1:C8:B1:B5:46:35:18:3C:A1:0A:6D:AB:A7:F6:40:C3:6E:2C:57:1C:71:6E:49"}}},"request":{"raw":"GET /js/four-colors-matchmake.min.f893a7b855cc80ddea02a9c5aaf034514da5ff4530d4ac2fcfd01f27e0aed344.js HTTP/1.1\r\nHost: rarepike.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/four-colors/?player_id=645337760730972177\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:32 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hLaZp%2BMbKApuwPdjqLx44ncGqiApliH4kcm10KdNWUUOrne1vp32xp8%2FIG46RxVQAkTxNXk%2FKsWom3ExQShdDQ2LDdFWEoirApAvKg%3D%3D\"}]}\r\netag: W/\"ffa63a6f1b7ea7f877bb7e218c9df79b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bbe93f86a0f56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9062,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (9049), with no line terminators","md5":"2e39aec82a8f756c6b9a4a628f15cf4f","sha1":"9bc5855287ebdb89314e2ae8914e8e93ead0101d","sha256":"f893a7b855cc80ddea02a9c5aaf034514da5ff4530d4ac2fcfd01f27e0aed344","sha512":"9aff6379c0689635e8dd849b28d45d5b090fba7880c85f29319ef6cfea0f9724c90f771ce56817137a2f45b072fa94eb033262fde6d7491cf3536b06e17bdd09","ssdeep":"192:kByhNQ2KFtTfKy82ty8SHyM59tay+R55DXFuauynjY2YxEhgS2DYwy5yKtBGPwfl:kByhNQHFtTfKy82ty8gyMfQy+b9XsdyL","tlshash":"8012727161aa183080e5b5ae16642355bdb309203f92d2c4f53d543f9e7ec4ea73eeac","first_seen":"2026-01-10T19:29:03.397054Z","last_seen":"2026-01-10T19:29:03.397054Z","times_seen":1,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"rarepike.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/QwN0KdjTe-a-6y-70Vps9qMqCzM/gpt_and_prebid/config.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"104.18.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"confiant-integrations.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 05:27:32 GMT","end":"Wed, 25 Mar 2026 06:27:29 GMT"},"fingerprint":{"sha1":"0E:ED:E7:87:58:01:87:1A:5B:B4:9F:3C:98:EE:4D:C3:A8:3C:7C:0F","sha256":"71:8F:3A:C1:AD:9B:8C:8F:77:04:D3:23:35:E7:77:07:4F:5B:C8:00:AE:C9:D0:45:43:D2:46:84:DC:F8:99:41"}}},"request":{"raw":"GET /QwN0KdjTe-a-6y-70Vps9qMqCzM/gpt_and_prebid/config.js HTTP/1.1\r\nHost: cdn.confiant-integrations.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 65111\r\ncf-ray: 9bbe93fbeac956c0-OSL\r\nx-amz-id-2: 3Sn8c0odCBrOJYoHRTx0p6t78SVQiRBwJBvrZrEs/8D/aLGicwDPN3T/Oo9VBjeXhS+8FfyBePM=\r\nx-amz-request-id: 38FZA6GJBCD27Z5Q\r\nlast-modified: Sat, 10 Jan 2026 19:16:20 GMT\r\netag: \"db7f9d784a5e68e8a201c52aa1e06c41\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=900, stale-while-revalidate=3600\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nvary: accept-encoding\r\nage: 22\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":321422,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64217)","md5":"9755f58b8b68b9d36f7a67c18bdfe698","sha1":"2101dc8da396628fe87425ed1cdc8213fe9e136d","sha256":"1a6f332273613a1566a567f5ff806a0de949a9d35028e6c5cc7fb7922a3e0ac5","sha512":"723716e42c2d811d27ce62fc864b4aaa17313040f564d2bc6715f104fba1a538ee65577346bf5c95d9386deb831c9f6cc76f3fcc958f87e45a9db7af350b49f5","ssdeep":"3072:3le1szqmix+0KbefhKHX5wsIcoTMpLuldbUb:3le1sGjxlpaXqsIcoTM5KdE","tlshash":"e464d21e081f242cb5623adb9baf5d6455ed21cb6fedd994d2533f8c034a7012e3b868","first_seen":"2026-01-10T19:29:03.399047Z","last_seen":"2026-01-10T19:29:03.399047Z","times_seen":1,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":33,"dns":19,"connect":1,"send":0,"wait":10,"receive":3,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ats-wrapper.privacymanager.io/ats-modules/438cb908-ed61-41e9-b716-05d5f4122a64/ats.js","fqdn":"ats-wrapper.privacymanager.io","domain":"privacymanager.io","tld":"io"},"ip":{"addr":"3.167.2.22","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:33.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.privacymanager.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 26 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DF:60:3B:90:B0:FE:13:05:53:10:08:5C:25:5A:F8:C4:CD:D8:84:96","sha256":"0A:53:A4:E2:7B:1C:31:25:0C:53:84:0D:F4:CC:69:55:CE:3F:A6:F9:C3:6C:6E:FA:7E:5F:A8:AA:6B:0C:28:AB"}}},"request":{"raw":"GET /ats-modules/438cb908-ed61-41e9-b716-05d5f4122a64/ats.js HTTP/1.1\r\nHost: ats-wrapper.privacymanager.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Dec 2025 09:28:48 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Cew7oMr3CYmReLItnxOPq0QI9ri5.6cJ\r\nserver: AmazonS3\r\ndate: Sat, 10 Jan 2026 19:02:08 GMT\r\ncache-control: must-revalidate,public,max-age=3600\r\netag: W/\"a7c65721c4315670f8923421ced6ef15\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 7a83657ba338d5960d8d5abdbe0a3136.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: v5PbiVb0Cr7uO3pGX5P4yjvmDElb4gGLjFzQS2dlzBblFkXsAawBDw==\r\nage: 1586\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":116129,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"a7c65721c4315670f8923421ced6ef15","sha1":"f3b24a1ab4805575e5e4e430ef55ffdf8a520825","sha256":"edaf8efc176e17af398e5c78a6aba83c4a301eaf656e6705ec2dc68bad9b2bdb","sha512":"f3ec8e8807b510083dff376e7eae8741f0141ba94584a05207459f40e1b255b1908b28774afbe04c0a20a24813c95791c44be763f5253a9ea5ded7c27a94f1c7","ssdeep":"1536:nVkCrsjiIwWTOZ5Yb3oguutaD6vAgxYfXbwaY9NHxfAgQp0GViZtODDKkn5Hq6Fg:GjiIwWTgYb3UuQD6xYbYJf29s","tlshash":"7ab31ace31e1b4e203e754f1902f610ab3b2586a280cd494f7a4dce56d75b8e52b3f69","first_seen":"2025-12-17T12:53:34.128192Z","last_seen":"2026-01-13T09:51:15.903014Z","times_seen":103,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ab.dns-finder.com/meta/dns","fqdn":"ab.dns-finder.com","domain":"dns-finder.com","tld":"com"},"ip":{"addr":"34.36.200.111","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:34.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ab.dns-finder.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 15:59:44 GMT","end":"Sat, 14 Mar 2026 16:53:38 GMT"},"fingerprint":{"sha1":"D7:71:85:BE:7A:B6:C6:F6:D6:8A:EC:6A:DA:B5:9E:6E:E6:8D:1F:1A","sha256":"83:72:60:02:7C:42:62:4B:8A:E1:FF:98:06:A0:05:B6:FC:AD:5D:09:1D:87:4F:D9:30:5A:07:6B:F2:0A:1B:CB"}}},"request":{"raw":"GET /meta/dns HTTP/1.1\r\nHost: ab.dns-finder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nOrigin: https://rarepike.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Resolver\r\ncache-control: private, max-age=180, stale-if-error=180, stale-while-revalidate=180\r\nvary: Origin\r\ndate: Sat, 10 Jan 2026 19:28:34 GMT\r\ncontent-length: 2\r\ncontent-type: text/plain; charset=utf-8\r\nvia: 1.1 google\r\nx-resolver: default\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-05-05T16:09:25.702441Z","times_seen":406138,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":139,"dns":4,"connect":26,"send":0,"wait":150,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.30516245705737544","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"104.20.47.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:40.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 20:01:29 GMT","end":"Sat, 28 Mar 2026 21:01:13 GMT"},"fingerprint":{"sha1":"0A:4F:59:C0:9E:D6:F2:3A:7A:3A:91:58:DF:93:B0:73:D2:92:D4:7C","sha256":"91:F6:B5:02:2B:E0:82:BA:A7:9C:50:A8:5F:96:F2:49:AA:2A:A0:0F:85:D5:5F:76:F0:0A:D4:A6:B6:93:80:75"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.30516245705737544 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:40 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 17 Dec 2025 07:35:13 GMT\r\ncache-control: public, max-age=86400\r\nage: 2116963\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9bbe942cc9c576ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-05T16:09:38.866835Z","times_seen":347087,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.nit.ro/i?d=ChRuaXRyby1zaWRlYmFyLWJvdHRvbRoFYmxhbmtCPmh0dHBzOi8vcmFyZXBpa2UuY29tL2ZvdXItY29sb3JzLz9wbGF5ZXJfaWQ9NjQ1MzM3NzYwNzMwOTcyMTc3WiQwMTliYTk2MS1jZjVjLTdjZTctYTZhZi02ODI4Zjk5OWFiZjNiAk5PagIwM5IBIGY3NjljMjdiMzIyMWZmZjZhYWMzZWZhZGQzNTU5NmFhmgEHMmU2OGEyZKIBB2Rpc3BsYXm4AQDQAd4R6gEMCgZmbG9vcnMSAm9u8gEA","fqdn":"t.nit.ro","domain":"nit.ro","tld":"ro"},"ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:44.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nit.ro","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 11:10:04 GMT","end":"Mon, 30 Mar 2026 12:05:59 GMT"},"fingerprint":{"sha1":"92:6D:AD:73:BD:1A:80:BB:5F:0D:5A:8F:E2:5E:1A:94:82:43:B6:CE","sha256":"9F:DE:79:2B:33:4B:8F:C2:71:49:95:3B:5F:95:4D:9D:F0:8D:A4:3B:B4:3C:5A:65:8A:E2:C4:25:AB:B9:56:EC"}}},"request":{"raw":"GET /i?d=ChRuaXRyby1zaWRlYmFyLWJvdHRvbRoFYmxhbmtCPmh0dHBzOi8vcmFyZXBpa2UuY29tL2ZvdXItY29sb3JzLz9wbGF5ZXJfaWQ9NjQ1MzM3NzYwNzMwOTcyMTc3WiQwMTliYTk2MS1jZjVjLTdjZTctYTZhZi02ODI4Zjk5OWFiZjNiAk5PagIwM5IBIGY3NjljMjdiMzIyMWZmZjZhYWMzZWZhZGQzNTU5NmFhmgEHMmU2OGEyZKIBB2Rpc3BsYXm4AQDQAd4R6gEMCgZmbG9vcnMSAm9u8gEA HTTP/1.1\r\nHost: t.nit.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nvary: Origin\r\ndate: Sat, 10 Jan 2026 19:28:44 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T16:09:50.836081Z","times_seen":14695563,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ats-wrapper.privacymanager.io/ats-modules/438cb908-ed61-41e9-b716-05d5f4122a64/ats.js","fqdn":"ats-wrapper.privacymanager.io","domain":"privacymanager.io","tld":"io"},"ip":{"addr":"3.167.2.22","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.privacymanager.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 26 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DF:60:3B:90:B0:FE:13:05:53:10:08:5C:25:5A:F8:C4:CD:D8:84:96","sha256":"0A:53:A4:E2:7B:1C:31:25:0C:53:84:0D:F4:CC:69:55:CE:3F:A6:F9:C3:6C:6E:FA:7E:5F:A8:AA:6B:0C:28:AB"}}},"request":{"raw":"GET /ats-modules/438cb908-ed61-41e9-b716-05d5f4122a64/ats.js HTTP/1.1\r\nHost: ats-wrapper.privacymanager.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 17 Dec 2025 09:28:48 GMT\r\ncontent-encoding: gzip\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Cew7oMr3CYmReLItnxOPq0QI9ri5.6cJ\r\nserver: AmazonS3\r\ndate: Sat, 10 Jan 2026 19:02:08 GMT\r\ncache-control: must-revalidate,public,max-age=3600\r\netag: W/\"a7c65721c4315670f8923421ced6ef15\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 7a83657ba338d5960d8d5abdbe0a3136.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: TqR-xXZL2y7U6iVb35hBpERiaPVo1XTcucqTGiV6HNWeJFvquGW0dw==\r\nage: 1585\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":116129,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"a7c65721c4315670f8923421ced6ef15","sha1":"f3b24a1ab4805575e5e4e430ef55ffdf8a520825","sha256":"edaf8efc176e17af398e5c78a6aba83c4a301eaf656e6705ec2dc68bad9b2bdb","sha512":"f3ec8e8807b510083dff376e7eae8741f0141ba94584a05207459f40e1b255b1908b28774afbe04c0a20a24813c95791c44be763f5253a9ea5ded7c27a94f1c7","ssdeep":"1536:nVkCrsjiIwWTOZ5Yb3oguutaD6vAgxYfXbwaY9NHxfAgQp0GViZtODDKkn5Hq6Fg:GjiIwWTgYb3UuQD6xYbYJf29s","tlshash":"7ab31ace31e1b4e203e754f1902f610ab3b2586a280cd494f7a4dce56d75b8e52b3f69","first_seen":"2025-12-17T12:53:34.128192Z","last_seen":"2026-01-13T09:51:15.903014Z","times_seen":103,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":38,"dns":37,"connect":1,"send":0,"wait":2,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rarepike.com/apple-touch-icon.png","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rarepike.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 19:31:35 GMT","end":"Tue, 10 Feb 2026 20:31:24 GMT"},"fingerprint":{"sha1":"5C:3D:1F:70:2E:60:CE:C9:4E:0A:D5:AA:9C:A5:7C:0A:0C:FE:31:C2","sha256":"BA:96:ED:9F:8B:4E:01:03:11:E1:C8:B1:B5:46:35:18:3C:A1:0A:6D:AB:A7:F6:40:C3:6E:2C:57:1C:71:6E:49"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: rarepike.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/four-colors/?player_id=645337760730972177\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 57169\r\npriority: u=6,i=?0\r\ncontent-type: image/png\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e1e286f3a63695281cad7d4a9d5aeadd\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SScMY2GUkkEJWeVmgNcqp%2BVUrbIA%2BWa8wOlZYxYui5mnl3ygA%2B66yh6gIAF05ks6fg1XogK8awRpLyPBY4eSN%2BMWyho4eQ3rSv9V%2BQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ndate: Sat, 10 Jan 2026 19:28:33 GMT\r\ncf-ray: 9bbe93fe3a5556af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57169,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"561a14d6451a5ce6c86ff823c2e99f52","sha1":"6d35fc7a10309f35b65f07776a7dad4f3ca4ca26","sha256":"6252f0ae964b4c36dcc440dfc7ee58d64a00935e5dfc4fdbb2c5e80c8c9e4a7d","sha512":"508b5a42fcb2fc2deffd1f1990cd4b43920b1cb2b8e429f3491932cd7d95041782b1aae75552a7c951e1f77ccbe243155ceb48f3de5a19b7b5ff449f4a9fb793","ssdeep":"1536:i8fPUUUR5+rCt2KzYTIun0VmyIlP5bX6ICMvti3ix:x/0ODKA/0VlAF6rMvtiA","tlshash":"b24301a357c805dd68e1c7869313a5ea06bfe4f104a3593a22bbcc7979211eec385f71","first_seen":"2026-01-10T19:29:03.402685Z","last_seen":"2026-01-11T18:51:55.787552Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"rarepike.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rarepike.com/four-colors/?player_id=645337760730972177","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-10T19:28:31.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rarepike.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 19:31:35 GMT","end":"Tue, 10 Feb 2026 20:31:24 GMT"},"fingerprint":{"sha1":"5C:3D:1F:70:2E:60:CE:C9:4E:0A:D5:AA:9C:A5:7C:0A:0C:FE:31:C2","sha256":"BA:96:ED:9F:8B:4E:01:03:11:E1:C8:B1:B5:46:35:18:3C:A1:0A:6D:AB:A7:F6:40:C3:6E:2C:57:1C:71:6E:49"}}},"request":{"raw":"GET /four-colors/?player_id=645337760730972177 HTTP/1.1\r\nHost: rarepike.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlink: \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wA7zbY2D22THYTShaOQnx07Zf2p1A0FA1jWsoFlbGIF6M40cwjjH146HrbSGHFmTzajRWE3BTHemFo4dj2ZU4W%2BX4W7WgCi0PEPGmA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9bbe93f6fd2ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":15929,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (474)","md5":"26d9c5cfbffb6ddf250c56b2fc9b3143","sha1":"4cf3b5da990f19b3b117c71b7e0ab55a8d383aa2","sha256":"59aff76b92fccc8a766a759892dc4d94307974ab73e12436914c11d99e9fe791","sha512":"f670c75438eeb91c80406a1b2d16988214c68f9ae12e2096d62a99e68286f9daf5d46c1be9547b185c27c46d736a132850768478c2e95c41d1e3e4cfebdbff05","ssdeep":"384:6DB1hWZVAQxcDiLww3eY98GVADz968R3vbruJfM:E1hWZVAQxcDiLLOY98GGDzkYTruW","tlshash":"4c62e811e55408165163d044baf2b60f7910c207e60a5e947afc92baefcefbb897778c","first_seen":"2026-01-10T19:29:03.404747Z","last_seen":"2026-01-10T19:29:03.404747Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":30,"dns":8,"connect":2,"send":0,"wait":5,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"rarepike.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rarepike.com/css/footer.min.e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855.css","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rarepike.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 19:31:35 GMT","end":"Tue, 10 Feb 2026 20:31:24 GMT"},"fingerprint":{"sha1":"5C:3D:1F:70:2E:60:CE:C9:4E:0A:D5:AA:9C:A5:7C:0A:0C:FE:31:C2","sha256":"BA:96:ED:9F:8B:4E:01:03:11:E1:C8:B1:B5:46:35:18:3C:A1:0A:6D:AB:A7:F6:40:C3:6E:2C:57:1C:71:6E:49"}}},"request":{"raw":"GET /css/footer.min.e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855.css HTTP/1.1\r\nHost: rarepike.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/four-colors/?player_id=645337760730972177\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:32 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Nd76mMG6BT44XVILZIZzsfy7D2gTwkIkE5GdBQwQSIvuIjWU%2B79ek86Z1gDwkABMptcBaJubqY7JoEja68gjZtVm6GRKpNHKiI%3D\"}]}\r\netag: W/\"9e7a27539226d700e116522ee435029d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bbe93f85a0a56af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T16:09:50.836081Z","times_seen":14695563,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"rarepike.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/cmp/lang.png","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:36.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 10:02:28 GMT","end":"Wed, 25 Mar 2026 11:02:16 GMT"},"fingerprint":{"sha1":"BE:2C:8F:96:6F:C8:3F:B0:C2:37:3B:C5:08:E6:CC:09:AB:FC:68:AE","sha256":"25:49:78:BA:EE:A8:03:BC:30:D0:30:29:56:E1:D5:D8:A2:A1:B0:F5:B6:FA:BB:7D:10:70:D9:C9:07:96:AB:DE"}}},"request":{"raw":"GET /cmp/lang.png HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=SsPD7N.sGE5x8YPcWVGt2P8gy_HeqPnwSa2.2i5l7tk-1768073312-1.0.1.1-PtVOAfysf960pOrMQm3VmHEvl06RWxxng6hv0ek.Dfbqv5TA5Z.I8auKw7kmRW5nUu9fVyNrKleeIiQ4BtleFspZnXYFekt6vDa5zTCUqkk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1887\r\ncf-ray: 9bbe94133f4cb518-OSL\r\nx-guploader-uploadid: AHVrFxOsBHpMwQWnelhbeA5Izx0RNkZpZ37vEr0vt7F6xVIQfd-3y2rHQK3-XYI7xTINPIq7yAD0BZs\r\nx-goog-generation: 1666344058779792\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1887\r\nx-goog-hash: crc32c=7x+tRA==, md5=ygcqOWX0miwkLEXVNRY6Uw==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type\r\nexpires: Sat, 10 Jan 2026 19:40:03 GMT\r\ncache-control: public, max-age=3600\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Fri, 21 Oct 2022 09:20:58 GMT\r\netag: \"ca072a3965f49a2c242c45d535163a53\"\r\nage: 2912\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":1887,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 23, 8-bit/color RGBA, non-interlaced","md5":"ca072a3965f49a2c242c45d535163a53","sha1":"365e8c94931edd4bb5548861d856390662fc39bb","sha256":"eda5ec1c59939f001bdc15f557f3a905110aac0a60afc5a1eb92d8cdc2d2cbb5","sha512":"55d24b34455ed2ee5ee5cc07fe9b51fec9fbe02e29d97d775cb1529231b28d574f913b8f2cb354551c736ffcc1633d25153ae487f487a7c3daa445cd06317ee7","ssdeep":"","tlshash":"9c411b19e4002d406744f92259d215239e239c12abc0e253bacfc8732cb3bf138769cf","first_seen":"2023-04-16T18:13:19Z","last_seen":"2026-05-04T23:07:04.924071Z","times_seen":2948,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/cmp/cancel.png","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:36.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 10:02:28 GMT","end":"Wed, 25 Mar 2026 11:02:16 GMT"},"fingerprint":{"sha1":"BE:2C:8F:96:6F:C8:3F:B0:C2:37:3B:C5:08:E6:CC:09:AB:FC:68:AE","sha256":"25:49:78:BA:EE:A8:03:BC:30:D0:30:29:56:E1:D5:D8:A2:A1:B0:F5:B6:FA:BB:7D:10:70:D9:C9:07:96:AB:DE"}}},"request":{"raw":"GET /cmp/cancel.png HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=SsPD7N.sGE5x8YPcWVGt2P8gy_HeqPnwSa2.2i5l7tk-1768073312-1.0.1.1-PtVOAfysf960pOrMQm3VmHEvl06RWxxng6hv0ek.Dfbqv5TA5Z.I8auKw7kmRW5nUu9fVyNrKleeIiQ4BtleFspZnXYFekt6vDa5zTCUqkk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1302\r\ncf-ray: 9bbe94133f4eb518-OSL\r\nx-guploader-uploadid: AHVrFxMJLZUqs4LuUgm8Dxkc79MXJ2VGgzt6gGAhipua7TbEgOUdF1TvcrG3d7FIw8fg5M0nhOPfVGo\r\nexpires: Sat, 10 Jan 2026 19:14:25 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 21 Oct 2022 09:20:58 GMT\r\netag: \"c707b2d501a53bc2c66e98e4e5cabefb\"\r\nx-goog-generation: 1666344058825998\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 1302\r\nx-goog-hash: crc32c=QrhBNA==, md5=xwey1QGlO8LGbpjk5cq++w==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 2905\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1302,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"c707b2d501a53bc2c66e98e4e5cabefb","sha1":"428a51cba1d520eae0c90de0cf367fd0ea0b9622","sha256":"89863d0411e5273c7c2befe50bceeab57034e26b5df8751cc13c3bd78c73511d","sha512":"e8efac1e9234f7257b67623921c485d3d05c2160937276971ecf6b4ccd57f6f2842a507639b67b9dfbf3902c65e66fc0e3cce9d0cf22aad11a31b6f1abbe1560","ssdeep":"","tlshash":"c4218089ddd029c3b909ddc220fe50366a2349e086e8d466b9ced01a08771a50db4acb","first_seen":"2023-04-16T23:52:30Z","last_seen":"2026-05-04T23:07:04.900409Z","times_seen":2948,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pbs.nitropay.com/openrtb2/auction","fqdn":"pbs.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:43.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nitropay.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 06:21:50 GMT","end":"Fri, 10 Apr 2026 07:17:46 GMT"},"fingerprint":{"sha1":"51:E6:99:26:82:BD:D8:A4:08:7B:87:D9:92:6F:98:35:52:77:BB:48","sha256":"4A:26:58:12:4F:A7:E1:54:9B:11:BF:01:B6:E9:A7:80:78:64:A5:8A:50:0D:7F:FC:4B:4A:2E:3D:1F:D1:F7:34"}}},"request":{"raw":"POST /openrtb2/auction HTTP/1.1\r\nHost: pbs.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\ncontent-type: text/plain\r\nContent-Length: 2291\r\nOrigin: https://rarepike.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=SsPD7N.sGE5x8YPcWVGt2P8gy_HeqPnwSa2.2i5l7tk-1768073312-1.0.1.1-PtVOAfysf960pOrMQm3VmHEvl06RWxxng6hv0ek.Dfbqv5TA5Z.I8auKw7kmRW5nUu9fVyNrKleeIiQ4BtleFspZnXYFekt6vDa5zTCUqkk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2291,"data":"{\"imp\":[{\"instl\":0,\"ext\":{\"gpid\":\"/nitro/1680/2270/nitro-video\",\"data\":{\"pbadslot\":\"/nitro/1680/2270/nitro-video\",\"adserver\":{\"adslot\":\"nitro-video\"},\"keywords\":[]},\"prebid\":{\"bidder\":{\"inmobi-s2s\":{\"plc\":\"10000344134\"},\"msft-s2s\":{\"placement_id\":35743233}},\"adunitcode\":\"nitro-video\"}},\"video\":{\"pos\":1,\"api\":[1,2,7],\"delivery\":[2],\"placement\":5,\"plcmt\":4,\"mimes\":[\"application/javascript\",\"video/mp4\",\"video/webm\"],\"protocols\":[1,2,3,4,5,6,7,8,11,12,13,14],\"playbackmethod\":[3],\"minduration\":5,\"maxduration\":30,\"w\":300,\"h\":169,\"startdelay\":0,\"linearity\":1,\"skip\":0},\"id\":\"nitro-video\",\"secure\":1}],\"source\":{\"tid\":\"82636590-b3ff-4c97-932c-93573e56002b\",\"ext\":{\"schain\":{\"ver\":\"1.0\",\"complete\":1,\"nodes\":[{\"asi\":\"nitropay.com\",\"sid\":\"1680\",\"hp\":1}]}}},\"device\":{\"w\":1280,\"h\":1024,\"dnt\":0,\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"language\":\"en\",\"ext\":{\"vpw\":1280,\"vph\":1024}},\"site\":{\"domain\":\"rarepike.com\",\"publisher\":{\"domain\":\"rarepike.com\",\"id\":\"1\"},\"page\":\"https://rarepike.com/four-colors/?player_id=645337760730972177\",\"name\":\"rarepike.com\",\"privacypolicy\":1,\"cattax\":7,\"cat\":[\"270\"],\"kwarray\":[\"Mobile Gaming\",\"Wiki\",\"Guides\",\"Game Database\",\"Casual Game\",\"Creature Collection\",\"Game Companion\",\"Fantasy\",\"Fansite\",\"Dragon Mania Legends\"],\"ext\":{\"data\":{\"documentLang\":\"en-us\"}},\"content\":{\"language\":\"en\"}},\"user\":{\"geo\":{\"region\":\"03\",\"country\":\"NO\"},\"ext\":{\"consent\":\"CQdz-EAQdz-EADyvWAENCMFAAAAAAAAAAAAAAAAAAAAA.IAAA\",\"eids\":[{\"source\":\"rarepike.com\",\"uids\":[{\"id\":\"f769c27b3221fff6aac3efadd35596aa\",\"atype\":1,\"ext\":{\"stype\":\"ppuid\"}}]},{\"source\":\"pubcid.org\",\"uids\":[{\"id\":\"f90e837f-b544-41fd-a905-31b94e8fd077\",\"atype\":1}]}],\"ConsentedProvidersSettings\":{\"consented_providers\":\"1~\"}}},\"regs\":{\"gpp_sid\":[],\"ext\":{\"gdpr\":1,\"us_privacy\":\"1---\"}},\"ext\":{\"prebid\":{\"auctiontimestamp\":1768073323915,\"targeting\":{\"includewinners\":true,\"includebidderkeys\":false},\"aliases\":{\"inmobi-s2s\":\"inmobi\",\"msft-s2s\":\"appnexus\",\"sonobi-s2s\":\"sonobi\"},\"floors\":{\"enabled\":true},\"schains\":[{\"bidders\":[\"inmobi-s2s\",\"msft-s2s\"],\"schain\":{\"ver\":\"1.0\",\"complete\":1,\"nodes\":[{\"asi\":\"nitropay.com\",\"sid\":\"1680\",\"hp\":1}]}}],\"channel\":{\"name\":\"pbjs\",\"version\":\"v10.16.0\"}},\"tmaxmax\":2200},\"id\":\"85e5bc7d-2683-4240-8d6d-2e7a297de093\",\"test\":0,\"tmax\":1500}"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rarepike.com\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: application/json\r\nexpires: 0\r\npragma: no-cache\r\nvary: Accept-Encoding,Origin\r\nx-prebid: pbs-go/3.29.0\r\ndate: Sat, 10 Jan 2026 19:28:44 GMT\r\ncontent-length: 304\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":304,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"709f710479cd328b734d4051c596f62d","sha1":"da9dce1135036d3e707b3e6297a7c1780548f36c","sha256":"f9634904f0b26e7048cfa0dc9fbd9e7d051dd1e5ed806842177019b0cf4dc385","sha512":"4cecbdf7bf1d678caa44e0a81ac6ae33fa3d29337b481850995f081227356357ac386aa7da98b8c13d496f0e6123ae5a9a76ebd0298dcca328a3c9d3eaa23d48","ssdeep":"","tlshash":"1ae0eb57183a19f1bb3337837d0f189100aa3094d5acdc1f0e2cc33c092649e002e121","first_seen":"2026-01-10T19:29:03.40867Z","last_seen":"2026-01-10T19:29:03.40867Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rarepike.com/four-colors/api/leaderboard","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rarepike.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 19:31:35 GMT","end":"Tue, 10 Feb 2026 20:31:24 GMT"},"fingerprint":{"sha1":"5C:3D:1F:70:2E:60:CE:C9:4E:0A:D5:AA:9C:A5:7C:0A:0C:FE:31:C2","sha256":"BA:96:ED:9F:8B:4E:01:03:11:E1:C8:B1:B5:46:35:18:3C:A1:0A:6D:AB:A7:F6:40:C3:6E:2C:57:1C:71:6E:49"}}},"request":{"raw":"GET /four-colors/api/leaderboard HTTP/1.1\r\nHost: rarepike.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/four-colors/?player_id=645337760730972177\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 10 Jan 2026 19:28:32 GMT\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UhHBY9uZHBOuQbFc7ZfB%2Flom3b6MuiUoV46su7xMrYbRx2mTGSP8f8KpxeAdsJtZe9SFQwL33E7373hXdbDpBB2GZDQtZmA%2BG2g%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bbe93faca2756af-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1330,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a87b8743a25595c4e5f3c88e90530c20","sha1":"cee55575108071751e1c31374ef221d62b1a72e7","sha256":"121d07fb431f5ebfc265ba34e9f96b49d39a3e5ccb1a6c97d9683f1846cb80d0","sha512":"916c032459f4c4b104480f9efbe4870d62e4dbb804bfea5c88b9aeb75e43c01c73fed826abc404ff0db6aa68f530c2e04578b5dd91bf2dc6674ae6d5398d6410","ssdeep":"","tlshash":"172179488c0a0cbd9eb456895f03bb8b70bf3103a1d8cd59f9619e1e45d46ba726051b","first_seen":"2026-01-10T19:29:03.410933Z","last_seen":"2026-01-10T19:29:03.410933Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"rarepike.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.confiant-integrations.net/gptprebidnative/202510211058/wrap.js","fqdn":"cdn.confiant-integrations.net","domain":"confiant-integrations.net","tld":"net"},"ip":{"addr":"104.18.43.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:33.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"confiant-integrations.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 05:27:32 GMT","end":"Wed, 25 Mar 2026 06:27:29 GMT"},"fingerprint":{"sha1":"0E:ED:E7:87:58:01:87:1A:5B:B4:9F:3C:98:EE:4D:C3:A8:3C:7C:0F","sha256":"71:8F:3A:C1:AD:9B:8C:8F:77:04:D3:23:35:E7:77:07:4F:5B:C8:00:AE:C9:D0:45:43:D2:46:84:DC:F8:99:41"}}},"request":{"raw":"GET /gptprebidnative/202510211058/wrap.js HTTP/1.1\r\nHost: cdn.confiant-integrations.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:33 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 143544\r\ncf-ray: 9bbe9402ab3a56ba-OSL\r\nx-amz-id-2: Z46vVMJiyn8k/D1y29boOmeXv+EO/vZZIhERPsDJMvx51Xf29La9cBg2Wu0Q8qZ9pWDgS1t4G9E=\r\nx-amz-request-id: WWPADY8D7C98TB5S\r\nlast-modified: Tue, 21 Oct 2025 15:08:03 GMT\r\netag: \"876a80f69a202150c82ae35737a4a917\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 1867238\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":401898,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10747)","md5":"30ecef15a90a58bc1b6d2f072d1c99a4","sha1":"8e8d6fcaeab99090e71bc9dca7e0dcd337e07c32","sha256":"f0a25201fe65affc4253ad0c2bff974d05c65e8c066bf6d4adcbbfa8838cac82","sha512":"668d1f91005b7e5f9f38c9780c06e5b3b57cc880a9be3452e56a2c9fd3ad83d7aa25a33c7d127f774ae8999e81cc36049fe0272b0507df199e5f476134549db1","ssdeep":"6144:5M1DwwSFShG2bJjCsCu3F5AUdpZzRTMMknX63+h4njtvsur6rstp+2zhhzIvqBsG:yils+sCu17dpZzBh2vkZfw4","tlshash":"fe84d6416ac0bc8913979f7a762f70c1ed5b4ab628d40c9bd105fca469dca13fec66b0","first_seen":"2025-10-21T18:44:12.541757Z","last_seen":"2026-01-12T10:12:00.985415Z","times_seen":472,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t.nit.ro/p?d=Qj5odHRwczovL3JhcmVwaWtlLmNvbS9mb3VyLWNvbG9ycy8%2FcGxheWVyX2lkPTY0NTMzNzc2MDczMDk3MjE3N1okMDE5YmE5NjEtYmRlNy03ZGY0LTljNTMtMzI4Y2FlMDQ5ODViYgJOT2oCMDOSASBmNzY5YzI3YjMyMjFmZmY2YWFjM2VmYWRkMzU1OTZhYZoBBzJlNjhhMmS4AQDQAd4R2AEB6gEMCgZmbG9vcnMSAm9u","fqdn":"t.nit.ro","domain":"nit.ro","tld":"ro"},"ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:33.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nit.ro","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Dec 2025 11:10:04 GMT","end":"Mon, 30 Mar 2026 12:05:59 GMT"},"fingerprint":{"sha1":"92:6D:AD:73:BD:1A:80:BB:5F:0D:5A:8F:E2:5E:1A:94:82:43:B6:CE","sha256":"9F:DE:79:2B:33:4B:8F:C2:71:49:95:3B:5F:95:4D:9D:F0:8D:A4:3B:B4:3C:5A:65:8A:E2:C4:25:AB:B9:56:EC"}}},"request":{"raw":"GET /p?d=Qj5odHRwczovL3JhcmVwaWtlLmNvbS9mb3VyLWNvbG9ycy8%2FcGxheWVyX2lkPTY0NTMzNzc2MDczMDk3MjE3N1okMDE5YmE5NjEtYmRlNy03ZGY0LTljNTMtMzI4Y2FlMDQ5ODViYgJOT2oCMDOSASBmNzY5YzI3YjMyMjFmZmY2YWFjM2VmYWRkMzU1OTZhYZoBBzJlNjhhMmS4AQDQAd4R2AEB6gEMCgZmbG9vcnMSAm9u HTTP/1.1\r\nHost: t.nit.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nvary: Origin\r\ndate: Sat, 10 Jan 2026 19:28:34 GMT\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T16:09:50.836081Z","times_seen":14695563,"resource_available":true,"data":null}},"time_used":829,"timings":{"blocked":346,"dns":33,"connect":13,"send":0,"wait":136,"receive":0,"ssl":298},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pbs.nitropay.com/cookie_sync","fqdn":"pbs.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:43.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nitropay.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 06:21:50 GMT","end":"Fri, 10 Apr 2026 07:17:46 GMT"},"fingerprint":{"sha1":"51:E6:99:26:82:BD:D8:A4:08:7B:87:D9:92:6F:98:35:52:77:BB:48","sha256":"4A:26:58:12:4F:A7:E1:54:9B:11:BF:01:B6:E9:A7:80:78:64:A5:8A:50:0D:7F:FC:4B:4A:2E:3D:1F:D1:F7:34"}}},"request":{"raw":"POST /cookie_sync HTTP/1.1\r\nHost: pbs.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\ncontent-type: text/plain\r\nContent-Length: 343\r\nOrigin: https://rarepike.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=SsPD7N.sGE5x8YPcWVGt2P8gy_HeqPnwSa2.2i5l7tk-1768073312-1.0.1.1-PtVOAfysf960pOrMQm3VmHEvl06RWxxng6hv0ek.Dfbqv5TA5Z.I8auKw7kmRW5nUu9fVyNrKleeIiQ4BtleFspZnXYFekt6vDa5zTCUqkk\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":343,"data":"{\"uuid\":\"3fec0676-7e17-4f26-bce3-7607df15eead\",\"bidders\":[\"inmobi\",\"appnexus\",\"sonobi\"],\"account\":\"1\",\"filterSettings\":{\"image\":{\"bidders\":\"*\",\"filter\":\"include\"},\"iframe\":{\"bidders\":\"*\",\"filter\":\"include\"}},\"limit\":5,\"gdpr\":1,\"gdpr_consent\":\"CQdz-EAQdz-EADyvWAENCMFAAAAAAAAAAAAAAAAAAAAA.IAAA\",\"us_privacy\":\"1---\",\"gpp_sid\":\"\",\"coopSync\":true}"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rarepike.com\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\nexpires: 0\r\npragma: no-cache\r\nvary: Accept-Encoding,Origin\r\ndate: Sat, 10 Jan 2026 19:28:43 GMT\r\ncontent-length: 42\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b6291da4d85da80d3f192b84b39eae62","sha1":"2bf85d0e268c5343ef71bb11399db3dc594ba1eb","sha256":"57ce2b08ef8da65d0f5627d6e41c7725efd32d3e377dea3c91025a375ae93fdf","sha512":"10fac6d4d5714848db12ec3d5ee8ff080c3934334f9044da6cfa6d30707de22b140ccb9b91048c3e198e9d3afa3e46c0c41f0765118e38fc663c98f1e0277142","ssdeep":"","tlshash":"91900201200845180a90045444040ab52a950d40142f40b8050c6066064659288c8512","first_seen":"2023-04-06T16:04:44Z","last_seen":"2026-05-04T21:26:20.525153Z","times_seen":2547,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rarepike.com/favicon.svg","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rarepike.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 19:31:35 GMT","end":"Tue, 10 Feb 2026 20:31:24 GMT"},"fingerprint":{"sha1":"5C:3D:1F:70:2E:60:CE:C9:4E:0A:D5:AA:9C:A5:7C:0A:0C:FE:31:C2","sha256":"BA:96:ED:9F:8B:4E:01:03:11:E1:C8:B1:B5:46:35:18:3C:A1:0A:6D:AB:A7:F6:40:C3:6E:2C:57:1C:71:6E:49"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: rarepike.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/four-colors/?player_id=645337760730972177\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:33 GMT\r\npriority: u=6,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uFQqk3KRl9H5cqrqVOArJJJo1FuXz9kRPV5%2FZWiJpocMAUTSnW9xI5Z%2FiXc1G0C3OBwx8B%2BoEDEDybvENfYqxjTpyJ6P0t%2BfbLs%3D\"}]}\r\netag: W/\"8d694267c10efbe8108c01c370010a02\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bbe93fe3a5656af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1378020,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"731f39d91993a9ae17b1b11f6abba26d","sha1":"3f5ed7669691397ac60d8c6ad3f8d9a1e2583898","sha256":"b3fe6ed19dfa9e752d63cc5f2c5eb14390b4f742621d4127c95f3f26ad9e3c5e","sha512":"6d4591139baa3bdec18cb7f84c28bc7ec3d5f5089c2d162d39a598d2bd15d7dcf5b9d16ee58a1b8da8dc77dafca5795dd45f2d35ba78f45993f104bc1f43f6a2","ssdeep":"24576:3bzcge19pUjtZtoI6RZrhPfaqDtfCjEkAwt3Qs:Xttto3rEKQgtwh1","tlshash":"602533794ae57fa9a62cf17d332f4f26bf204e4714ccf6cb62513b92e04b9244612866","first_seen":"2026-01-10T19:29:03.414914Z","last_seen":"2026-01-11T18:51:55.810272Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"rarepike.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/ads-captify.2015da149c7dcef90582.js","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:33.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 10:02:28 GMT","end":"Wed, 25 Mar 2026 11:02:16 GMT"},"fingerprint":{"sha1":"BE:2C:8F:96:6F:C8:3F:B0:C2:37:3B:C5:08:E6:CC:09:AB:FC:68:AE","sha256":"25:49:78:BA:EE:A8:03:BC:30:D0:30:29:56:E1:D5:D8:A2:A1:B0:F5:B6:FA:BB:7D:10:70:D9:C9:07:96:AB:DE"}}},"request":{"raw":"GET /ads-captify.2015da149c7dcef90582.js HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=SsPD7N.sGE5x8YPcWVGt2P8gy_HeqPnwSa2.2i5l7tk-1768073312-1.0.1.1-PtVOAfysf960pOrMQm3VmHEvl06RWxxng6hv0ek.Dfbqv5TA5Z.I8auKw7kmRW5nUu9fVyNrKleeIiQ4BtleFspZnXYFekt6vDa5zTCUqkk\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:33 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\ncf-ray: 9bbe94039820b518-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 352156\r\ncache-control: public, max-age:43200\r\netag: W/\"a84a120fe9e7fc2d94e23f9507c5d848\"\r\nexpires: Wed, 06 Jan 2027 17:39:16 GMT\r\nlast-modified: Tue, 06 Jan 2026 17:38:35 GMT\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nvary: Accept-Encoding\r\naccess-control-expose-headers: Content-Type\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-goog-generation: 1767721115225898\r\nx-goog-hash: crc32c=5Q7mFw==, md5=qEoSD+nn/C2U4j+VB8XYSA==\r\nx-goog-meta-goog-reserved-file-mtime: 1767720118\r\nx-goog-metageneration: 1\r\nx-goog-storage-class: MULTI_REGIONAL\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 892\r\nx-guploader-uploadid: AHVrFxNN9xaJcWGZbYFkAnPgT4_gQ2MLC-3IavUnRlPhjIIhd7P9HPBvmgnlvZAbQqOozt5o\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":892,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (892), with no line terminators","md5":"a84a120fe9e7fc2d94e23f9507c5d848","sha1":"4f8cfb304111c0186893260b2b6f30184bd3b03d","sha256":"eeaf94da90366254c9bd9e785dd8885dc14eb2802b41626208d111aea09c8fdb","sha512":"1bd201c3adf8796217770b11caf006023216e172e040ac87ea181cabcb9682dd10a84df8a259df8ed498d2d763df579c7ef8f5bbae33a1d9f16998840d5933a2","ssdeep":"","tlshash":"3211230fe246a37a31e818ff5577a210e4791090f81c812065aa4c813d64dcf47b9ecf","first_seen":"2026-01-07T08:55:16.621861Z","last_seen":"2026-05-04T23:07:04.919405Z","times_seen":302,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.nitropay.com/cmp/logo.png","fqdn":"s.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"104.18.3.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:36.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nitropay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 10:02:28 GMT","end":"Wed, 25 Mar 2026 11:02:16 GMT"},"fingerprint":{"sha1":"BE:2C:8F:96:6F:C8:3F:B0:C2:37:3B:C5:08:E6:CC:09:AB:FC:68:AE","sha256":"25:49:78:BA:EE:A8:03:BC:30:D0:30:29:56:E1:D5:D8:A2:A1:B0:F5:B6:FA:BB:7D:10:70:D9:C9:07:96:AB:DE"}}},"request":{"raw":"GET /cmp/logo.png HTTP/1.1\r\nHost: s.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=SsPD7N.sGE5x8YPcWVGt2P8gy_HeqPnwSa2.2i5l7tk-1768073312-1.0.1.1-PtVOAfysf960pOrMQm3VmHEvl06RWxxng6hv0ek.Dfbqv5TA5Z.I8auKw7kmRW5nUu9fVyNrKleeIiQ4BtleFspZnXYFekt6vDa5zTCUqkk\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 2592\r\ncf-ray: 9bbe94133f57b518-OSL\r\nx-guploader-uploadid: AHVrFxOH6LHUv3ChoTzmjcC7ru4_bUiGhqPJcH8L4LW9pVpMR5n5S1m3I5eMDspWaGm7cVP-\r\nexpires: Sat, 10 Jan 2026 19:40:08 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Fri, 21 Oct 2022 09:20:58 GMT\r\netag: \"940aa5b81e99bbb7414acc474a89bad9\"\r\nx-goog-generation: 1666344058842900\r\nx-goog-metageneration: 1\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 2592\r\nx-goog-hash: crc32c=naGVVg==, md5=lAqluB6Zu7dBSsxHSom62Q==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Content-Type\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 2907\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000; includeSubDomains\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]}],"data":{"size":2592,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 62, 8-bit/color RGBA, non-interlaced","md5":"940aa5b81e99bbb7414acc474a89bad9","sha1":"e19998a580400a11fe57b72acb87e6eb27fbf1ee","sha256":"6d8fea63a817b75ec9bfbc153b60b576dd31392e4d2afbec0d83cc813f8aca4d","sha512":"5ded9bdf3259435ed290332bfce4fdb22ec1cde73fa812f809b0640d5111bbbda2e929937b935940e624e5a3b1e165b2281cc7b73bcd4955e2bfd1b3f4cae4bf","ssdeep":"","tlshash":"23511a8fa121b483b60d89617cf652a3ac5304d4ca919d63edcd8c3918e147746e57c3","first_seen":"2023-04-16T18:13:19Z","last_seen":"2026-05-04T23:07:04.903562Z","times_seen":2946,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rarepike.com/css/hugo-main.min.8a75e32b2f585230145c1d38131e09981c8a02e0d79ab549c9999593d719d5fa.css","fqdn":"rarepike.com","domain":"rarepike.com","tld":"com"},"ip":{"addr":"104.21.20.198","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rarepike.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 12 Nov 2025 19:31:35 GMT","end":"Tue, 10 Feb 2026 20:31:24 GMT"},"fingerprint":{"sha1":"5C:3D:1F:70:2E:60:CE:C9:4E:0A:D5:AA:9C:A5:7C:0A:0C:FE:31:C2","sha256":"BA:96:ED:9F:8B:4E:01:03:11:E1:C8:B1:B5:46:35:18:3C:A1:0A:6D:AB:A7:F6:40:C3:6E:2C:57:1C:71:6E:49"}}},"request":{"raw":"GET /css/hugo-main.min.8a75e32b2f585230145c1d38131e09981c8a02e0d79ab549c9999593d719d5fa.css HTTP/1.1\r\nHost: rarepike.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/four-colors/?player_id=645337760730972177\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:32 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rF0N7b8hvi930UR6fzQ3gKlaKa%2BGjb16CiGXAuBb5NEFsQGvgnX7Y9AYvQ2fEEbCVWgEeKsc4Mu6%2B4FSDI%2BIfLz8dd0ioemFgBlb8w%3D%3D\"}]}\r\netag: W/\"9c0842fb4100b15c54799a2ce3909f74\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9bbe93f85a0856af-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34771,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (34771), with no line terminators","md5":"afcc60837fe602fb763538b21cc905c3","sha1":"ee81a95fc118adb69e7b68db37a8a2a8c42bb489","sha256":"8a75e32b2f585230145c1d38131e09981c8a02e0d79ab549c9999593d719d5fa","sha512":"220100b676a90e40d4159446911a2f7bc2540d71a35fec05184206767133bba04b31851d59dc025306ebfed3f384135fc0f1fc0fa8d34e0ee4903a6aa4a0a9a1","ssdeep":"384:kKBwCtECuCuQnXqhqpwq5ASnVOL1sAM8ZStcXC1jlV4v6juR04HShJxC3wBkS:kKBwC3GqP/b8ZStcXC1jLfPv","tlshash":"5ff2f7e223fca365f023da7270d1a4c6710479124aa303bdcbec7562db86cf9a65674d","first_seen":"2026-01-10T19:29:03.41873Z","last_seen":"2026-01-11T18:51:55.75618Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-10","alert":"Sinkholed","trigger":"rarepike.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@100..900\u0026family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Inter:wght@100..900\u0026family=Lato:ital,wght@0,100;0,300;0,400;0,700;0,900;1,100;1,300;1,400;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 10 Jan 2026 19:28:32 GMT\r\ndate: Sat, 10 Jan 2026 19:28:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10819,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"837cb93980473d32f65985772ec7152a","sha1":"ebadb1e457d4476419c2ccdea94b09285476f6f4","sha256":"74bee3f181c2adfdcdae234f23b7a3872fdd710f61f6d475acd14296de457f82","sha512":"305b31531255a89259eb077b1d81083dbb7b5e470c530293cff6bed197bf80aab6d641d3137e9435b34b6ef2a3004a78a7e9d2b401ea299658c6147ed1ed8507","ssdeep":"192:BNxEtO3UyxHC3pv33pUn/J3n/lOw3Oir/i3r/Ux/o3x/TpwOp7RIu71D5Mp76D:j7E353m/R/lFx7u7Up8pTHF","tlshash":"7122cc92046ba504db830dc223ce7e36ff4e62506445d579affe18c8bc9bd6a5361b0d","first_seen":"2025-09-30T15:38:21.602277Z","last_seen":"2026-01-11T18:51:55.79622Z","times_seen":9,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":114,"dns":1,"connect":22,"send":0,"wait":33,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"floors.nitropay.com/f?s=2270\u0026c=NO\u0026v=2","fqdn":"floors.nitropay.com","domain":"nitropay.com","tld":"com"},"ip":{"addr":"35.244.144.25","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:32.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nitropay.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 06:21:50 GMT","end":"Fri, 10 Apr 2026 07:17:46 GMT"},"fingerprint":{"sha1":"51:E6:99:26:82:BD:D8:A4:08:7B:87:D9:92:6F:98:35:52:77:BB:48","sha256":"4A:26:58:12:4F:A7:E1:54:9B:11:BF:01:B6:E9:A7:80:78:64:A5:8A:50:0D:7F:FC:4B:4A:2E:3D:1F:D1:F7:34"}}},"request":{"raw":"GET /f?s=2270\u0026c=NO\u0026v=2 HTTP/1.1\r\nHost: floors.nitropay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nOrigin: https://rarepike.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\nvary: Origin\r\ndate: Sat, 10 Jan 2026 19:28:32 GMT\r\ncontent-length: 26\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-05-05T16:09:47.959396Z","times_seen":622171,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":134,"dns":19,"connect":12,"send":0,"wait":138,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"btloader.com/tag?o=6278260873756672\u0026upapi=true","fqdn":"btloader.com","domain":"btloader.com","tld":"com"},"ip":{"addr":"172.66.171.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:33.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"btloader.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 25 Nov 2025 22:30:52 GMT","end":"Mon, 23 Feb 2026 23:30:36 GMT"},"fingerprint":{"sha1":"40:2C:9D:2F:E5:58:9C:2A:66:5D:63:80:3D:ED:AA:7A:7A:D2:2E:01","sha256":"07:51:1D:14:54:2B:68:77:CA:70:DF:BA:54:81:DE:9F:58:DC:F7:C9:0C:36:88:FB:76:3A:36:C9:15:9E:38:DC"}}},"request":{"raw":"GET /tag?o=6278260873756672\u0026upapi=true HTTP/1.1\r\nHost: btloader.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:33 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9bbe94037e3e568e-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, stale-if-error=3600, stale-while-revalidate=300\r\ncontent-encoding: gzip\r\netag: \"30c76f552f60fb07a15d9d5514f83f74\"\r\nlast-modified: Sat, 10 Jan 2026 19:10:23 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 google\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":151835,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65422)","md5":"0a524640fc38caf88b99687f0f9980d4","sha1":"0ea667d523b801a79b352d43418f688085e59963","sha256":"6e1877d2eea9e85755a162d0d9d6048898f083042af0cbe055a0db6eb41b387e","sha512":"30f3cf638e20bd33ea8fb8b0f5b3bca5c34ad6d3aa5a040b0d5d93043c25285d9ed1f9e3afade98ec022b24c3880fb8af77be28b82a384575dbc6bff208f4173","ssdeep":"1536:rVCz++FOpLobdFsovpr7Od+oiSpVqnxeHqYBbygySIiONZt:Aaonr7O4UpIeHqYBbygyStOrt","tlshash":"a8e3728db66065fe46ce8255c1263b026f6c356ab687b840fc0f5e8138ff5ca243597b","first_seen":"2026-01-09T20:35:42.916398Z","last_seen":"2026-01-17T01:58:01.147384Z","times_seen":24,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":23,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:38.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rarepike.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 08 Jan 2026 20:27:03 GMT\r\nexpires: Fri, 08 Jan 2027 20:27:03 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nage: 169295\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-05-05T16:33:33.016507Z","times_seen":9101,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":21,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=1\u0026e=0.6078071198935491","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"104.20.47.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:39.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 20:01:29 GMT","end":"Sat, 28 Mar 2026 21:01:13 GMT"},"fingerprint":{"sha1":"0A:4F:59:C0:9E:D6:F2:3A:7A:3A:91:58:DF:93:B0:73:D2:92:D4:7C","sha256":"91:F6:B5:02:2B:E0:82:BA:A7:9C:50:A8:5F:96:F2:49:AA:2A:A0:0F:85:D5:5F:76:F0:0A:D4:A6:B6:93:80:75"}}},"request":{"raw":"GET /px.gif?ch=1\u0026e=0.6078071198935491 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 17 Dec 2025 07:35:13 GMT\r\ncache-control: public, max-age=86400\r\nage: 2116962\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9bbe9426699c76ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-05T16:09:38.866835Z","times_seen":347087,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ab.dns-finder.com/meta/dns","fqdn":"ab.dns-finder.com","domain":"dns-finder.com","tld":"com"},"ip":{"addr":"34.36.200.111","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:39.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ab.dns-finder.com","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sun, 14 Dec 2025 15:59:44 GMT","end":"Sat, 14 Mar 2026 16:53:38 GMT"},"fingerprint":{"sha1":"D7:71:85:BE:7A:B6:C6:F6:D6:8A:EC:6A:DA:B5:9E:6E:E6:8D:1F:1A","sha256":"83:72:60:02:7C:42:62:4B:8A:E1:FF:98:06:A0:05:B6:FC:AD:5D:09:1D:87:4F:D9:30:5A:07:6B:F2:0A:1B:CB"}}},"request":{"raw":"GET /meta/dns HTTP/1.1\r\nHost: ab.dns-finder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nOrigin: https://rarepike.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-Resolver\r\ncache-control: private, max-age=180, stale-if-error=180, stale-while-revalidate=180\r\nvary: Origin\r\ndate: Sat, 10 Jan 2026 19:28:39 GMT\r\ncontent-length: 2\r\ncontent-type: text/plain; charset=utf-8\r\nvia: 1.1 google\r\nx-resolver: default\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-05-05T16:09:25.702441Z","times_seen":406138,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad-delivery.net/px.gif?ch=2\u0026e=0.9404689453429094","fqdn":"ad-delivery.net","domain":"ad-delivery.net","tld":"net"},"ip":{"addr":"104.20.47.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rarepike.com/four-colors/?player_id=645337760730972177","date":"2026-01-10T19:28:39.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ad-delivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 20:01:29 GMT","end":"Sat, 28 Mar 2026 21:01:13 GMT"},"fingerprint":{"sha1":"0A:4F:59:C0:9E:D6:F2:3A:7A:3A:91:58:DF:93:B0:73:D2:92:D4:7C","sha256":"91:F6:B5:02:2B:E0:82:BA:A7:9C:50:A8:5F:96:F2:49:AA:2A:A0:0F:85:D5:5F:76:F0:0A:D4:A6:B6:93:80:75"}}},"request":{"raw":"GET /px.gif?ch=2\u0026e=0.9404689453429094 HTTP/1.1\r\nHost: ad-delivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rarepike.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 10 Jan 2026 19:28:39 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nx-guploader-uploadid: ABgVH8-dIwnXuxz_AvoFtZgdE5tOR27RwF_-NyTqfsJ3BdAeGjCQBEH-zlJ2d7IRMDk5df9x\r\nx-goog-generation: 1620242732037093\r\nx-goog-metageneration: 5\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 43\r\nx-goog-hash: crc32c=cpEfJQ==, md5=rUsPYG4PhGW8TEwXCzfhow==\r\nx-goog-storage-class: MULTI_REGIONAL\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *, Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace\r\nserver: cloudflare\r\nexpires: Wed, 17 Dec 2025 07:35:13 GMT\r\ncache-control: public, max-age=86400\r\nage: 2116962\r\nlast-modified: Wed, 05 May 2021 19:25:32 GMT\r\netag: \"ad4b0f606e0f8465bc4c4c170b37e1a3\"\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"gfe-default_product_name\"\r\nreport-to: {\"group\":\"gfe-default_product_name\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/default_product_name\"}]}\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9bbe9427aca176ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ad4b0f606e0f8465bc4c4c170b37e1a3","sha1":"50b30fd5f87c85fe5cba2635cb83316ca71250d7","sha256":"cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda","sha512":"ebfe0c0df4bcc167d5cb6ebdd379f9083df62bef63a23818e1c6adf0f64b65467ea58b7cd4d03cf0a1b1a2b07fb7b969bf35f25f1f8538cc65cf3eebdf8a0910","ssdeep":"","tlshash":"15900003fbc08002c2b2e0300b3b0380238ce2200aa8030b80aeb0acecaa3a20c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-05T16:09:38.866835Z","times_seen":347087,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}