{"report_id":"185fb7c7-7e2c-4fbd-9bd0-338bd5a10dbf","version":6,"status":"done","tags":[],"date":"2025-11-23T02:06:07Z","url":{"schema":"http","addr":"betsonsport.ru/click/sport66.php","fqdn":"betsonsport.ru","domain":"betsonsport.ru","tld":"ru"},"ip":{"addr":"217.26.27.243","port":0,"asn":41783,"as":"Informational technologies and electronic communications LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"betsonsport.ru/click/sport66.php","fqdn":"betsonsport.ru","domain":"betsonsport.ru","tld":"ru"},"title":"betsonsport.ru/click/sport66.php","dom":{"size":2701,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2701), with no line terminators","md5":"6e1de7e01904b654fa48050860722464","sha1":"940b20ac6113177c7ac6e8000539a0554fa1f425","sha256":"bc4194e2a280c114e60f916b1855d517cb26dcbd83c1eaea2c221d3ae0b63a85","sha512":"58703cdd1677edce5623567b0442bcc3044eedb21b11f9af7c489e9587e819ee893a67ff3bc2ae4a7b0fbca550ec6444fcd87a4ecbc146eca0abeebd7fafee1c","ssdeep":"","tlshash":"97515bd3fc18cd8d2c5146cda0b1f96cc099a03bea50fce986da12985a82bff0d51875","dom_hash":"domhashf4ccc78bb5cd63afc8c53eb4f75d1fa3","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"betsonsport.ru/click/sport66.php","fqdn":"betsonsport.ru","domain":"betsonsport.ru","tld":"ru"},"ip":{"addr":"217.26.27.243","port":0,"asn":41783,"as":"Informational technologies and electronic communications LLC","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-28T02:06:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"1xcasino-4768443.bar","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":0,"sent_data":872,"comment":"","tags":null,"fingerprints":null},{"fqdn":"1xbet.com","ip":{"addr":"172.64.146.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2006-09-01","domain_rank":23534,"first_seen":"2013-01-27T14:27:35Z","last_seen":"2025-11-18T06:33:30.161319Z","alert_count":0,"request_count":3,"received_data":793767,"sent_data":1312,"comment":"","tags":null,"fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"account.volet.com","ip":{"addr":"45.60.78.179","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"domain_registered":"2003-03-25","domain_rank":2820469,"first_seen":"2025-06-07T15:16:30.547267Z","last_seen":"2025-11-12T11:44:46.218416Z","alert_count":0,"request_count":1,"received_data":618,"sent_data":450,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]}]},{"fqdn":"www.marathonbet.dk","ip":{"addr":"172.64.145.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-10-05","domain_rank":0,"first_seen":"2025-03-27T05:18:44.871451Z","last_seen":"2025-03-27T05:18:44.871451Z","alert_count":0,"request_count":4,"received_data":3740,"sent_data":2256,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ru.bongacash.com","ip":{"addr":"195.85.23.185","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"domain_registered":"2012-06-18","domain_rank":3600816,"first_seen":"2018-07-09T10:40:29Z","last_seen":"2025-10-06T08:59:17.459943Z","alert_count":0,"request_count":4,"received_data":5186,"sent_data":2267,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"member.neteller.com","ip":{"addr":"3.167.2.78","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2000-01-08","domain_rank":722655,"first_seen":"2017-01-30T13:32:53Z","last_seen":"2025-10-06T08:59:17.914559Z","alert_count":0,"request_count":4,"received_data":3182,"sent_data":1906,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"runetki3.com","ip":{"addr":"195.85.23.136","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"domain_registered":"2018-03-14","domain_rank":200445,"first_seen":"2019-08-15T16:50:29Z","last_seen":"2025-10-23T03:37:43.898494Z","alert_count":0,"request_count":2,"received_data":2399,"sent_data":1112,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"betsonsport.ru","ip":{"addr":"217.26.27.243","port":443,"asn":41783,"as":"Informational technologies and electronic communications LLC","country":"Russia","country_code":"RU"},"domain_registered":"2015-12-22","domain_rank":84272,"first_seen":"2015-12-23T11:10:01Z","last_seen":"2025-11-12T11:48:12.581408Z","alert_count":0,"request_count":10,"received_data":7480,"sent_data":4586,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"1xlite-7950617.bar","ip":{"addr":"185.165.153.111","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"domain_registered":"2025-09-24","domain_rank":0,"first_seen":"2025-11-22T20:40:45.614254Z","last_seen":"2025-11-22T20:40:45.614254Z","alert_count":0,"request_count":3,"received_data":743900,"sent_data":1343,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}]},{"fqdn":"www.marathonbet.com","ip":{"addr":"104.17.119.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-07-30","domain_rank":748581,"first_seen":"2014-03-31T17:42:22Z","last_seen":"2025-10-06T08:59:17.190243Z","alert_count":0,"request_count":1,"received_data":1082,"sent_data":710,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"en.runetki3.com","ip":{"addr":"195.85.23.136","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"domain_registered":"2018-03-14","domain_rank":0,"first_seen":"2025-07-16T16:09:40.935097Z","last_seen":"2025-10-23T03:37:43.860417Z","alert_count":0,"request_count":2,"received_data":2749,"sent_data":1375,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bngtrak.com","ip":{"addr":"31.192.112.221","port":443,"asn":48684,"as":"Viking Host B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2023-04-14","domain_rank":37980,"first_seen":"2023-04-17T08:11:19Z","last_seen":"2025-11-20T09:37:08.591727Z","alert_count":0,"request_count":8,"received_data":30792,"sent_data":3370,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ru.bonga-cams.net","ip":{"addr":"31.192.122.58","port":443,"asn":48684,"as":"Viking Host B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2012-09-29","domain_rank":3499929,"first_seen":"2025-08-11T12:07:31.961614Z","last_seen":"2025-08-11T12:07:31.961614Z","alert_count":0,"request_count":2,"received_data":484,"sent_data":846,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bongacams.xxx","ip":{"addr":"195.85.23.209","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"domain_registered":"2013-05-02","domain_rank":207678,"first_seen":"2014-06-10T03:07:33Z","last_seen":"2025-10-06T08:59:18.847473Z","alert_count":0,"request_count":2,"received_data":967,"sent_data":1047,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"www.twilightspire11.xyz","ip":{"addr":"104.18.1.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":2,"received_data":1006,"sent_data":883,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"1xbet.kz","ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"domain_registered":"2015-05-29","domain_rank":61085,"first_seen":"2016-11-26T22:33:05Z","last_seen":"2025-11-11T22:35:08.889979Z","alert_count":0,"request_count":21,"received_data":5481,"sent_data":8883,"comment":"","tags":null,"fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}]},{"fqdn":"bongacams30.com","ip":{"addr":"195.85.23.27","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"domain_registered":"2018-03-14","domain_rank":155419,"first_seen":"2025-08-21T03:34:32.437823Z","last_seen":"2025-11-20T19:15:57.378892Z","alert_count":0,"request_count":2,"received_data":969,"sent_data":1051,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"bongacams.com","ip":{"addr":"195.85.23.89","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"domain_registered":"2012-01-25","domain_rank":15909,"first_seen":"2012-05-22T12:36:04Z","last_seen":"2025-11-19T12:08:55.139949Z","alert_count":0,"request_count":10,"received_data":14104,"sent_data":8672,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:46.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:46 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dd8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:46.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:46 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dd8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bongacams30.com/track?v=2\u0026c=363412","fqdn":"bongacams30.com","domain":"bongacams30.com","tld":"com"},"ip":{"addr":"195.85.23.27","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:47.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bongacams30.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 09:19:48 GMT","end":"Wed, 31 Dec 2025 09:19:47 GMT"},"fingerprint":{"sha1":"8B:F9:E9:03:98:D0:45:8D:25:DF:0D:8C:36:1B:0E:80:70:2C:1E:3D","sha256":"F4:F7:F0:4A:6F:3D:1F:A9:29:47:3F:C3:4C:7D:F7:6D:76:13:8E:8E:45:74:55:1C:73:CE:16:94:89:F2:76:60"}}},"request":{"raw":"GET /track?v=2\u0026c=363412 HTTP/1.1\r\nHost: bongacams30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nCookie: __cf_bm=KO4e4qJFVbw6.TC8IJL.r06q1fUKvqkeGm8aGpIYZNk-1763863544-1.0.1.1-_YHSaatWjfGmFRoE9VkkF98r7_UDfoNxNTKGY1YGBbzfISfUhlgGT4rO2b.kDwl9q.kNrg2OYj6nITWAsvmSrke1TKEjtgrN3kcCO8DQwlgMy.k8Zo4dJ..mLpg2lYFP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 02:05:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\nlocation: https://bngtrak.com/hit.php?v=2\u0026c=363412\r\ncf-ray: 9a2d1a82ff41568b-OSL\r\nx-bc: ded7848\r\nx-zone: 5a-web44\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bongacams.com/?bcs=cGVyaWQ1OGE2ODBjYjU2NGFhNDViZjFhNjdkNDlmZDVjM2RlOjoxODE3NDA6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6MjgwNDkyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~","fqdn":"bongacams.com","domain":"bongacams.com","tld":"com"},"ip":{"addr":"195.85.23.89","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:47.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bongacams.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 02 May 2025 00:00:00 GMT","end":"Mon, 01 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:E5:1E:9D:FE:EE:60:B4:57:D1:80:25:CB:0B:CF:49:85:21:CD:9E","sha256":"41:07:E9:F0:BF:0E:AE:5D:01:2B:64:B5:48:40:B5:DC:6D:FD:18:F7:99:CB:5E:56:99:2B:CC:B7:51:21:A8:A4"}}},"request":{"raw":"GET /?bcs=cGVyaWQ1OGE2ODBjYjU2NGFhNDViZjFhNjdkNDlmZDVjM2RlOjoxODE3NDA6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6MjgwNDkyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~ HTTP/1.1\r\nHost: bongacams.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=GQ4nt1DMQ0c0IlgAjjuzKokXJYZbuQ.acgHlIiMeKAQ-1763863544-1.0.1.1-z5EyYft8fv4C9yw7m2hMCW_lFvbRYhsf6MfpUw3zS3r_4uC0vPZMfvA_m3ERkBoUOCAy3awgCbssYESUIvoZOyYdtta8uUodJKoyEv1XW_I3pqrozr7ggVByW7aVrU44; bonga20120608=4882ff79eaaa09edf2ac4c0af912d115; BONGAH_HIT=d58a680cb564aa45bf1a67d49fd5c3de%3A%3A181740%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A%3A%3A280492%3A%3A%3A%3A%3A%3A0%3A%3A0%3A%3A0%3A%3A0%3A%3A%3A%3A0%3A%3Adefault%3A%3A0%3A%3A2025-11-23%2004%3A05%3A45; sg=502; warning18=%5B%22en_US%22%5D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 02:05:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: origin-when-cross-origin\r\nx-ua-compatible: IE=edge,chrome=1\r\nset-cookie: ts_type2=1; expires=Mon, 23-Nov-2026 02:05:47 GMT; Max-Age=31535999; path=/; domain=.bongacams.com\nfv=AmD1ZmL4ZmL3ZD==; expires=Mon, 23-Nov-2026 02:05:47 GMT; Max-Age=31535999; path=/; domain=.bongacams.com\nuh=qQMMLwykIaMIL1uOq1x2Lzq2ZSMnrt==; expires=Mon, 23-Nov-2026 02:05:47 GMT; Max-Age=31535999; path=/; domain=.bongacams.com\nratr=181740%3A%3A280492%3A%3A2025-11-23%2004%3A05%3A47%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A; expires=Mon, 11-Nov-2075 02:05:47 GMT; Max-Age=1576799999; path=/; domain=.bongacams.com; HttpOnly\nreg_ver2=3; expires=Mon, 23-Nov-2026 02:05:47 GMT; Max-Age=31535999; path=/; domain=.bongacams.com\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-zone: 5a-web51\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a2d1a869f3f712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bngtrak.com/hit.php?v=2\u0026c=363412","fqdn":"bngtrak.com","domain":"bngtrak.com","tld":"com"},"ip":{"addr":"31.192.112.221","port":443,"asn":48684,"as":"Viking Host B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:45.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bngtrak.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Tue, 03 Jun 2025 00:00:00 GMT","end":"Fri, 03 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:65:E9:D9:F9:3F:CB:8F:58:5F:C4:2E:D5:44:DB:B0:38:1D:5A:3A","sha256":"92:0E:CC:64:11:B5:66:84:BD:55:BD:0A:44:43:6C:9B:6A:78:75:21:BB:2F:0A:F6:EE:F4:D2:63:A0:B2:88:98"}}},"request":{"raw":"GET /hit.php?v=2\u0026c=363412 HTTP/1.1\r\nHost: bngtrak.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\nset-cookie: BCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.promo-bc.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongocams.biz\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongacams.org\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongacams11.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bcmspt.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngwlt.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngpt.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngpst.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngprl.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngpop.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngosv.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngvs.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngdyn.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngdin.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.dynspt.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.ecdyn.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.trkbc.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.trkbng.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngtrk.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngtrak.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bcprm.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngprm.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngrol.com\r\nlocation: https://bongacams.com?bcs=ZXJpb2I5MzE2MWRjYzNjYTE5OTlhNjg0Yzk2YTc0MjFlZDAxOjoxODM5Njc6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6MzYzNDEyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~\r\nexpires: Sun, 23 Nov 2025 02:05:44 GMT\r\nx-bcs: ded7724\r\nstrict-transport-security: max-age=0;\r\ncache-control: no-cache, public\r\nx-bc-bl: 102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":559,"timings":{"blocked":256,"dns":2,"connect":17,"send":0,"wait":21,"receive":0,"ssl":255},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:46.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:46 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dd8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xcasino-4768443.bar/ru?tag=d_4589457m_67279c_com","fqdn":"1xcasino-4768443.bar","domain":"1xcasino-4768443.bar","tld":"bar"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:46.901Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ru?tag=d_4589457m_67279c_com HTTP/1.1\r\nHost: 1xcasino-4768443.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bngtrak.com/hit.php?a=183967\u0026p=2\u0026camp=631","fqdn":"bngtrak.com","domain":"bngtrak.com","tld":"com"},"ip":{"addr":"31.192.112.221","port":443,"asn":48684,"as":"Viking Host B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:47.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bngtrak.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Tue, 03 Jun 2025 00:00:00 GMT","end":"Fri, 03 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:65:E9:D9:F9:3F:CB:8F:58:5F:C4:2E:D5:44:DB:B0:38:1D:5A:3A","sha256":"92:0E:CC:64:11:B5:66:84:BD:55:BD:0A:44:43:6C:9B:6A:78:75:21:BB:2F:0A:F6:EE:F4:D2:63:A0:B2:88:98"}}},"request":{"raw":"GET /hit.php?a=183967\u0026p=2\u0026camp=631 HTTP/1.1\r\nHost: bngtrak.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 02:05:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\nset-cookie: BCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.promo-bc.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bongocams.biz\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bongacams.org\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bongacams11.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bcmspt.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngwlt.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngpt.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngpst.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngprl.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngpop.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngosv.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngvs.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngdyn.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngdin.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.dynspt.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.ecdyn.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.trkbc.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.trkbng.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngtrk.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngtrak.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bcprm.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngprm.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngrol.com\r\nlocation: https://bongacams.com?bcs=cGVyaWY3ZTU5MDM1MmVlNjVlMWI0Yjk3ODgyZTU3OGYwNmViOjoxODM5Njc6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6NTgwMTIyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~\r\nexpires: Sun, 23 Nov 2025 02:05:46 GMT\r\nx-bcs: ded7384\r\nstrict-transport-security: max-age=0;\r\ncache-control: no-cache, public\r\nx-bc-bl: 102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ru.bonga-cams.net/track?v=2\u0026c=280492","fqdn":"ru.bonga-cams.net","domain":"bonga-cams.net","tld":"net"},"ip":{"addr":"31.192.122.58","port":443,"asn":48684,"as":"Viking Host B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:47.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bonga-cams.net","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Wed, 14 May 2025 00:00:00 GMT","end":"Sat, 13 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:C7:6A:87:D4:78:A5:CE:EE:CD:83:FC:39:CD:17:33:1F:91:5F:FD","sha256":"C2:64:D5:DA:98:D3:E8:D4:5C:97:73:EF:7F:88:3D:28:52:0D:9C:97:AA:BF:CC:2B:89:E4:61:C7:A6:FE:E2:D9"}}},"request":{"raw":"GET /track?v=2\u0026c=280492 HTTP/1.1\r\nHost: ru.bonga-cams.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 02:05:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\nlocation: https://bngtrak.com/hit.php?v=2\u0026c=280492\r\nx-bc: ded7590\r\nx-zone: ncf-web71-ded7590\r\nx-man: 5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:44.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dc8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":745,"timings":{"blocked":360,"dns":107,"connect":38,"send":0,"wait":24,"receive":0,"ssl":207},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betsonsport.ru/click/mbbgpet.xyz/su/?Fda62da458","fqdn":"betsonsport.ru","domain":"betsonsport.ru","tld":"ru"},"ip":{"addr":"217.26.27.243","port":443,"asn":41783,"as":"Informational technologies and electronic communications LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:44.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"betsonsport.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 07:28:15 GMT","end":"Sat, 31 Jan 2026 07:28:14 GMT"},"fingerprint":{"sha1":"83:0B:C4:C4:A4:16:38:D6:04:00:79:FB:78:66:E0:E8:FE:74:9A:4B","sha256":"42:71:BD:6D:BA:3D:2C:C2:FD:2E:1C:26:1D:71:28:BD:E4:E4:16:57:A1:13:4D:CE:20:E4:DF:7D:8C:0D:CC:01"}}},"request":{"raw":"GET /click/mbbgpet.xyz/su/?Fda62da458 HTTP/1.1\r\nHost: betsonsport.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/click/sport66.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx/1.29.1\r\ndate: Sun, 23 Nov 2025 02:05:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept, Cookie, Content-Type, Authorization, Content-Length, X-Requested-With, Origin\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Set-Cookie, X-Powered-By\r\nvary: Origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.29.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"4845f01eaa8068384625e302e9a4eb05","sha1":"fb6ff8293fa45e17ba97f84954e7d1d5b0d38f87","sha256":"8a482f2271a42c5f54c96e816a84340a6f2357a5b81f927d07d00788f5140a41","sha512":"bb58f2438524b518b19f2b74c5d598460735958f77c310ba3710520d1d88ce7975449977c9965dbca87cd6a824c8ab82e56bea6d571d79594079f0a0ea404d77","ssdeep":"","tlshash":"4160000c03030f0c00c0c03ccfc00030000c03000cc033f00000c00c000000c3cc00fc","first_seen":"2023-03-13T05:02:59Z","last_seen":"2026-04-05T04:00:23.011102Z","times_seen":9885,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ru.bonga-cams.net/track?v=2\u0026c=280492","fqdn":"ru.bonga-cams.net","domain":"bonga-cams.net","tld":"net"},"ip":{"addr":"31.192.122.58","port":443,"asn":48684,"as":"Viking Host B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:44.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bonga-cams.net","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Wed, 14 May 2025 00:00:00 GMT","end":"Sat, 13 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"27:C7:6A:87:D4:78:A5:CE:EE:CD:83:FC:39:CD:17:33:1F:91:5F:FD","sha256":"C2:64:D5:DA:98:D3:E8:D4:5C:97:73:EF:7F:88:3D:28:52:0D:9C:97:AA:BF:CC:2B:89:E4:61:C7:A6:FE:E2:D9"}}},"request":{"raw":"GET /track?v=2\u0026c=280492 HTTP/1.1\r\nHost: ru.bonga-cams.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\nlocation: https://bngtrak.com/hit.php?v=2\u0026c=280492\r\nx-bc: ded7588\r\nx-zone: ncf-web77-ded7588\r\nx-man: 5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":31,"connect":24,"send":0,"wait":18,"receive":0,"ssl":242},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.com/ru/block","fqdn":"1xbet.com","domain":"1xbet.com","tld":"com"},"ip":{"addr":"172.64.146.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:45.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 09 Jul 2025 00:00:00 GMT","end":"Sat, 08 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6E:5A:F9:7A:81:FC:AB:30:48:A0:34:8E:33:5B:D2:8E:0D:72:21:9E","sha256":"C7:34:76:B2:97:3B:98:D7:A1:C1:32:35:94:8F:86:9A:7B:3B:E1:0C:49:A6:F2:FD:C3:FC:4D:5E:88:D3:33:91"}}},"request":{"raw":"GET /ru/block HTTP/1.1\r\nHost: 1xbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 203 Non Authoritative\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 262046\r\ncf-ray: 9a2d1a745bdd0883-OSL\r\naccept-ranges: none\r\nset-cookie: gw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\ngw-blk=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; Path=/; HttpOnly\nlng=ru; Path=/\ncookies_agree_type=3; Path=/\ntzo=1; Path=/\nis12h=0; Path=/\nauid=Hyjau2kia/muo01ICwX1Ag==; path=/; secure; httponly; samesite=lax\r\nx-dt: 285\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: dt_total;dur=0.003, total;dur=83;desc=\"Nuxt Server Time\", cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":262046,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43576)","md5":"49702532a4d4918e0691d3090ca1ac38","sha1":"5a39018db0a8d96441c75eb8bf7f1254b3552e86","sha256":"0dfbe4b41ff75d9679a02dd7a41d86dfd2d05c66972c39227f8efd52712c3d59","sha512":"b4106068b199a0705bb42dcf750553ee8db2620a489524d4879716b234d11ffb55c8f2130cd5dd0e55988fcd0b47bab222415c6a0e6e4a5ba9418c2f488e2ba6","ssdeep":"3072:tGz5FRzINBrfAaL3L9oKRVKbABrfqaLFOJHR/98VDZ92RLwj7mLq:WFZINN5o7A5OsDT2RqKLq","tlshash":"8244b51fa90c1d3e951f1baac54f7d4e5bbc9e2a24cb6c01dcaeae1914e3294416343f","first_seen":"2025-11-23T02:06:16.79029Z","last_seen":"2025-11-23T02:06:16.79029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":145,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bongacams.com/?bcs=YmVzdGQ1OGE2ODBjYjU2NGFhNDViZjFhNjdkNDlmZDVjM2RlOjoxODE3NDA6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6MjgwNDkyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~","fqdn":"bongacams.com","domain":"bongacams.com","tld":"com"},"ip":{"addr":"195.85.23.89","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:45.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bongacams.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 02 May 2025 00:00:00 GMT","end":"Mon, 01 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:E5:1E:9D:FE:EE:60:B4:57:D1:80:25:CB:0B:CF:49:85:21:CD:9E","sha256":"41:07:E9:F0:BF:0E:AE:5D:01:2B:64:B5:48:40:B5:DC:6D:FD:18:F7:99:CB:5E:56:99:2B:CC:B7:51:21:A8:A4"}}},"request":{"raw":"GET /?bcs=YmVzdGQ1OGE2ODBjYjU2NGFhNDViZjFhNjdkNDlmZDVjM2RlOjoxODE3NDA6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6MjgwNDkyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~ HTTP/1.1\r\nHost: bongacams.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=GQ4nt1DMQ0c0IlgAjjuzKokXJYZbuQ.acgHlIiMeKAQ-1763863544-1.0.1.1-z5EyYft8fv4C9yw7m2hMCW_lFvbRYhsf6MfpUw3zS3r_4uC0vPZMfvA_m3ERkBoUOCAy3awgCbssYESUIvoZOyYdtta8uUodJKoyEv1XW_I3pqrozr7ggVByW7aVrU44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nset-cookie: bonga20120608=a1808bf397ac6cd917143a0540b7d26b; path=/; domain=.bongacams.com; secure; HttpOnly; SameSite=None\nts_type2=1; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nfv=AGD1ZmL4ZmL3ZD==; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nuh=pyMFEUEAqxqJAQMxnx9IM3IkLIyZpt==; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nratr=181740%3A%3A280492%3A%3A2025-11-23%2004%3A05%3A45%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A; expires=Mon, 11-Nov-2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com; HttpOnly\nBONGAH_HIT=d58a680cb564aa45bf1a67d49fd5c3de%3A%3A181740%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A%3A%3A280492%3A%3A%3A%3A%3A%3A0%3A%3A0%3A%3A0%3A%3A0%3A%3A%3A%3A0%3A%3Adefault%3A%3A0%3A%3A2025-11-23%2004%3A05%3A45; expires=Fri, 22-May-2026 02:05:45 GMT; Max-Age=15552000; path=/; domain=.bongacams.com; secure; HttpOnly; SameSite=None\nBONGA_REF=https%3A%2F%2Fbetsonsport.ru%2F; expires=Fri, 22-May-2026 02:05:45 GMT; Max-Age=15552000; path=/; domain=.bongacams.com; HttpOnly\nreg_ver2=3; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nsg=713; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com; secure; SameSite=None\nwarning18=%5B%22en_US%22%5D; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com; secure; SameSite=None\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: origin-when-cross-origin\r\nx-ua-compatible: IE=edge,chrome=1\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-zone: 5a-web51\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a2d1a779a27712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:46.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:46 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dd8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:46.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:46 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dd8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:46.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:46 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dd8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"account.volet.com/referral/ce0a4087-0ce4-4fae-85ff-331ffec5a275","fqdn":"account.volet.com","domain":"volet.com","tld":"com"},"ip":{"addr":"45.60.78.179","port":443,"asn":19551,"as":"INCAPSULA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:44.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imperva.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 06 Aug 2025 11:53:11 GMT","end":"Mon, 02 Feb 2026 11:53:11 GMT"},"fingerprint":{"sha1":"7F:76:34:F0:05:90:04:75:8C:8D:6C:E1:0C:06:90:9B:6F:7D:2D:67","sha256":"6C:08:C2:F3:E2:E3:B9:CA:7E:37:35:11:16:18:8D:A4:B2:0A:59:4F:20:26:9B:12:E5:10:A0:9B:7F:D9:22:BD"}}},"request":{"raw":"GET /referral/ce0a4087-0ce4-4fae-85ff-331ffec5a275 HTTP/1.1\r\nHost: account.volet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nContent-Type: text/html\r\nCache-Control: no-cache, no-store\r\nConnection: close\r\nContent-Length: 881\r\nX-Iinfo: 4-12999732-0 0NNN RT(1763863544739 116) q(0 -1 -1 0) r(0 -1) B15(11,3249597,0) U18\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nSet-Cookie: visid_incap_3079803=47PdEok+Q1i0+CXiTm3dgvdrImkAAAAAQUIPAAAAAACwlKiB8le53yp3mVvuLVZ+; expires=Sun, 22 Nov 2026 23:23:06 GMT; HttpOnly; path=/; Domain=.volet.com; Secure; SameSite=None\nincap_ses_631_3079803=ECkyeQxPRyh/62vmnsPBCPdrImkAAAAA/EqdfFlrluPmgQ9APQ/BoQ==; path=/; Domain=.volet.com; Secure; SameSite=None\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Imperva","description":"Imperva is a cyber security software and services company for networking, data, and application security.","website":"https://www.imperva.com/","common_platform_enumeration":"","icon":"Imperva.svg","categories":["Security","CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":152,"dns":45,"connect":18,"send":0,"wait":29,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-7950617.bar//ru?tag=s_1392275m_355c_neRF","fqdn":"1xlite-7950617.bar","domain":"1xlite-7950617.bar","tld":"bar"},"ip":{"addr":"185.165.153.111","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:44.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-7950617.bar","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 13:29:24 GMT","end":"Tue, 23 Dec 2025 13:29:23 GMT"},"fingerprint":{"sha1":"9A:74:40:77:D8:2A:91:F1:34:75:A5:7D:90:55:0A:11:2C:43:9A:B0","sha256":"04:D8:CF:7C:6A:D3:D0:3C:57:19:53:2F:F7:A8:5C:2A:70:69:71:82:B8:54:B5:D8:B6:EC:3A:56:FD:9C:6E:B1"}}},"request":{"raw":"GET //ru?tag=s_1392275m_355c_neRF HTTP/1.1\r\nHost: 1xlite-7950617.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 02:05:44 GMT\r\nlocation: /ru?tag=s_1392275m_355c_neRF\r\nreason-v3: slash_end\r\nserver-timing: dt_total;dur=0.010, total;dur=0;desc=\"Nuxt Server Time\", wf-uht;dur=0.009\r\nset-cookie: platform_type=desktop; Path=/; Expires=Wed, 26 Nov 2025 02:05:44 GMT; Secure; SameSite=None; Partitioned\ngw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\ngw-blk=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; Path=/; HttpOnly\nauid=uaWZb2kia/hKl1WgA9rhAg==; path=/; secure; httponly; samesite=lax\r\nx-dt: 2336\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":245512,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":175,"dns":21,"connect":32,"send":0,"wait":42,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bongacams.com/track?a=183967\u0026p=2\u0026camp=631","fqdn":"bongacams.com","domain":"bongacams.com","tld":"com"},"ip":{"addr":"195.85.23.89","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:44.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bongacams.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 02 May 2025 00:00:00 GMT","end":"Mon, 01 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:E5:1E:9D:FE:EE:60:B4:57:D1:80:25:CB:0B:CF:49:85:21:CD:9E","sha256":"41:07:E9:F0:BF:0E:AE:5D:01:2B:64:B5:48:40:B5:DC:6D:FD:18:F7:99:CB:5E:56:99:2B:CC:B7:51:21:A8:A4"}}},"request":{"raw":"GET /track?a=183967\u0026p=2\u0026camp=631 HTTP/1.1\r\nHost: bongacams.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 23 Nov 2025 02:05:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\nlocation: https://bngtrak.com/hit.php?a=183967\u0026p=2\u0026camp=631\r\ncf-ray: 9a2d1a732bee76ef-OSL\r\nx-bc: ded7848\r\nx-zone: 5a-web44\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=GQ4nt1DMQ0c0IlgAjjuzKokXJYZbuQ.acgHlIiMeKAQ-1763863544-1.0.1.1-z5EyYft8fv4C9yw7m2hMCW_lFvbRYhsf6MfpUw3zS3r_4uC0vPZMfvA_m3ERkBoUOCAy3awgCbssYESUIvoZOyYdtta8uUodJKoyEv1XW_I3pqrozr7ggVByW7aVrU44; path=/; expires=Sun, 23-Nov-25 02:35:44 GMT; domain=.bongacams.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":27,"connect":6,"send":0,"wait":41,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bngtrak.com/hit.php?v=2\u0026c=280492","fqdn":"bngtrak.com","domain":"bngtrak.com","tld":"com"},"ip":{"addr":"31.192.112.221","port":443,"asn":48684,"as":"Viking Host B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:45.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bngtrak.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Tue, 03 Jun 2025 00:00:00 GMT","end":"Fri, 03 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:65:E9:D9:F9:3F:CB:8F:58:5F:C4:2E:D5:44:DB:B0:38:1D:5A:3A","sha256":"92:0E:CC:64:11:B5:66:84:BD:55:BD:0A:44:43:6C:9B:6A:78:75:21:BB:2F:0A:F6:EE:F4:D2:63:A0:B2:88:98"}}},"request":{"raw":"GET /hit.php?v=2\u0026c=280492 HTTP/1.1\r\nHost: bngtrak.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\nset-cookie: BCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.promo-bc.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongocams.biz\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongacams.org\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongacams11.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bcmspt.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngwlt.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngpt.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngpst.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngprl.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngpop.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngosv.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngvs.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngdyn.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngdin.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.dynspt.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.ecdyn.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.trkbc.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.trkbng.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngtrk.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngtrak.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bcprm.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngprm.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngrol.com\r\nlocation: https://bongacams.com?bcs=YmVzdGQ1OGE2ODBjYjU2NGFhNDViZjFhNjdkNDlmZDVjM2RlOjoxODE3NDA6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6MjgwNDkyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~\r\nexpires: Sun, 23 Nov 2025 02:05:44 GMT\r\nx-bcs: ded7384\r\nstrict-transport-security: max-age=0;\r\ncache-control: no-cache, public\r\nx-bc-bl: 102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":627,"timings":{"blocked":296,"dns":1,"connect":17,"send":0,"wait":23,"receive":0,"ssl":286},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:46.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:46 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dd8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bongacams.xxx/track?v=2\u0026c=280492","fqdn":"bongacams.xxx","domain":"bongacams.xxx","tld":"xxx"},"ip":{"addr":"195.85.23.209","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:44.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bongacams.xxx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Nov 2025 22:14:16 GMT","end":"Fri, 30 Jan 2026 22:14:15 GMT"},"fingerprint":{"sha1":"1E:33:0C:32:47:05:33:D4:D7:1D:F0:78:EC:61:7F:EA:43:55:98:9C","sha256":"ED:7C:A1:BA:CB:BA:CA:EB:D3:EE:A8:AB:4B:6C:81:40:5E:50:33:19:A0:11:73:34:BE:BC:00:37:0D:4C:37:C1"}}},"request":{"raw":"GET /track?v=2\u0026c=280492 HTTP/1.1\r\nHost: bongacams.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 23 Nov 2025 02:05:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\nlocation: https://bngtrak.com/hit.php?v=2\u0026c=280492\r\ncf-ray: 9a2d1a739e51b512-OSL\r\nx-bc: ded7850\r\nx-zone: 5a-web51\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=8qBf.pRAKEVIcYHT39jCN2IxZ9tHSPSeO9xyufYSMTA-1763863544-1.0.1.1-8Ccf5gOkDRuzYTUf9vJ26ibE6gofKHX1ZinCdx7ht3.pfd0dX3qW9VPq22FdK9rkPVHbF4RFWiYR0enRudclimbJTJw0r6D1g3KJKhmKnYmeEWgiGRKHSJ2W0bBuguQA; path=/; expires=Sun, 23-Nov-25 02:35:44 GMT; domain=.bongacams.xxx; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":37,"connect":7,"send":0,"wait":42,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-7950617.bar/ru?tag=s_1392275m_355c_neRF","fqdn":"1xlite-7950617.bar","domain":"1xlite-7950617.bar","tld":"bar"},"ip":{"addr":"185.165.153.111","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:45.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-7950617.bar","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 13:29:24 GMT","end":"Tue, 23 Dec 2025 13:29:23 GMT"},"fingerprint":{"sha1":"9A:74:40:77:D8:2A:91:F1:34:75:A5:7D:90:55:0A:11:2C:43:9A:B0","sha256":"04:D8:CF:7C:6A:D3:D0:3C:57:19:53:2F:F7:A8:5C:2A:70:69:71:82:B8:54:B5:D8:B6:EC:3A:56:FD:9C:6E:B1"}}},"request":{"raw":"GET /ru?tag=s_1392275m_355c_neRF HTTP/1.1\r\nHost: 1xlite-7950617.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\nlocation: https://1xlite-7950617.bar/ru/block\r\nserver-timing: dt_total;dur=0.004, total;dur=20;desc=\"Nuxt Server Time\", wf-uht;dur=0.032\r\nset-cookie: gw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\ngw-blk=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; Path=/; HttpOnly\nlng=ru; Path=/\ncookies_agree_type=3; Path=/\ntzo=1; Path=/\nis12h=0; Path=/\nreferral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22s_1392275m_355c_neRF%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; Path=/; Expires=Thu, 22 Jan 2026 02:05:45 GMT\nreflinkid=s_1392275m_355c_neRF; Path=/; Expires=Sun, 23 Nov 2025 03:05:45 GMT\npostback_watcher=; Path=/; Expires=Sun, 23 Nov 2025 02:05:49 GMT\nauid=uaWZb2kia/lKl1WgA9riAg==; path=/; secure; httponly; samesite=lax\r\nx-dt: 2336\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":245512,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.marathonbet.dk/en/join.htm?tracking_link=http%3A%2F%2Fmrthnbtt.com%2Fda62da458","fqdn":"www.marathonbet.dk","domain":"marathonbet.dk","tld":"dk"},"ip":{"addr":"172.64.145.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:45.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marathonbet.dk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 20:40:13 GMT","end":"Sun, 15 Feb 2026 21:40:09 GMT"},"fingerprint":{"sha1":"C6:67:8A:D9:FC:1E:83:99:73:F2:E8:AC:6C:72:70:C2:0D:8F:4F:59","sha256":"EF:20:66:F4:45:2F:21:BF:8A:EA:DF:14:33:05:8C:48:C6:BF:0B:D4:5D:CE:CE:EF:D2:2C:3D:4C:A8:49:89:B5"}}},"request":{"raw":"GET /en/join.htm?tracking_link=http%3A%2F%2Fmrthnbtt.com%2Fda62da458 HTTP/1.1\r\nHost: www.marathonbet.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-encoding: br\r\nx-frame-options: DENY\r\nset-cookie: panbet.openeventnameseparately=true; Expires=Mon, 23 Nov 2026 02:05:45 GMT; Path=/; HttpOnly; SameSite=None; Secure\npanbet.openadditionalmarketsseparately=false; Expires=Mon, 23 Nov 2026 02:05:45 GMT; Path=/; HttpOnly; SameSite=None; Secure\nJSESSIONID=webmaster2~BC5CEE5F1F379D6C5BAABAB9E1882163; Expires=Sun, 23 Nov 2025 02:10:45 GMT; Path=/; Secure; HttpOnly; SameSite=None; Secure\nSESSION_KEY=delete; Expires=Thu, 01 Jan 1970 00:00:10 GMT; Path=/; SameSite=None; Secure\nSESSION_KEY=41b156c4cc59454aa475a3ec29889d9c; Path=/; Secure; HttpOnly; SameSite=None; Secure\npuid=rBpK3mkia/mG/jJbAyLuAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.marathonbet.dk; path=/; secure\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nlast-modified: Sun, 23 Nov 2025 02:05:45 GMT\r\nvary: accept-encoding\r\ncache-status: MISS\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nfeature-policy: microphone 'none'; camera 'none'; push 'none'; payment 'none'\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a2d1a749b5b569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bngtrak.com/hit.php?v=2\u0026c=280492","fqdn":"bngtrak.com","domain":"bngtrak.com","tld":"com"},"ip":{"addr":"31.192.112.221","port":443,"asn":48684,"as":"Viking Host B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:45.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bngtrak.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Tue, 03 Jun 2025 00:00:00 GMT","end":"Fri, 03 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:65:E9:D9:F9:3F:CB:8F:58:5F:C4:2E:D5:44:DB:B0:38:1D:5A:3A","sha256":"92:0E:CC:64:11:B5:66:84:BD:55:BD:0A:44:43:6C:9B:6A:78:75:21:BB:2F:0A:F6:EE:F4:D2:63:A0:B2:88:98"}}},"request":{"raw":"GET /hit.php?v=2\u0026c=280492 HTTP/1.1\r\nHost: bngtrak.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\nset-cookie: BCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.promo-bc.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongocams.biz\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongacams.org\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongacams11.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bcmspt.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngwlt.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngpt.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngpst.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngprl.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngpop.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngosv.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngvs.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngdyn.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngdin.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.dynspt.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.ecdyn.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.trkbc.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.trkbng.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngtrk.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngtrak.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bcprm.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngprm.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngrol.com\r\nlocation: https://bongacams.com?bcs=aWNhbGQ1OGE2ODBjYjU2NGFhNDViZjFhNjdkNDlmZDVjM2RlOjoxODE3NDA6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6MjgwNDkyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~\r\nexpires: Sun, 23 Nov 2025 02:05:44 GMT\r\nx-bcs: ded7383\r\nstrict-transport-security: max-age=0;\r\ncache-control: no-cache, public\r\nx-bc-bl: 102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":1,"connect":17,"send":0,"wait":21,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bongacams.com/?bcs=ZXJpb2I5MzE2MWRjYzNjYTE5OTlhNjg0Yzk2YTc0MjFlZDAxOjoxODM5Njc6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6MzYzNDEyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~","fqdn":"bongacams.com","domain":"bongacams.com","tld":"com"},"ip":{"addr":"195.85.23.89","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:45.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bongacams.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 02 May 2025 00:00:00 GMT","end":"Mon, 01 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:E5:1E:9D:FE:EE:60:B4:57:D1:80:25:CB:0B:CF:49:85:21:CD:9E","sha256":"41:07:E9:F0:BF:0E:AE:5D:01:2B:64:B5:48:40:B5:DC:6D:FD:18:F7:99:CB:5E:56:99:2B:CC:B7:51:21:A8:A4"}}},"request":{"raw":"GET /?bcs=ZXJpb2I5MzE2MWRjYzNjYTE5OTlhNjg0Yzk2YTc0MjFlZDAxOjoxODM5Njc6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6MzYzNDEyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~ HTTP/1.1\r\nHost: bongacams.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=GQ4nt1DMQ0c0IlgAjjuzKokXJYZbuQ.acgHlIiMeKAQ-1763863544-1.0.1.1-z5EyYft8fv4C9yw7m2hMCW_lFvbRYhsf6MfpUw3zS3r_4uC0vPZMfvA_m3ERkBoUOCAy3awgCbssYESUIvoZOyYdtta8uUodJKoyEv1XW_I3pqrozr7ggVByW7aVrU44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nset-cookie: bonga20120608=299d26d924f490e9c71e659f274bdf9a; path=/; domain=.bongacams.com; secure; HttpOnly; SameSite=None\nts_type2=1; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nfv=AGD1ZmL4ZmL3ZD==; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nuh=oUWgBHIKMmWKEmqmJwIIE2yKF1uEBN==; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nratr=183967%3A%3A363412%3A%3A2025-11-23%2004%3A05%3A45%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A; expires=Mon, 11-Nov-2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com; HttpOnly\nBONGAH_HIT=b93161dcc3ca1999a684c96a7421ed01%3A%3A183967%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A%3A%3A363412%3A%3A%3A%3A%3A%3A0%3A%3A0%3A%3A0%3A%3A0%3A%3A%3A%3A0%3A%3Adefault%3A%3A0%3A%3A2025-11-23%2004%3A05%3A45; expires=Fri, 22-May-2026 02:05:45 GMT; Max-Age=15552000; path=/; domain=.bongacams.com; secure; HttpOnly; SameSite=None\nBONGA_REF=https%3A%2F%2Fbetsonsport.ru%2F; expires=Fri, 22-May-2026 02:05:45 GMT; Max-Age=15552000; path=/; domain=.bongacams.com; HttpOnly\nreg_ver2=3; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nsg=73; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com; secure; SameSite=None\nwarning18=%5B%22en_US%22%5D; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com; secure; SameSite=None\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: origin-when-cross-origin\r\nx-ua-compatible: IE=edge,chrome=1\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-zone: 5a-web44\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a2d1a778a23712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:46.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:46 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dd8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betsonsport.ru/click/stake.com/?c=9oqyeOD7","fqdn":"betsonsport.ru","domain":"betsonsport.ru","tld":"ru"},"ip":{"addr":"217.26.27.243","port":443,"asn":41783,"as":"Informational technologies and electronic communications LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:46.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"betsonsport.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 07:28:15 GMT","end":"Sat, 31 Jan 2026 07:28:14 GMT"},"fingerprint":{"sha1":"83:0B:C4:C4:A4:16:38:D6:04:00:79:FB:78:66:E0:E8:FE:74:9A:4B","sha256":"42:71:BD:6D:BA:3D:2C:C2:FD:2E:1C:26:1D:71:28:BD:E4:E4:16:57:A1:13:4D:CE:20:E4:DF:7D:8C:0D:CC:01"}}},"request":{"raw":"GET /click/stake.com/?c=9oqyeOD7 HTTP/1.1\r\nHost: betsonsport.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/click/sport66.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx/1.29.1\r\ndate: Sun, 23 Nov 2025 02:05:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept, Cookie, Content-Type, Authorization, Content-Length, X-Requested-With, Origin\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Set-Cookie, X-Powered-By\r\nvary: Origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.29.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"4845f01eaa8068384625e302e9a4eb05","sha1":"fb6ff8293fa45e17ba97f84954e7d1d5b0d38f87","sha256":"8a482f2271a42c5f54c96e816a84340a6f2357a5b81f927d07d00788f5140a41","sha512":"bb58f2438524b518b19f2b74c5d598460735958f77c310ba3710520d1d88ce7975449977c9965dbca87cd6a824c8ab82e56bea6d571d79594079f0a0ea404d77","ssdeep":"","tlshash":"4160000c03030f0c00c0c03ccfc00030000c03000cc033f00000c00c000000c3cc00fc","first_seen":"2023-03-13T05:02:59Z","last_seen":"2026-04-05T04:00:23.011102Z","times_seen":9885,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.marathonbet.com/su/?pref=230_9132_35680\u0026utm_source=https%3A%2F%2Fsportandbets.com\u0026utm_medium=affiliates\u0026cppcids=all","fqdn":"www.marathonbet.com","domain":"marathonbet.com","tld":"com"},"ip":{"addr":"104.17.119.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:47.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marathonbet.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Nov 2025 17:18:58 GMT","end":"Sat, 14 Feb 2026 18:18:45 GMT"},"fingerprint":{"sha1":"B4:DD:B2:A2:5A:A7:C8:7D:47:07:67:56:40:24:75:59:E3:41:53:F8","sha256":"27:12:22:EA:A8:99:FF:BF:C0:C5:42:CB:2B:D7:75:EB:D0:0D:A1:31:D7:F7:61:E9:6F:B0:6F:4A:4C:53:BC:E6"}}},"request":{"raw":"GET /su/?pref=230_9132_35680\u0026utm_source=https%3A%2F%2Fsportandbets.com\u0026utm_medium=affiliates\u0026cppcids=all HTTP/1.1\r\nHost: www.marathonbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nCookie: panbet.openeventnameseparately=true; panbet.openadditionalmarketsseparately=false\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 02:05:47 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-encoding: gzip\r\nset-cookie: refererId=502243; Expires=Sat, 21 Feb 2026 02:05:47 GMT; Path=/; HttpOnly; SameSite=None; Secure\npref=230_9132_35680%2C%2Chttps%3A%2F%2Fsportandbets.com; Expires=Wed, 21 Nov 2035 02:05:47 GMT; Path=/; SameSite=None; Secure\nvisitedNavBarItems=HOME; Path=/; HttpOnly; SameSite=None; Secure\nlastSitePart=SPORT; Expires=Mon, 23 Nov 2026 02:05:47 GMT; Path=/; HttpOnly; SameSite=None; Secure\npuid=rBkp8mkia/ukPhx5Ax2HAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.marathonbet.com; path=/\r\nx-frame-options: DENY\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nlast-modified: Sun, 23 Nov 2025 02:05:47 GMT\r\nvary: accept-encoding\r\ncache-status: MISS\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfOrigin;dur=88,cfEdge;dur=9\r\nserver: cloudflare\r\ncf-ray: 9a2d1a82ef93783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.runetki3.com/?c=783968","fqdn":"en.runetki3.com","domain":"runetki3.com","tld":"com"},"ip":{"addr":"195.85.23.136","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:45.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"runetki3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 09:36:51 GMT","end":"Sat, 27 Dec 2025 09:36:50 GMT"},"fingerprint":{"sha1":"7E:F7:EE:D9:1F:7C:E4:7F:D5:4D:94:D2:32:3F:25:63:0A:F8:5F:CA","sha256":"15:4D:53:5E:D2:03:8A:DC:8B:05:7C:03:E3:0E:1A:41:1F:FD:89:74:FC:AE:C3:A1:98:8F:88:5C:51:1B:C1:F0"}}},"request":{"raw":"GET /?c=783968 HTTP/1.1\r\nHost: en.runetki3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: bonga20120608=17d4cd2563bb0be435e0c2e54e12977f; __cf_bm=Xh2QhcYzaOHcSP0tlB84rKOsnwAPCz62awp4pjaHxzs-1763863544-1.0.1.1-X_wDfAkNeOQhbj6wJ4UjE1RDdRgYR70JxKuEeXFdGYyRhFrPtJTdTDKYMNg0P8erKu_AII8kv4Vcm_9bbos9E8Kuz1HuCVpF6CJcH9Jr8NGGFNg7FCC..VbTEgbz9PD1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: origin-when-cross-origin\r\nx-ua-compatible: IE=edge,chrome=1\r\nset-cookie: ts_type2=1; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.runetki3.com\nfv=AGD1ZmL4ZmL3ZD==; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.runetki3.com\nuh=JwEVMHSbqR16DH02HzcirJgaGRqAot==; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.runetki3.com\nratr=-1%3A%3A783968%3A%3A2025-11-23%2004%3A05%3A45%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A; expires=Mon, 11-Nov-2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.runetki3.com; HttpOnly\nBONGA_REF=https%3A%2F%2Fbetsonsport.ru%2F; expires=Fri, 22-May-2026 02:05:45 GMT; Max-Age=15552000; path=/; domain=.runetki3.com; HttpOnly\nsg=672; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.runetki3.com; secure; SameSite=None\nwarning18=%5B%22en_US%22%5D; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.runetki3.com; secure; SameSite=None\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-zone: 5a-web51\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a2d1a74cb311525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":232,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bongacams.com/track?a=183967\u0026p=2\u0026camp=631","fqdn":"bongacams.com","domain":"bongacams.com","tld":"com"},"ip":{"addr":"195.85.23.89","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:47.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bongacams.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 02 May 2025 00:00:00 GMT","end":"Mon, 01 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:E5:1E:9D:FE:EE:60:B4:57:D1:80:25:CB:0B:CF:49:85:21:CD:9E","sha256":"41:07:E9:F0:BF:0E:AE:5D:01:2B:64:B5:48:40:B5:DC:6D:FD:18:F7:99:CB:5E:56:99:2B:CC:B7:51:21:A8:A4"}}},"request":{"raw":"GET /track?a=183967\u0026p=2\u0026camp=631 HTTP/1.1\r\nHost: bongacams.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nCookie: __cf_bm=GQ4nt1DMQ0c0IlgAjjuzKokXJYZbuQ.acgHlIiMeKAQ-1763863544-1.0.1.1-z5EyYft8fv4C9yw7m2hMCW_lFvbRYhsf6MfpUw3zS3r_4uC0vPZMfvA_m3ERkBoUOCAy3awgCbssYESUIvoZOyYdtta8uUodJKoyEv1XW_I3pqrozr7ggVByW7aVrU44; bonga20120608=4882ff79eaaa09edf2ac4c0af912d115; BONGAH_HIT=d58a680cb564aa45bf1a67d49fd5c3de%3A%3A181740%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A%3A%3A280492%3A%3A%3A%3A%3A%3A0%3A%3A0%3A%3A0%3A%3A0%3A%3A%3A%3A0%3A%3Adefault%3A%3A0%3A%3A2025-11-23%2004%3A05%3A45; sg=502; warning18=%5B%22en_US%22%5D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 02:05:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\nlocation: https://bngtrak.com/hit.php?a=183967\u0026p=2\u0026camp=631\r\ncf-ray: 9a2d1a84ae50712d-OSL\r\nx-bc: ded7850\r\nx-zone: 5a-web51\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betsonsport.ru/click/stake.com/?c=9oqyeOD7","fqdn":"betsonsport.ru","domain":"betsonsport.ru","tld":"ru"},"ip":{"addr":"217.26.27.243","port":443,"asn":41783,"as":"Informational technologies and electronic communications LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:44.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"betsonsport.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 07:28:15 GMT","end":"Sat, 31 Jan 2026 07:28:14 GMT"},"fingerprint":{"sha1":"83:0B:C4:C4:A4:16:38:D6:04:00:79:FB:78:66:E0:E8:FE:74:9A:4B","sha256":"42:71:BD:6D:BA:3D:2C:C2:FD:2E:1C:26:1D:71:28:BD:E4:E4:16:57:A1:13:4D:CE:20:E4:DF:7D:8C:0D:CC:01"}}},"request":{"raw":"GET /click/stake.com/?c=9oqyeOD7 HTTP/1.1\r\nHost: betsonsport.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/click/sport66.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx/1.29.1\r\ndate: Sun, 23 Nov 2025 02:05:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept, Cookie, Content-Type, Authorization, Content-Length, X-Requested-With, Origin\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Set-Cookie, X-Powered-By\r\nvary: Origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.29.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"4845f01eaa8068384625e302e9a4eb05","sha1":"fb6ff8293fa45e17ba97f84954e7d1d5b0d38f87","sha256":"8a482f2271a42c5f54c96e816a84340a6f2357a5b81f927d07d00788f5140a41","sha512":"bb58f2438524b518b19f2b74c5d598460735958f77c310ba3710520d1d88ce7975449977c9965dbca87cd6a824c8ab82e56bea6d571d79594079f0a0ea404d77","ssdeep":"","tlshash":"4160000c03030f0c00c0c03ccfc00030000c03000cc033f00000c00c000000c3cc00fc","first_seen":"2023-03-13T05:02:59Z","last_seen":"2026-04-05T04:00:23.011102Z","times_seen":9885,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ru.bongacash.com/ref?c=280494","fqdn":"ru.bongacash.com","domain":"bongacash.com","tld":"com"},"ip":{"addr":"195.85.23.185","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:44.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bongacash.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:7C:A5:66:E4:91:C6:39:7B:F5:A3:C7:E9:68:0C:C0:AD:9B:79:9A","sha256":"5C:C6:DC:89:C9:5E:BD:B1:EA:9E:24:74:22:0F:8F:45:EA:13:E9:D8:48:8D:6B:53:1C:74:F2:8A:E1:4A:62:0A"}}},"request":{"raw":"GET /ref?c=280494 HTTP/1.1\r\nHost: ru.bongacash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 23 Nov 2025 02:05:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://ru.bongacash.com/\r\ncf-ray: 9a2d1a738d3d56be-OSL\r\nset-cookie: bongacash=fdbde98f4a9073670a78d97cda343893; path=/; domain=.bongacash.com; secure; HttpOnly\nBCS_HID=cGFzczo6MTgxNzQwOjoyODA0OTQ6Ok5POjo~; expires=Wed, 21 Nov 2035 02:05:44 GMT; Max-Age=315360000; path=/; domain=.bongacash.com; secure; HttpOnly\n__cf_bm=6OtbvVgqunNdzcLadazpCNtzn6rM.HiZRYNxsTpQf3Q-1763863544-1.0.1.1-JTbV0tcMKQXwTZ_AI04ygWYf2g7mpK32R04GE_4XhWBgqeEtYELSnWmCokRUwr_rkPAgHUKS__xIJgvgnDW8_ik7qPf7AQQwY9AWLwIBkOe2LOdMBIz6e.DqngTB9XH3; path=/; expires=Sun, 23-Nov-25 02:35:44 GMT; domain=.bongacash.com; HttpOnly; Secure; SameSite=None\r\ncache-control: no-cache, no-store, must-revalidate, no-cache, no-store, must-revalidate\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":38,"connect":7,"send":0,"wait":76,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:46.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:46 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dd8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bngtrak.com/hit.php?v=2\u0026c=280492","fqdn":"bngtrak.com","domain":"bngtrak.com","tld":"com"},"ip":{"addr":"31.192.112.221","port":443,"asn":48684,"as":"Viking Host B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:47.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bngtrak.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Tue, 03 Jun 2025 00:00:00 GMT","end":"Fri, 03 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:65:E9:D9:F9:3F:CB:8F:58:5F:C4:2E:D5:44:DB:B0:38:1D:5A:3A","sha256":"92:0E:CC:64:11:B5:66:84:BD:55:BD:0A:44:43:6C:9B:6A:78:75:21:BB:2F:0A:F6:EE:F4:D2:63:A0:B2:88:98"}}},"request":{"raw":"GET /hit.php?v=2\u0026c=280492 HTTP/1.1\r\nHost: bngtrak.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 02:05:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\nset-cookie: BCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.promo-bc.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bongocams.biz\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bongacams.org\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bongacams11.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bcmspt.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngwlt.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngpt.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngpst.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngprl.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngpop.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngosv.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngvs.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngdyn.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngdin.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.dynspt.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.ecdyn.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.trkbc.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.trkbng.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngtrk.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngtrak.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bcprm.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngprm.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngrol.com\r\nlocation: https://bongacams.com?bcs=cGVyaWQ1OGE2ODBjYjU2NGFhNDViZjFhNjdkNDlmZDVjM2RlOjoxODE3NDA6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6MjgwNDkyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~\r\nexpires: Sun, 23 Nov 2025 02:05:46 GMT\r\nx-bcs: ded7015\r\nstrict-transport-security: max-age=0;\r\ncache-control: no-cache, public\r\nx-bc-bl: 102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ru.bongacash.com/ref?c=280494","fqdn":"ru.bongacash.com","domain":"bongacash.com","tld":"com"},"ip":{"addr":"195.85.23.185","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:48.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bongacash.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:7C:A5:66:E4:91:C6:39:7B:F5:A3:C7:E9:68:0C:C0:AD:9B:79:9A","sha256":"5C:C6:DC:89:C9:5E:BD:B1:EA:9E:24:74:22:0F:8F:45:EA:13:E9:D8:48:8D:6B:53:1C:74:F2:8A:E1:4A:62:0A"}}},"request":{"raw":"GET /ref?c=280494 HTTP/1.1\r\nHost: ru.bongacash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nCookie: __cf_bm=6OtbvVgqunNdzcLadazpCNtzn6rM.HiZRYNxsTpQf3Q-1763863544-1.0.1.1-JTbV0tcMKQXwTZ_AI04ygWYf2g7mpK32R04GE_4XhWBgqeEtYELSnWmCokRUwr_rkPAgHUKS__xIJgvgnDW8_ik7qPf7AQQwY9AWLwIBkOe2LOdMBIz6e.DqngTB9XH3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 02:05:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://ru.bongacash.com/\r\ncf-ray: 9a2d1a8b3a6bb51d-OSL\r\nset-cookie: bongacash=21ceeb9632f8b4da491465b4206195a1; path=/; domain=.bongacash.com; secure; HttpOnly\nBCS_HID=cGFzczo6MTgxNzQwOjoyODA0OTQ6Ok5POjo~; expires=Wed, 21 Nov 2035 02:05:48 GMT; Max-Age=315360000; path=/; domain=.bongacash.com; secure; HttpOnly\r\ncache-control: no-cache, no-store, must-revalidate, no-cache, no-store, must-revalidate\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betsonsport.ru/click/sport66.php","fqdn":"betsonsport.ru","domain":"betsonsport.ru","tld":"ru"},"ip":{"addr":"217.26.27.243","port":443,"asn":41783,"as":"Informational technologies and electronic communications LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-23T02:05:44.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"betsonsport.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 07:28:15 GMT","end":"Sat, 31 Jan 2026 07:28:14 GMT"},"fingerprint":{"sha1":"83:0B:C4:C4:A4:16:38:D6:04:00:79:FB:78:66:E0:E8:FE:74:9A:4B","sha256":"42:71:BD:6D:BA:3D:2C:C2:FD:2E:1C:26:1D:71:28:BD:E4:E4:16:57:A1:13:4D:CE:20:E4:DF:7D:8C:0D:CC:01"}}},"request":{"raw":"GET /click/sport66.php HTTP/1.1\r\nHost: betsonsport.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.29.1\r\ndate: Sun, 23 Nov 2025 02:05:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept, Cookie, Content-Type, Authorization, Content-Length, X-Requested-With, Origin\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Set-Cookie, X-Powered-By\r\nvary: Origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2593,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2593), with no line terminators","md5":"caaa823cc556ee0e6769466d27f30e21","sha1":"606aaa54d1ec2dd3dbd6d83ed542648a48080230","sha256":"c6daa098fc619627796f1b97d9bcc015a013ecf7e6b958f343227f1add5c10fe","sha512":"16467bccc10b169d75b021dcc48f8d8ee3074857e701a2688185519ee8f60355d05a5535a068d74adb2838d7732499b491601d42d47a406bbe1aef7a61ebba65","ssdeep":"","tlshash":"63511bd3fc28cd8c2c5646cda0b1f92cc099a47bde60fce9c6d911885a82bfe0d51c25","first_seen":"2025-11-23T02:06:16.794428Z","last_seen":"2025-11-23T02:06:16.794428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":124,"dns":33,"connect":28,"send":0,"wait":28,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:46.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:46 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dd8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.com/ru/?tag=s_201033m_355c_com","fqdn":"1xbet.com","domain":"1xbet.com","tld":"com"},"ip":{"addr":"172.64.146.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:44.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 09 Jul 2025 00:00:00 GMT","end":"Sat, 08 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6E:5A:F9:7A:81:FC:AB:30:48:A0:34:8E:33:5B:D2:8E:0D:72:21:9E","sha256":"C7:34:76:B2:97:3B:98:D7:A1:C1:32:35:94:8F:86:9A:7B:3B:E1:0C:49:A6:F2:FD:C3:FC:4D:5E:88:D3:33:91"}}},"request":{"raw":"GET /ru/?tag=s_201033m_355c_com HTTP/1.1\r\nHost: 1xbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sun, 23 Nov 2025 02:05:44 GMT\r\ncf-ray: 9a2d1a726a8f3181-OSL\r\nlocation: /ru?tag=s_201033m_355c_com\r\nreason-v3: slash_end\r\nserver-timing: dt_total;dur=0.007, total;dur=0;desc=\"Nuxt Server Time\", wf-uht;dur=0.003\r\nset-cookie: platform_type=desktop; Path=/; Expires=Wed, 26 Nov 2025 02:05:44 GMT; Secure; SameSite=None; Partitioned\ngw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\ngw-blk=eyJkYXRhIjp7ImlkIjoyMjk0LCJkaXNwbGF5VHlwZUlkIjoxLCJ0ZW1wbGF0ZVR5cGVJZCI6MSwidGVtcGxhdGVJZCI6MX0sImJyZWFkY3J1bWJzIjpbMSwxMiwxNCwxNSw4ODUsMjMyMiwxNiwyNTA5LDQ5NSw4MTIsOTg1LDgxMywxNywxOCwyMTg2LDIzNjgsMjMwMCwyMzc2LDg0NiwyMjY3LDIyOTEsMjMwMywyMzc1LDgxMCw5NDQsMjIxMSwyNDA5LDI0OTUsMjUxOSwxMDkwLDEwOTMsMjE5MSwyNTAwLDEwMDIsMjI0MiwyMzAxLDI0NjEsMjQ2NCwyNDY1LDI0NjIsMjQ2NiwyMjU2LDIyNTEsMjI4NywyNDMyLDI0NzgsMjM0NSw0ODQsMzk1LDIzMjgsMjQwMiwyMzMyLDQ3NCw0NzYsMTAwNiwyMzk0LDI1MTgsMjM2NiwyNTIwLDI0MDMsMjMxMSwyNTE2LDgwOSw5MTIsODA2LDI1MjEsMjUxNSw3ODYsNzY4LDc3NSw3NjcsNzY2LDc1MSwyNDI0LDEwMzksMjMyNywyNDIyLDI0NjgsOTA3LDk4NCwxMTA2LDI0MDgsMjMwNywyMTU1LDIzNzIsMTExOSwyMjk2LDIzNTQsMjM0MCw5NjgsMjIyOSwyMzkyLDI0MzEsMjQxMywyNDM0LDEwOTYsMjM1MSw3NTksMjIyOCwyMjE0LDg0Myw4NDIsMjM1Miw3NTYsNzQ3LDc0OCw1NDgsMjM1MywyNDI1LDI0MjYsMjQ3MywyNDkyLDc4NywyNDQ2LDIxNjMsODM5LDc4MywyNDc3LDUyNSwyNTEzLDI0ODAsMjQzOSwyNDQwLDI1MDcsNTI0LDEwNzUsMjQxNiwxMDc0LDU0OSw5NDMsNTEyLDExMTcsMTEwMSwxMDczLDIzMTAsMjM5NywyNDYzLDI0NTIsMjM3OCwyMzg4LDIzODksMjM5NiwyNDA3LDI0MTAsMjQxMiwyNDE4LDI0MjAsMjQ3NSwyNDI4LDI0MzUsMjQ2NywyNDUxLDI0MjMsMjM2OSwxMDc4LDI0MzcsMTEwMCwyNDM2LDI1MTEsMjQyOSwyNTE0LDEwMTksNTE1LDUyMiw3NjksNDc1LDU0NSw4MTUsODE3LDI0NTYsMjUwMSwyNTA4LDQ3Nyw0OTgsOTQyLDIzMjAsMjI4OSwyMjgwLDEwODYsOTc4LDEwODQsOTg2LDIxOTcsOTkzLDk3Nyw1MzAsMjI0Myw5ODEsOTg3LDIxODIsMjI5NSwyMTU2LDIxNTcsMTA5Miw4MDQsMjIzOSwyMjIxLDk5NCw5OTksOTk4LDk5NSwxMDA3LDEwMDgsMTAxMCwxMDA1LDExMDIsMjE5OSwyMTk4LDEwMTIsMTAyMywxMDk4LDIyMDEsMTAyMiwxMDQwLDI0NzEsMjQ4OCwyMTU5LDEwODksMjE3OSwxMTIyLDEwODcsMTA0MiwxMDQzLDEwNzYsMTA3NywyMzYyLDI0OTcsMjE3MSwyNDg5LDIxNzcsMjE3NiwyNDkxLDI1MTIsMTA4Myw1MzEsOTkyLDk5MCwyMzQ3LDEwNDEsMjM5OCwyMjAyLDEwMTgsMjQ0NCwyNDcyLDEwOTksMTA4Miw3ODQsNTU3LDc3OCw3ODIsMTksNjU2LDIyMjAsMjI5NF19; Path=/; HttpOnly\nauid=Hyjau2kia/iuo01ICwXxAg==; path=/; secure; httponly; samesite=lax\r\nx-dt: 285\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":262046,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":4,"dns":3,"connect":1,"send":0,"wait":48,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:45.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dc8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"member.neteller.com/wallet/account/sign-up?lang=ru\u0026btag=a_37477b_3366c_666661\u0026program=NTAFFILIATE","fqdn":"member.neteller.com","domain":"neteller.com","tld":"com"},"ip":{"addr":"3.167.2.78","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:45.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skrill.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 26 Oct 2025 00:00:00 GMT","end":"Tue, 24 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"01:BA:46:74:5E:C2:56:B0:AE:4D:7D:57:EC:67:4F:7F:11:06:C1:BC","sha256":"CC:4F:20:E5:6F:86:A6:A3:4E:93:43:9E:D8:88:7D:43:D6:D1:89:BD:6C:73:56:AE:F0:D3:6E:DE:FF:7B:C4:90"}}},"request":{"raw":"GET /wallet/account/sign-up?lang=ru\u0026btag=a_37477b_3366c_666661\u0026program=NTAFFILIATE HTTP/1.1\r\nHost: member.neteller.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Tue, 11 Nov 2025 09:48:10 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 9LstaLAfpggSJXLhQVmurEzRJHkRtJSa\r\nserver: AmazonS3\r\ncontent-encoding: gzip\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncache-control: public, max-age=120\r\netag: W/\"a47db258da658c54882efe684a9b2f01\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 7bc180ff569f641823300f4c342cb63a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: BRuGzEDaAYQj7N8cg7ubuSHWycbsRdwckDp2V9OtyzBhaepTEb2dnA==\r\nage: 25\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors https://*.skrill.com https://*.neteller.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:45.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:46 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dd8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.marathonbet.dk/join.htm?tracking_link=http%3A%2F%2Fmrthnbtt.com%2Fda62da458","fqdn":"www.marathonbet.dk","domain":"marathonbet.dk","tld":"dk"},"ip":{"addr":"172.64.145.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:47.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marathonbet.dk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 20:40:13 GMT","end":"Sun, 15 Feb 2026 21:40:09 GMT"},"fingerprint":{"sha1":"C6:67:8A:D9:FC:1E:83:99:73:F2:E8:AC:6C:72:70:C2:0D:8F:4F:59","sha256":"EF:20:66:F4:45:2F:21:BF:8A:EA:DF:14:33:05:8C:48:C6:BF:0B:D4:5D:CE:CE:EF:D2:2C:3D:4C:A8:49:89:B5"}}},"request":{"raw":"GET /join.htm?tracking_link=http%3A%2F%2Fmrthnbtt.com%2Fda62da458 HTTP/1.1\r\nHost: www.marathonbet.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nCookie: panbet.openeventnameseparately=true; panbet.openadditionalmarketsseparately=false; JSESSIONID=webmaster2~BC5CEE5F1F379D6C5BAABAB9E1882163; SESSION_KEY=41b156c4cc59454aa475a3ec29889d9c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 02:05:47 GMT\r\ncontent-length: 0\r\nlocation: https://www.marathonbet.dk/en/join.htm?tracking_link=http%3A%2F%2Fmrthnbtt.com%2Fda62da458\r\ncf-ray: 9a2d1a81be8a569d-OSL\r\ncache-status: MISS\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nfeature-policy: microphone 'none'; camera 'none'; push 'none'; payment 'none'\r\nx-xss-protection: 1; mode=block\r\nset-cookie: puid=rBpK3mkia/uG/jJbAyL/Ag==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.marathonbet.dk; path=/; secure\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"member.neteller.com/wallet/account/sign-up?lang=ru\u0026btag=a_37477b_3366c_666661\u0026program=NTAFFILIATE","fqdn":"member.neteller.com","domain":"neteller.com","tld":"com"},"ip":{"addr":"3.167.2.78","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:47.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skrill.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 26 Oct 2025 00:00:00 GMT","end":"Tue, 24 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"01:BA:46:74:5E:C2:56:B0:AE:4D:7D:57:EC:67:4F:7F:11:06:C1:BC","sha256":"CC:4F:20:E5:6F:86:A6:A3:4E:93:43:9E:D8:88:7D:43:D6:D1:89:BD:6C:73:56:AE:F0:D3:6E:DE:FF:7B:C4:90"}}},"request":{"raw":"GET /wallet/account/sign-up?lang=ru\u0026btag=a_37477b_3366c_666661\u0026program=NTAFFILIATE HTTP/1.1\r\nHost: member.neteller.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Tue, 11 Nov 2025 09:48:10 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 9LstaLAfpggSJXLhQVmurEzRJHkRtJSa\r\nserver: AmazonS3\r\ncontent-encoding: gzip\r\ndate: Sun, 23 Nov 2025 02:05:47 GMT\r\ncache-control: public, max-age=120\r\netag: W/\"a47db258da658c54882efe684a9b2f01\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 7bc180ff569f641823300f4c342cb63a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: T3uDoNMsKBaF_cd8FcgbinRUT0obynoSqlF_D3b9U_JADys3yiuInA==\r\nage: 27\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors https://*.skrill.com https://*.neteller.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ru.bongacash.com/","fqdn":"ru.bongacash.com","domain":"bongacash.com","tld":"com"},"ip":{"addr":"195.85.23.185","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:48.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bongacash.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:7C:A5:66:E4:91:C6:39:7B:F5:A3:C7:E9:68:0C:C0:AD:9B:79:9A","sha256":"5C:C6:DC:89:C9:5E:BD:B1:EA:9E:24:74:22:0F:8F:45:EA:13:E9:D8:48:8D:6B:53:1C:74:F2:8A:E1:4A:62:0A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ru.bongacash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=6OtbvVgqunNdzcLadazpCNtzn6rM.HiZRYNxsTpQf3Q-1763863544-1.0.1.1-JTbV0tcMKQXwTZ_AI04ygWYf2g7mpK32R04GE_4XhWBgqeEtYELSnWmCokRUwr_rkPAgHUKS__xIJgvgnDW8_ik7qPf7AQQwY9AWLwIBkOe2LOdMBIz6e.DqngTB9XH3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 02:05:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nset-cookie: bongacash=4f3052f401275c836795d197ca789e30; path=/; domain=.bongacash.com; secure; HttpOnly\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: *.bcvcdn.com *.bngprm.com *.wlicdn.com *.google.com https://www.google.com *.hcaptcha.com hcaptcha.com challenges.cloudflare.com *.google-analytics.com www.googletagmanager.com stats.g.doubleclick.net *.gstatic.com fonts.googleapis.com cdn.fluidplayer.com https://blog.bongacams.com https://blog.bongacams.net *.bongacash.com bongacash.com i.bongacash.com i.bcshcdn.com bngprm.com bngpst.com bngrol.com bngpop.com bcmspt.com bngdin.com dynspt.com ecdyn.com i.bngprm.com i.bngpst.com i.bngrol.com i.bngpop.com i.bcmspt.com i.bngdin.com i.dynspt.com i.ecdyn.com *.bongacams.com *.bongacams.net *.bongacams7.com *.bongacams8.com *.bongacams10.com *.bongacams11.com *.bongacams12.com *.bongacams13.com *.bongacams14.com *.bongacams15.com *.bongacams16.com *.bongacams17.com *.bongacams18.com *.bongacams19.com *.bongacams20.com *.bongacams21.com *.bongacams22.com *.bongacams23.com *.bongacams25.com *.bongacams26.com *.bongacams27.com *.bongacams28.com *.bongacams29.com; img-src * data:; media-src * data: blob:; frame-ancestors 'self' *.bongacash.com;\r\ncache-control: no-cache, no-store, must-revalidate, no-cache, no-store, must-revalidate\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a2d1a8beaa7b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betsonsport.ru/click/mbbgpet.xyz/su/?2Fda9ce45ac","fqdn":"betsonsport.ru","domain":"betsonsport.ru","tld":"ru"},"ip":{"addr":"217.26.27.243","port":443,"asn":41783,"as":"Informational technologies and electronic communications LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:44.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"betsonsport.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 07:28:15 GMT","end":"Sat, 31 Jan 2026 07:28:14 GMT"},"fingerprint":{"sha1":"83:0B:C4:C4:A4:16:38:D6:04:00:79:FB:78:66:E0:E8:FE:74:9A:4B","sha256":"42:71:BD:6D:BA:3D:2C:C2:FD:2E:1C:26:1D:71:28:BD:E4:E4:16:57:A1:13:4D:CE:20:E4:DF:7D:8C:0D:CC:01"}}},"request":{"raw":"GET /click/mbbgpet.xyz/su/?2Fda9ce45ac HTTP/1.1\r\nHost: betsonsport.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/click/sport66.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx/1.29.1\r\ndate: Sun, 23 Nov 2025 02:05:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept, Cookie, Content-Type, Authorization, Content-Length, X-Requested-With, Origin\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Set-Cookie, X-Powered-By\r\nvary: Origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.29.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"4845f01eaa8068384625e302e9a4eb05","sha1":"fb6ff8293fa45e17ba97f84954e7d1d5b0d38f87","sha256":"8a482f2271a42c5f54c96e816a84340a6f2357a5b81f927d07d00788f5140a41","sha512":"bb58f2438524b518b19f2b74c5d598460735958f77c310ba3710520d1d88ce7975449977c9965dbca87cd6a824c8ab82e56bea6d571d79594079f0a0ea404d77","ssdeep":"","tlshash":"4160000c03030f0c00c0c03ccfc00030000c03000cc033f00000c00c000000c3cc00fc","first_seen":"2023-03-13T05:02:59Z","last_seen":"2026-04-05T04:00:23.011102Z","times_seen":9885,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.com/ru?tag=s_201033m_355c_com","fqdn":"1xbet.com","domain":"1xbet.com","tld":"com"},"ip":{"addr":"172.64.146.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:44.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 09 Jul 2025 00:00:00 GMT","end":"Sat, 08 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6E:5A:F9:7A:81:FC:AB:30:48:A0:34:8E:33:5B:D2:8E:0D:72:21:9E","sha256":"C7:34:76:B2:97:3B:98:D7:A1:C1:32:35:94:8F:86:9A:7B:3B:E1:0C:49:A6:F2:FD:C3:FC:4D:5E:88:D3:33:91"}}},"request":{"raw":"GET /ru?tag=s_201033m_355c_com HTTP/1.1\r\nHost: 1xbet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 23 Nov 2025 02:05:44 GMT\r\nlocation: https://1xbet.com/ru/block\r\ncf-ray: 9a2d1a72fb0c3181-OSL\r\nserver-timing: dt_total;dur=0.006, total;dur=24;desc=\"Nuxt Server Time\", wf-uht;dur=0.028\r\nset-cookie: gw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\ngw-blk=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; Path=/; HttpOnly\nlng=ru; Path=/\ncookies_agree_type=3; Path=/\ntzo=1; Path=/\nis12h=0; Path=/\nreferral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22s_201033m_355c_com%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; Path=/; Expires=Thu, 22 Jan 2026 02:05:44 GMT\nreflinkid=s_201033m_355c_com; Path=/; Expires=Sun, 23 Nov 2025 03:05:44 GMT\npostback_watcher=; Path=/; Expires=Sun, 23 Nov 2025 02:05:48 GMT\nauid=Hyjau2kia/iuo01ICwXzAg==; path=/; secure; httponly; samesite=lax\r\nx-dt: 285\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":262046,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:45.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dc8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:46.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:46 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dd8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:46.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:46 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dd8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betsonsport.ru/click/mbbgpet.xyz/su/?Fda62da458","fqdn":"betsonsport.ru","domain":"betsonsport.ru","tld":"ru"},"ip":{"addr":"217.26.27.243","port":443,"asn":41783,"as":"Informational technologies and electronic communications LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:47.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"betsonsport.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 07:28:15 GMT","end":"Sat, 31 Jan 2026 07:28:14 GMT"},"fingerprint":{"sha1":"83:0B:C4:C4:A4:16:38:D6:04:00:79:FB:78:66:E0:E8:FE:74:9A:4B","sha256":"42:71:BD:6D:BA:3D:2C:C2:FD:2E:1C:26:1D:71:28:BD:E4:E4:16:57:A1:13:4D:CE:20:E4:DF:7D:8C:0D:CC:01"}}},"request":{"raw":"GET /click/mbbgpet.xyz/su/?Fda62da458 HTTP/1.1\r\nHost: betsonsport.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/click/sport66.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx/1.29.1\r\ndate: Sun, 23 Nov 2025 02:05:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept, Cookie, Content-Type, Authorization, Content-Length, X-Requested-With, Origin\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Set-Cookie, X-Powered-By\r\nvary: Origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.29.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"4845f01eaa8068384625e302e9a4eb05","sha1":"fb6ff8293fa45e17ba97f84954e7d1d5b0d38f87","sha256":"8a482f2271a42c5f54c96e816a84340a6f2357a5b81f927d07d00788f5140a41","sha512":"bb58f2438524b518b19f2b74c5d598460735958f77c310ba3710520d1d88ce7975449977c9965dbca87cd6a824c8ab82e56bea6d571d79594079f0a0ea404d77","ssdeep":"","tlshash":"4160000c03030f0c00c0c03ccfc00030000c03000cc033f00000c00c000000c3cc00fc","first_seen":"2023-03-13T05:02:59Z","last_seen":"2026-04-05T04:00:23.011102Z","times_seen":9885,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.marathonbet.dk/en/join.htm?tracking_link=http%3A%2F%2Fmrthnbtt.com%2Fda62da458","fqdn":"www.marathonbet.dk","domain":"marathonbet.dk","tld":"dk"},"ip":{"addr":"172.64.145.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:47.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marathonbet.dk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 20:40:13 GMT","end":"Sun, 15 Feb 2026 21:40:09 GMT"},"fingerprint":{"sha1":"C6:67:8A:D9:FC:1E:83:99:73:F2:E8:AC:6C:72:70:C2:0D:8F:4F:59","sha256":"EF:20:66:F4:45:2F:21:BF:8A:EA:DF:14:33:05:8C:48:C6:BF:0B:D4:5D:CE:CE:EF:D2:2C:3D:4C:A8:49:89:B5"}}},"request":{"raw":"GET /en/join.htm?tracking_link=http%3A%2F%2Fmrthnbtt.com%2Fda62da458 HTTP/1.1\r\nHost: www.marathonbet.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nCookie: panbet.openeventnameseparately=true; panbet.openadditionalmarketsseparately=false; JSESSIONID=webmaster2~BC5CEE5F1F379D6C5BAABAB9E1882163; SESSION_KEY=41b156c4cc59454aa475a3ec29889d9c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 02:05:47 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-encoding: br\r\nx-frame-options: DENY\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nlast-modified: Sun, 23 Nov 2025 02:05:47 GMT\r\nvary: accept-encoding\r\ncache-status: MISS\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nfeature-policy: microphone 'none'; camera 'none'; push 'none'; payment 'none'\r\nx-xss-protection: 1; mode=block\r\nset-cookie: puid=rBpK3mkia/uG/jJbAyMBAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.marathonbet.dk; path=/; secure\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a2d1a820e9d569d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bongacams.xxx/track?v=2\u0026c=280492","fqdn":"bongacams.xxx","domain":"bongacams.xxx","tld":"xxx"},"ip":{"addr":"195.85.23.209","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:48.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bongacams.xxx","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Nov 2025 22:14:16 GMT","end":"Fri, 30 Jan 2026 22:14:15 GMT"},"fingerprint":{"sha1":"1E:33:0C:32:47:05:33:D4:D7:1D:F0:78:EC:61:7F:EA:43:55:98:9C","sha256":"ED:7C:A1:BA:CB:BA:CA:EB:D3:EE:A8:AB:4B:6C:81:40:5E:50:33:19:A0:11:73:34:BE:BC:00:37:0D:4C:37:C1"}}},"request":{"raw":"GET /track?v=2\u0026c=280492 HTTP/1.1\r\nHost: bongacams.xxx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nCookie: __cf_bm=8qBf.pRAKEVIcYHT39jCN2IxZ9tHSPSeO9xyufYSMTA-1763863544-1.0.1.1-8Ccf5gOkDRuzYTUf9vJ26ibE6gofKHX1ZinCdx7ht3.pfd0dX3qW9VPq22FdK9rkPVHbF4RFWiYR0enRudclimbJTJw0r6D1g3KJKhmKnYmeEWgiGRKHSJ2W0bBuguQA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 02:05:48 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\nlocation: https://bngtrak.com/hit.php?v=2\u0026c=280492\r\ncf-ray: 9a2d1a87bca156c6-OSL\r\nx-bc: ded7850\r\nx-zone: 5a-web51\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runetki3.com/?c=783968","fqdn":"runetki3.com","domain":"runetki3.com","tld":"com"},"ip":{"addr":"195.85.23.136","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:48.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"runetki3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 09:36:51 GMT","end":"Sat, 27 Dec 2025 09:36:50 GMT"},"fingerprint":{"sha1":"7E:F7:EE:D9:1F:7C:E4:7F:D5:4D:94:D2:32:3F:25:63:0A:F8:5F:CA","sha256":"15:4D:53:5E:D2:03:8A:DC:8B:05:7C:03:E3:0E:1A:41:1F:FD:89:74:FC:AE:C3:A1:98:8F:88:5C:51:1B:C1:F0"}}},"request":{"raw":"GET /?c=783968 HTTP/1.1\r\nHost: runetki3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nCookie: bonga20120608=17d4cd2563bb0be435e0c2e54e12977f; __cf_bm=Xh2QhcYzaOHcSP0tlB84rKOsnwAPCz62awp4pjaHxzs-1763863544-1.0.1.1-X_wDfAkNeOQhbj6wJ4UjE1RDdRgYR70JxKuEeXFdGYyRhFrPtJTdTDKYMNg0P8erKu_AII8kv4Vcm_9bbos9E8Kuz1HuCVpF6CJcH9Jr8NGGFNg7FCC..VbTEgbz9PD1; sg=672; warning18=%5B%22en_US%22%5D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Sun, 23 Nov 2025 02:05:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://en.runetki3.com/?c=783968\r\ncf-ray: 9a2d1a895de91525-OSL\r\nset-cookie: ts_type2=1; expires=Mon, 23-Nov-2026 02:05:48 GMT; Max-Age=31536000; path=/; domain=.runetki3.com\nfv=BQD1ZmL4ZmL3ZD==; expires=Mon, 23-Nov-2026 02:05:48 GMT; Max-Age=31536000; path=/; domain=.runetki3.com\nuh=L2WkDIS6JT5EoKugHGOTHTMUHaMTBN==; expires=Mon, 23-Nov-2026 02:05:48 GMT; Max-Age=31536000; path=/; domain=.runetki3.com\nratr=-1%3A%3A783968%3A%3A2025-11-23%2004%3A05%3A48%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A; expires=Mon, 11-Nov-2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.runetki3.com; HttpOnly\nlc=en_US; expires=Mon, 23-Nov-2026 02:05:48 GMT; Max-Age=31536000; path=/; domain=.runetki3.com; secure\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-zone: 5a-web44\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betsonsport.ru/favicon.ico","fqdn":"betsonsport.ru","domain":"betsonsport.ru","tld":"ru"},"ip":{"addr":"217.26.27.243","port":443,"asn":41783,"as":"Informational technologies and electronic communications LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:48.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"betsonsport.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 07:28:15 GMT","end":"Sat, 31 Jan 2026 07:28:14 GMT"},"fingerprint":{"sha1":"83:0B:C4:C4:A4:16:38:D6:04:00:79:FB:78:66:E0:E8:FE:74:9A:4B","sha256":"42:71:BD:6D:BA:3D:2C:C2:FD:2E:1C:26:1D:71:28:BD:E4:E4:16:57:A1:13:4D:CE:20:E4:DF:7D:8C:0D:CC:01"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: betsonsport.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/click/sport66.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx/1.29.1\r\ndate: Sun, 23 Nov 2025 02:05:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept, Cookie, Content-Type, Authorization, Content-Length, X-Requested-With, Origin\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Set-Cookie, X-Powered-By\r\nvary: Origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.29.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"4845f01eaa8068384625e302e9a4eb05","sha1":"fb6ff8293fa45e17ba97f84954e7d1d5b0d38f87","sha256":"8a482f2271a42c5f54c96e816a84340a6f2357a5b81f927d07d00788f5140a41","sha512":"bb58f2438524b518b19f2b74c5d598460735958f77c310ba3710520d1d88ce7975449977c9965dbca87cd6a824c8ab82e56bea6d571d79594079f0a0ea404d77","ssdeep":"","tlshash":"4160000c03030f0c00c0c03ccfc00030000c03000cc033f00000c00c000000c3cc00fc","first_seen":"2023-03-13T05:02:59Z","last_seen":"2026-04-05T04:00:23.011102Z","times_seen":9885,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.marathonbet.dk/join.htm?tracking_link=http%3A%2F%2Fmrthnbtt.com%2Fda62da458","fqdn":"www.marathonbet.dk","domain":"marathonbet.dk","tld":"dk"},"ip":{"addr":"172.64.145.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:44.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"marathonbet.dk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Nov 2025 20:40:13 GMT","end":"Sun, 15 Feb 2026 21:40:09 GMT"},"fingerprint":{"sha1":"C6:67:8A:D9:FC:1E:83:99:73:F2:E8:AC:6C:72:70:C2:0D:8F:4F:59","sha256":"EF:20:66:F4:45:2F:21:BF:8A:EA:DF:14:33:05:8C:48:C6:BF:0B:D4:5D:CE:CE:EF:D2:2C:3D:4C:A8:49:89:B5"}}},"request":{"raw":"GET /join.htm?tracking_link=http%3A%2F%2Fmrthnbtt.com%2Fda62da458 HTTP/1.1\r\nHost: www.marathonbet.dk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 23 Nov 2025 02:05:44 GMT\r\ncontent-length: 0\r\nlocation: https://www.marathonbet.dk/en/join.htm?tracking_link=http%3A%2F%2Fmrthnbtt.com%2Fda62da458\r\ncf-ray: 9a2d1a731943b51d-OSL\r\ncache-status: MISS\r\nstrict-transport-security: max-age=31536000\r\nx-frame-options: sameorigin\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nfeature-policy: microphone 'none'; camera 'none'; push 'none'; payment 'none'\r\nx-xss-protection: 1; mode=block\r\nset-cookie: puid=rBpK3mkia/iG/jJbAyLsAg==; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.marathonbet.dk; path=/; secure\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":19,"connect":6,"send":0,"wait":108,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"member.neteller.com/signUp/?lang=ru\u0026btag=a_37477b_3366c_666661\u0026program=NTAFFILIATE","fqdn":"member.neteller.com","domain":"neteller.com","tld":"com"},"ip":{"addr":"3.167.2.78","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:44.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skrill.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 26 Oct 2025 00:00:00 GMT","end":"Tue, 24 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"01:BA:46:74:5E:C2:56:B0:AE:4D:7D:57:EC:67:4F:7F:11:06:C1:BC","sha256":"CC:4F:20:E5:6F:86:A6:A3:4E:93:43:9E:D8:88:7D:43:D6:D1:89:BD:6C:73:56:AE:F0:D3:6E:DE:FF:7B:C4:90"}}},"request":{"raw":"GET /signUp/?lang=ru\u0026btag=a_37477b_3366c_666661\u0026program=NTAFFILIATE HTTP/1.1\r\nHost: member.neteller.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: CloudFront\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncontent-length: 0\r\nlocation: https://member.neteller.com/wallet/account/sign-up?lang=ru\u0026btag=a_37477b_3366c_666661\u0026program=NTAFFILIATE\r\nx-cache: LambdaGeneratedResponse from cloudfront\r\nvia: 1.1 7bc180ff569f641823300f4c342cb63a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Zzcxg0FmNiuruBvyVh64f-fIqnHrI5d7-bVYCJ4_G6TNhstCxg4sRg==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors https://*.skrill.com https://*.neteller.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":114,"connect":6,"send":0,"wait":34,"receive":0,"ssl":504},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"member.neteller.com/signUp/?lang=ru\u0026btag=a_37477b_3366c_666661\u0026program=NTAFFILIATE","fqdn":"member.neteller.com","domain":"neteller.com","tld":"com"},"ip":{"addr":"3.167.2.78","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:47.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"skrill.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 26 Oct 2025 00:00:00 GMT","end":"Tue, 24 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"01:BA:46:74:5E:C2:56:B0:AE:4D:7D:57:EC:67:4F:7F:11:06:C1:BC","sha256":"CC:4F:20:E5:6F:86:A6:A3:4E:93:43:9E:D8:88:7D:43:D6:D1:89:BD:6C:73:56:AE:F0:D3:6E:DE:FF:7B:C4:90"}}},"request":{"raw":"GET /signUp/?lang=ru\u0026btag=a_37477b_3366c_666661\u0026program=NTAFFILIATE HTTP/1.1\r\nHost: member.neteller.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: CloudFront\r\ndate: Sun, 23 Nov 2025 02:05:47 GMT\r\ncontent-length: 0\r\nlocation: https://member.neteller.com/wallet/account/sign-up?lang=ru\u0026btag=a_37477b_3366c_666661\u0026program=NTAFFILIATE\r\nx-cache: LambdaGeneratedResponse from cloudfront\r\nvia: 1.1 7bc180ff569f641823300f4c342cb63a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: tUdz4X2HNewVtsfvYxP3P8gmbP4vsiyAAjfIRQLt9rrzR4Pjuz6vQA==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors https://*.skrill.com https://*.neteller.com\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bngtrak.com/hit.php?v=2\u0026c=280492","fqdn":"bngtrak.com","domain":"bngtrak.com","tld":"com"},"ip":{"addr":"31.192.112.221","port":443,"asn":48684,"as":"Viking Host B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:48.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bngtrak.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Tue, 03 Jun 2025 00:00:00 GMT","end":"Fri, 03 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:65:E9:D9:F9:3F:CB:8F:58:5F:C4:2E:D5:44:DB:B0:38:1D:5A:3A","sha256":"92:0E:CC:64:11:B5:66:84:BD:55:BD:0A:44:43:6C:9B:6A:78:75:21:BB:2F:0A:F6:EE:F4:D2:63:A0:B2:88:98"}}},"request":{"raw":"GET /hit.php?v=2\u0026c=280492 HTTP/1.1\r\nHost: bngtrak.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 02:05:48 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\nset-cookie: BCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.promo-bc.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bongocams.biz\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bongacams.org\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bongacams11.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bcmspt.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bngwlt.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bngpt.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bngpst.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bngprl.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bngpop.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bngosv.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bngvs.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bngdyn.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bngdin.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.dynspt.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.ecdyn.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.trkbc.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.trkbng.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bngtrk.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bngtrak.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bcprm.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bngprm.com\nBCH_H=d58a680cb564aa45bf1a67d49fd5c3de%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bngrol.com\r\nlocation: https://bongacams.com?bcs=cGVyaWQ1OGE2ODBjYjU2NGFhNDViZjFhNjdkNDlmZDVjM2RlOjoxODE3NDA6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6MjgwNDkyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~\r\nexpires: Sun, 23 Nov 2025 02:05:47 GMT\r\nx-bcs: ded7383\r\nstrict-transport-security: max-age=0;\r\ncache-control: no-cache, public\r\nx-bc-bl: 102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:46.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:46 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dd8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:46.138Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:46 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dd8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betsonsport.ru/click/www.thundercrest65.xyz/?afrc=A609052807","fqdn":"betsonsport.ru","domain":"betsonsport.ru","tld":"ru"},"ip":{"addr":"217.26.27.243","port":443,"asn":41783,"as":"Informational technologies and electronic communications LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:44.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"betsonsport.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 07:28:15 GMT","end":"Sat, 31 Jan 2026 07:28:14 GMT"},"fingerprint":{"sha1":"83:0B:C4:C4:A4:16:38:D6:04:00:79:FB:78:66:E0:E8:FE:74:9A:4B","sha256":"42:71:BD:6D:BA:3D:2C:C2:FD:2E:1C:26:1D:71:28:BD:E4:E4:16:57:A1:13:4D:CE:20:E4:DF:7D:8C:0D:CC:01"}}},"request":{"raw":"GET /click/www.thundercrest65.xyz/?afrc=A609052807 HTTP/1.1\r\nHost: betsonsport.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/click/sport66.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx/1.29.1\r\ndate: Sun, 23 Nov 2025 02:05:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept, Cookie, Content-Type, Authorization, Content-Length, X-Requested-With, Origin\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Set-Cookie, X-Powered-By\r\nvary: Origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.29.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"4845f01eaa8068384625e302e9a4eb05","sha1":"fb6ff8293fa45e17ba97f84954e7d1d5b0d38f87","sha256":"8a482f2271a42c5f54c96e816a84340a6f2357a5b81f927d07d00788f5140a41","sha512":"bb58f2438524b518b19f2b74c5d598460735958f77c310ba3710520d1d88ce7975449977c9965dbca87cd6a824c8ab82e56bea6d571d79594079f0a0ea404d77","ssdeep":"","tlshash":"4160000c03030f0c00c0c03ccfc00030000c03000cc033f00000c00c000000c3cc00fc","first_seen":"2023-03-13T05:02:59Z","last_seen":"2026-04-05T04:00:23.011102Z","times_seen":9885,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"runetki3.com/?c=783968","fqdn":"runetki3.com","domain":"runetki3.com","tld":"com"},"ip":{"addr":"195.85.23.136","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:44.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"runetki3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 09:36:51 GMT","end":"Sat, 27 Dec 2025 09:36:50 GMT"},"fingerprint":{"sha1":"7E:F7:EE:D9:1F:7C:E4:7F:D5:4D:94:D2:32:3F:25:63:0A:F8:5F:CA","sha256":"15:4D:53:5E:D2:03:8A:DC:8B:05:7C:03:E3:0E:1A:41:1F:FD:89:74:FC:AE:C3:A1:98:8F:88:5C:51:1B:C1:F0"}}},"request":{"raw":"GET /?c=783968 HTTP/1.1\r\nHost: runetki3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 23 Nov 2025 02:05:44 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://en.runetki3.com/?c=783968\r\ncf-ray: 9a2d1a73ad6049c5-OSL\r\nset-cookie: bonga20120608=17d4cd2563bb0be435e0c2e54e12977f; path=/; domain=.runetki3.com; secure; HttpOnly; SameSite=None\nts_type2=1; expires=Mon, 23-Nov-2026 02:05:44 GMT; Max-Age=31536000; path=/; domain=.runetki3.com\nfv=AQD1ZmL4ZmL3ZD==; expires=Mon, 23-Nov-2026 02:05:44 GMT; Max-Age=31536000; path=/; domain=.runetki3.com\nuh=oJIBI352oyp2EQuZL29RFmO3EGH5pj==; expires=Mon, 23-Nov-2026 02:05:44 GMT; Max-Age=31536000; path=/; domain=.runetki3.com\nratr=-1%3A%3A783968%3A%3A2025-11-23%2004%3A05%3A44%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A; expires=Mon, 11-Nov-2075 02:05:44 GMT; Max-Age=1576800000; path=/; domain=.runetki3.com; HttpOnly\nlc=en_US; expires=Mon, 23-Nov-2026 02:05:44 GMT; Max-Age=31536000; path=/; domain=.runetki3.com; secure\n__cf_bm=Xh2QhcYzaOHcSP0tlB84rKOsnwAPCz62awp4pjaHxzs-1763863544-1.0.1.1-X_wDfAkNeOQhbj6wJ4UjE1RDdRgYR70JxKuEeXFdGYyRhFrPtJTdTDKYMNg0P8erKu_AII8kv4Vcm_9bbos9E8Kuz1HuCVpF6CJcH9Jr8NGGFNg7FCC..VbTEgbz9PD1; path=/; expires=Sun, 23-Nov-25 02:35:44 GMT; domain=.runetki3.com; HttpOnly; Secure; SameSite=None\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-zone: 5a-web51\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":54,"connect":37,"send":0,"wait":66,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ru.bongacash.com/","fqdn":"ru.bongacash.com","domain":"bongacash.com","tld":"com"},"ip":{"addr":"195.85.23.185","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:45.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bongacash.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 11 Aug 2025 00:00:00 GMT","end":"Thu, 10 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"B9:7C:A5:66:E4:91:C6:39:7B:F5:A3:C7:E9:68:0C:C0:AD:9B:79:9A","sha256":"5C:C6:DC:89:C9:5E:BD:B1:EA:9E:24:74:22:0F:8F:45:EA:13:E9:D8:48:8D:6B:53:1C:74:F2:8A:E1:4A:62:0A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ru.bongacash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=6OtbvVgqunNdzcLadazpCNtzn6rM.HiZRYNxsTpQf3Q-1763863544-1.0.1.1-JTbV0tcMKQXwTZ_AI04ygWYf2g7mpK32R04GE_4XhWBgqeEtYELSnWmCokRUwr_rkPAgHUKS__xIJgvgnDW8_ik7qPf7AQQwY9AWLwIBkOe2LOdMBIz6e.DqngTB9XH3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nset-cookie: bongacash=6f1371ccab78016eddcc12b1905b001d; path=/; domain=.bongacash.com; secure; HttpOnly\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: origin-when-cross-origin\r\ncontent-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: *.bcvcdn.com *.bngprm.com *.wlicdn.com *.google.com https://www.google.com *.hcaptcha.com hcaptcha.com challenges.cloudflare.com *.google-analytics.com www.googletagmanager.com stats.g.doubleclick.net *.gstatic.com fonts.googleapis.com cdn.fluidplayer.com https://blog.bongacams.com https://blog.bongacams.net *.bongacash.com bongacash.com i.bongacash.com i.bcshcdn.com bngprm.com bngpst.com bngrol.com bngpop.com bcmspt.com bngdin.com dynspt.com ecdyn.com i.bngprm.com i.bngpst.com i.bngrol.com i.bngpop.com i.bcmspt.com i.bngdin.com i.dynspt.com i.ecdyn.com *.bongacams.com *.bongacams.net *.bongacams7.com *.bongacams8.com *.bongacams10.com *.bongacams11.com *.bongacams12.com *.bongacams13.com *.bongacams14.com *.bongacams15.com *.bongacams16.com *.bongacams17.com *.bongacams18.com *.bongacams19.com *.bongacams20.com *.bongacams21.com *.bongacams22.com *.bongacams23.com *.bongacams25.com *.bongacams26.com *.bongacams27.com *.bongacams28.com *.bongacams29.com; img-src * data:; media-src * data: blob:; frame-ancestors 'self' *.bongacash.com;\r\ncache-control: no-cache, no-store, must-revalidate, no-cache, no-store, must-revalidate\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a2d1a7499c7b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bongacams.com/?bcs=aWNhbGQ1OGE2ODBjYjU2NGFhNDViZjFhNjdkNDlmZDVjM2RlOjoxODE3NDA6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6MjgwNDkyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~","fqdn":"bongacams.com","domain":"bongacams.com","tld":"com"},"ip":{"addr":"195.85.23.89","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:45.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bongacams.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 02 May 2025 00:00:00 GMT","end":"Mon, 01 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:E5:1E:9D:FE:EE:60:B4:57:D1:80:25:CB:0B:CF:49:85:21:CD:9E","sha256":"41:07:E9:F0:BF:0E:AE:5D:01:2B:64:B5:48:40:B5:DC:6D:FD:18:F7:99:CB:5E:56:99:2B:CC:B7:51:21:A8:A4"}}},"request":{"raw":"GET /?bcs=aWNhbGQ1OGE2ODBjYjU2NGFhNDViZjFhNjdkNDlmZDVjM2RlOjoxODE3NDA6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6MjgwNDkyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~ HTTP/1.1\r\nHost: bongacams.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=GQ4nt1DMQ0c0IlgAjjuzKokXJYZbuQ.acgHlIiMeKAQ-1763863544-1.0.1.1-z5EyYft8fv4C9yw7m2hMCW_lFvbRYhsf6MfpUw3zS3r_4uC0vPZMfvA_m3ERkBoUOCAy3awgCbssYESUIvoZOyYdtta8uUodJKoyEv1XW_I3pqrozr7ggVByW7aVrU44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nset-cookie: bonga20120608=4882ff79eaaa09edf2ac4c0af912d115; path=/; domain=.bongacams.com; secure; HttpOnly; SameSite=None\nts_type2=1; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nfv=AGD1ZmL4ZmL3ZD==; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nuh=M1yLAwuQGQVlLxgyqzyyoHA0ZGyRDj==; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nratr=181740%3A%3A280492%3A%3A2025-11-23%2004%3A05%3A45%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A; expires=Mon, 11-Nov-2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com; HttpOnly\nBONGAH_HIT=d58a680cb564aa45bf1a67d49fd5c3de%3A%3A181740%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A%3A%3A280492%3A%3A%3A%3A%3A%3A0%3A%3A0%3A%3A0%3A%3A0%3A%3A%3A%3A0%3A%3Adefault%3A%3A0%3A%3A2025-11-23%2004%3A05%3A45; expires=Fri, 22-May-2026 02:05:45 GMT; Max-Age=15552000; path=/; domain=.bongacams.com; secure; HttpOnly; SameSite=None\nBONGA_REF=https%3A%2F%2Fbetsonsport.ru%2F; expires=Fri, 22-May-2026 02:05:45 GMT; Max-Age=15552000; path=/; domain=.bongacams.com; HttpOnly\nreg_ver2=3; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nsg=502; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com; secure; SameSite=None\nwarning18=%5B%22en_US%22%5D; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com; secure; SameSite=None\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: origin-when-cross-origin\r\nx-ua-compatible: IE=edge,chrome=1\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-zone: 5a-web44\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a2d1a778a21712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xcasino-4768443.bar/ru?tag=d_4589457m_67279c_com","fqdn":"1xcasino-4768443.bar","domain":"1xcasino-4768443.bar","tld":"bar"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:44.709Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ru?tag=d_4589457m_67279c_com HTTP/1.1\r\nHost: 1xcasino-4768443.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-7950617.bar/ru/block","fqdn":"1xlite-7950617.bar","domain":"1xlite-7950617.bar","tld":"bar"},"ip":{"addr":"185.165.153.111","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:45.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-7950617.bar","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 13:29:24 GMT","end":"Tue, 23 Dec 2025 13:29:23 GMT"},"fingerprint":{"sha1":"9A:74:40:77:D8:2A:91:F1:34:75:A5:7D:90:55:0A:11:2C:43:9A:B0","sha256":"04:D8:CF:7C:6A:D3:D0:3C:57:19:53:2F:F7:A8:5C:2A:70:69:71:82:B8:54:B5:D8:B6:EC:3A:56:FD:9C:6E:B1"}}},"request":{"raw":"GET /ru/block HTTP/1.1\r\nHost: 1xlite-7950617.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 245512\r\naccept-ranges: none\r\nserver-timing: dt_total;dur=0.003, total;dur=51;desc=\"Nuxt Server Time\"\r\nset-cookie: gw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\ngw-blk=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; Path=/; HttpOnly\nlng=ru; Path=/\ncookies_agree_type=3; Path=/\ntzo=1; Path=/\nis12h=0; Path=/\nauid=uaWZb2kia/lKl1WgA9rjAg==; path=/; secure; httponly; samesite=lax\r\nx-dt: 2336\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":245512,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (41717)","md5":"c7d4140f662cbfac6dd26748ffce9e47","sha1":"684677aea42f0f08f67bc2c6e3e44485d44e111a","sha256":"00ed4a2a07907b585167663477dc448a01d970f097a37eb7a7a734be2f2e30dd","sha512":"18eebc5685511b5c216a7dbc68a1c7c2a6af53dda3da60350b4ff483b6c668ea9cd502361f17aabd56cbd3669fd3c652d0e7f38b7a80c4aeeec931c22d55852d","ssdeep":"3072:8Gq5J6ew+vrkaLnSeU+KGIvrsaL9rHR/98aEDAcVwj7mv4:0J9fymI1ADVUKv4","tlshash":"6634c42fa50c1d3e952b1e79c54f7d4e6bbc5e2b24cb2801dcae6e6910e3290456387f","first_seen":"2025-11-23T02:06:16.79729Z","last_seen":"2025-11-23T02:06:16.79729Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:46.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:46 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dd8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bongacams.com/?bcs=Zm9yaGI5MzE2MWRjYzNjYTE5OTlhNjg0Yzk2YTc0MjFlZDAxOjoxODM5Njc6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6MzYzNDEyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~","fqdn":"bongacams.com","domain":"bongacams.com","tld":"com"},"ip":{"addr":"195.85.23.89","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:47.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bongacams.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 02 May 2025 00:00:00 GMT","end":"Mon, 01 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:E5:1E:9D:FE:EE:60:B4:57:D1:80:25:CB:0B:CF:49:85:21:CD:9E","sha256":"41:07:E9:F0:BF:0E:AE:5D:01:2B:64:B5:48:40:B5:DC:6D:FD:18:F7:99:CB:5E:56:99:2B:CC:B7:51:21:A8:A4"}}},"request":{"raw":"GET /?bcs=Zm9yaGI5MzE2MWRjYzNjYTE5OTlhNjg0Yzk2YTc0MjFlZDAxOjoxODM5Njc6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6MzYzNDEyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~ HTTP/1.1\r\nHost: bongacams.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=GQ4nt1DMQ0c0IlgAjjuzKokXJYZbuQ.acgHlIiMeKAQ-1763863544-1.0.1.1-z5EyYft8fv4C9yw7m2hMCW_lFvbRYhsf6MfpUw3zS3r_4uC0vPZMfvA_m3ERkBoUOCAy3awgCbssYESUIvoZOyYdtta8uUodJKoyEv1XW_I3pqrozr7ggVByW7aVrU44; bonga20120608=4882ff79eaaa09edf2ac4c0af912d115; BONGAH_HIT=d58a680cb564aa45bf1a67d49fd5c3de%3A%3A181740%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A%3A%3A280492%3A%3A%3A%3A%3A%3A0%3A%3A0%3A%3A0%3A%3A0%3A%3A%3A%3A0%3A%3Adefault%3A%3A0%3A%3A2025-11-23%2004%3A05%3A45; sg=502; warning18=%5B%22en_US%22%5D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 02:05:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: origin-when-cross-origin\r\nx-ua-compatible: IE=edge,chrome=1\r\nset-cookie: ts_type2=1; expires=Mon, 23-Nov-2026 02:05:47 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nfv=AmD1ZmL4ZmL3ZD==; expires=Mon, 23-Nov-2026 02:05:47 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nuh=JRc1MJEOFKbkrSAUnJgSo3IyM1EVDD==; expires=Mon, 23-Nov-2026 02:05:47 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nratr=183967%3A%3A363412%3A%3A2025-11-23%2004%3A05%3A47%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A; expires=Mon, 11-Nov-2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com; HttpOnly\nreg_ver2=3; expires=Mon, 23-Nov-2026 02:05:47 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-zone: 5a-web51\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a2d1a836de1712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":181,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bongacams.com/?bcs=cGVyaWY3ZTU5MDM1MmVlNjVlMWI0Yjk3ODgyZTU3OGYwNmViOjoxODM5Njc6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6NTgwMTIyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~","fqdn":"bongacams.com","domain":"bongacams.com","tld":"com"},"ip":{"addr":"195.85.23.89","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:47.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bongacams.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 02 May 2025 00:00:00 GMT","end":"Mon, 01 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:E5:1E:9D:FE:EE:60:B4:57:D1:80:25:CB:0B:CF:49:85:21:CD:9E","sha256":"41:07:E9:F0:BF:0E:AE:5D:01:2B:64:B5:48:40:B5:DC:6D:FD:18:F7:99:CB:5E:56:99:2B:CC:B7:51:21:A8:A4"}}},"request":{"raw":"GET /?bcs=cGVyaWY3ZTU5MDM1MmVlNjVlMWI0Yjk3ODgyZTU3OGYwNmViOjoxODM5Njc6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6NTgwMTIyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~ HTTP/1.1\r\nHost: bongacams.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=GQ4nt1DMQ0c0IlgAjjuzKokXJYZbuQ.acgHlIiMeKAQ-1763863544-1.0.1.1-z5EyYft8fv4C9yw7m2hMCW_lFvbRYhsf6MfpUw3zS3r_4uC0vPZMfvA_m3ERkBoUOCAy3awgCbssYESUIvoZOyYdtta8uUodJKoyEv1XW_I3pqrozr7ggVByW7aVrU44; bonga20120608=4882ff79eaaa09edf2ac4c0af912d115; BONGAH_HIT=d58a680cb564aa45bf1a67d49fd5c3de%3A%3A181740%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A%3A%3A280492%3A%3A%3A%3A%3A%3A0%3A%3A0%3A%3A0%3A%3A0%3A%3A%3A%3A0%3A%3Adefault%3A%3A0%3A%3A2025-11-23%2004%3A05%3A45; sg=502; warning18=%5B%22en_US%22%5D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 02:05:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: origin-when-cross-origin\r\nx-ua-compatible: IE=edge,chrome=1\r\nset-cookie: ts_type2=1; expires=Mon, 23-Nov-2026 02:05:47 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nfv=AmD1ZmL4ZmL3ZD==; expires=Mon, 23-Nov-2026 02:05:47 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nuh=FHf5L3WKoKqOA2LmZTSHo3qPA2EvKj==; expires=Mon, 23-Nov-2026 02:05:47 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nratr=183967%3A%3A580122%3A%3A2025-11-23%2004%3A05%3A47%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A; expires=Mon, 11-Nov-2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com; HttpOnly\nreg_ver2=3; expires=Mon, 23-Nov-2026 02:05:47 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-zone: 5a-web51\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a2d1a851e77712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bongacams.com/?bcs=cGVyaWQ1OGE2ODBjYjU2NGFhNDViZjFhNjdkNDlmZDVjM2RlOjoxODE3NDA6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6MjgwNDkyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~","fqdn":"bongacams.com","domain":"bongacams.com","tld":"com"},"ip":{"addr":"195.85.23.89","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:48.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bongacams.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 02 May 2025 00:00:00 GMT","end":"Mon, 01 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:E5:1E:9D:FE:EE:60:B4:57:D1:80:25:CB:0B:CF:49:85:21:CD:9E","sha256":"41:07:E9:F0:BF:0E:AE:5D:01:2B:64:B5:48:40:B5:DC:6D:FD:18:F7:99:CB:5E:56:99:2B:CC:B7:51:21:A8:A4"}}},"request":{"raw":"GET /?bcs=cGVyaWQ1OGE2ODBjYjU2NGFhNDViZjFhNjdkNDlmZDVjM2RlOjoxODE3NDA6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6MjgwNDkyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~ HTTP/1.1\r\nHost: bongacams.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=GQ4nt1DMQ0c0IlgAjjuzKokXJYZbuQ.acgHlIiMeKAQ-1763863544-1.0.1.1-z5EyYft8fv4C9yw7m2hMCW_lFvbRYhsf6MfpUw3zS3r_4uC0vPZMfvA_m3ERkBoUOCAy3awgCbssYESUIvoZOyYdtta8uUodJKoyEv1XW_I3pqrozr7ggVByW7aVrU44; bonga20120608=4882ff79eaaa09edf2ac4c0af912d115; BONGAH_HIT=d58a680cb564aa45bf1a67d49fd5c3de%3A%3A181740%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A%3A%3A280492%3A%3A%3A%3A%3A%3A0%3A%3A0%3A%3A0%3A%3A0%3A%3A%3A%3A0%3A%3Adefault%3A%3A0%3A%3A2025-11-23%2004%3A05%3A45; sg=502; warning18=%5B%22en_US%22%5D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 02:05:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: origin-when-cross-origin\r\nx-ua-compatible: IE=edge,chrome=1\r\nset-cookie: ts_type2=1; expires=Mon, 23-Nov-2026 02:05:48 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nfv=BQD1ZmL4ZmL3ZD==; expires=Mon, 23-Nov-2026 02:05:48 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nuh=qRVlrzqMHR1Qp052q2qHJRc4oR1Qqt==; expires=Mon, 23-Nov-2026 02:05:48 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nratr=181740%3A%3A280492%3A%3A2025-11-23%2004%3A05%3A48%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A; expires=Mon, 11-Nov-2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com; HttpOnly\nreg_ver2=3; expires=Mon, 23-Nov-2026 02:05:48 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-zone: 5a-web44\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a2d1a882fe4712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:45.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dc8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xbet.kz/?tag=s_1392275m_355c_neRFKz","fqdn":"1xbet.kz","domain":"1xbet.kz","tld":"kz"},"ip":{"addr":"185.113.135.235","port":443,"asn":207333,"as":"LLP Kompaniya Hoster.KZ","country":"Kazakhstan","country_code":"KZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:46.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1xbet.kz","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 28 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0F:2F:9A:11:47:14:C3:7A:68:6B:26:93:F2:27:02:70:0D:7C:E7:79","sha256":"3B:1F:2A:16:74:F6:10:B4:28:F1:D6:FE:3C:E1:94:22:6C:97:9F:FB:B6:7C:B6:1A:F4:00:F4:5B:C9:E2:EA:0D"}}},"request":{"raw":"GET /?tag=s_1392275m_355c_neRFKz HTTP/1.1\r\nHost: 1xbet.kz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 23 Nov 2025 02:05:46 GMT\r\ncontent-length: 0\r\nlocation: https://1xbet.kz/?tag=s_1392275m_355c_neRFKz\r\nset-cookie: __hash_=1db22415b12dd8b027a214cd85522da4; Max-Age=1800; domain=.1xbet.kz; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betsonsport.ru/click/mbbgpet.xyz/su/?2Fda9ce45ac","fqdn":"betsonsport.ru","domain":"betsonsport.ru","tld":"ru"},"ip":{"addr":"217.26.27.243","port":443,"asn":41783,"as":"Informational technologies and electronic communications LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:47.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"betsonsport.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 07:28:15 GMT","end":"Sat, 31 Jan 2026 07:28:14 GMT"},"fingerprint":{"sha1":"83:0B:C4:C4:A4:16:38:D6:04:00:79:FB:78:66:E0:E8:FE:74:9A:4B","sha256":"42:71:BD:6D:BA:3D:2C:C2:FD:2E:1C:26:1D:71:28:BD:E4:E4:16:57:A1:13:4D:CE:20:E4:DF:7D:8C:0D:CC:01"}}},"request":{"raw":"GET /click/mbbgpet.xyz/su/?2Fda9ce45ac HTTP/1.1\r\nHost: betsonsport.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/click/sport66.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx/1.29.1\r\ndate: Sun, 23 Nov 2025 02:05:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept, Cookie, Content-Type, Authorization, Content-Length, X-Requested-With, Origin\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Set-Cookie, X-Powered-By\r\nvary: Origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.29.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"4845f01eaa8068384625e302e9a4eb05","sha1":"fb6ff8293fa45e17ba97f84954e7d1d5b0d38f87","sha256":"8a482f2271a42c5f54c96e816a84340a6f2357a5b81f927d07d00788f5140a41","sha512":"bb58f2438524b518b19f2b74c5d598460735958f77c310ba3710520d1d88ce7975449977c9965dbca87cd6a824c8ab82e56bea6d571d79594079f0a0ea404d77","ssdeep":"","tlshash":"4160000c03030f0c00c0c03ccfc00030000c03000cc033f00000c00c000000c3cc00fc","first_seen":"2023-03-13T05:02:59Z","last_seen":"2026-04-05T04:00:23.011102Z","times_seen":9885,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"en.runetki3.com/?c=783968","fqdn":"en.runetki3.com","domain":"runetki3.com","tld":"com"},"ip":{"addr":"195.85.23.136","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:48.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"runetki3.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 09:36:51 GMT","end":"Sat, 27 Dec 2025 09:36:50 GMT"},"fingerprint":{"sha1":"7E:F7:EE:D9:1F:7C:E4:7F:D5:4D:94:D2:32:3F:25:63:0A:F8:5F:CA","sha256":"15:4D:53:5E:D2:03:8A:DC:8B:05:7C:03:E3:0E:1A:41:1F:FD:89:74:FC:AE:C3:A1:98:8F:88:5C:51:1B:C1:F0"}}},"request":{"raw":"GET /?c=783968 HTTP/1.1\r\nHost: en.runetki3.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: bonga20120608=17d4cd2563bb0be435e0c2e54e12977f; __cf_bm=Xh2QhcYzaOHcSP0tlB84rKOsnwAPCz62awp4pjaHxzs-1763863544-1.0.1.1-X_wDfAkNeOQhbj6wJ4UjE1RDdRgYR70JxKuEeXFdGYyRhFrPtJTdTDKYMNg0P8erKu_AII8kv4Vcm_9bbos9E8Kuz1HuCVpF6CJcH9Jr8NGGFNg7FCC..VbTEgbz9PD1; sg=672; warning18=%5B%22en_US%22%5D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 02:05:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: origin-when-cross-origin\r\nx-ua-compatible: IE=edge,chrome=1\r\nset-cookie: ts_type2=1; expires=Mon, 23-Nov-2026 02:05:48 GMT; Max-Age=31536000; path=/; domain=.runetki3.com\nfv=BQD1ZmL4ZmL3ZD==; expires=Mon, 23-Nov-2026 02:05:48 GMT; Max-Age=31536000; path=/; domain=.runetki3.com\nuh=qTV3F2ATFR4jBRISHTumAxATqz55LD==; expires=Mon, 23-Nov-2026 02:05:48 GMT; Max-Age=31536000; path=/; domain=.runetki3.com\nratr=-1%3A%3A783968%3A%3A2025-11-23%2004%3A05%3A48%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A; expires=Mon, 11-Nov-2075 02:05:48 GMT; Max-Age=1576800000; path=/; domain=.runetki3.com; HttpOnly\nBONGA_REF=https%3A%2F%2Fbetsonsport.ru%2F; expires=Fri, 22-May-2026 02:05:48 GMT; Max-Age=15552000; path=/; domain=.runetki3.com; HttpOnly\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-zone: 5a-web44\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a2d1a89be741525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":223,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.twilightspire11.xyz/?afrc=A609052807","fqdn":"www.twilightspire11.xyz","domain":"twilightspire11.xyz","tld":"xyz"},"ip":{"addr":"104.18.1.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:44.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twilightspire11.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 20:06:42 GMT","end":"Thu, 01 Jan 2026 21:06:31 GMT"},"fingerprint":{"sha1":"A5:D5:39:DA:A4:E8:11:DA:AE:7E:64:7D:62:FF:C2:99:EB:41:0E:E5","sha256":"A1:04:40:F5:9E:3F:DF:29:5B:C6:88:9C:12:27:41:1C:1A:09:0D:A4:41:A3:1C:0D:94:2E:3B:7C:A8:46:BE:A4"}}},"request":{"raw":"GET /?afrc=A609052807 HTTP/1.1\r\nHost: www.twilightspire11.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 23 Nov 2025 02:05:44 GMT\r\ncontent-length: 0\r\nlocation: http://www.twilightspire11.xyz/en/?afrc=A609052807\r\nserver: cloudflare\r\ncache-control: max-age=604800\r\ncf-cache-status: DYNAMIC\r\nset-cookie: mobile=\"\"; Path=/; Domain=.twilightspire11.xyz; Expires=Thu, 01 Jan 1970 00:00:10 GMT\nskin=pa; SameSite=None; Secure; Path=/; Domain=.twilightspire11.xyz\nlang=en_US; SameSite=None; Secure; Path=/; Domain=.twilightspire11.xyz\r\ncf-ray: 9a2d1a72bbf0b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":13,"connect":1,"send":0,"wait":166,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bongacams30.com/track?v=2\u0026c=363412","fqdn":"bongacams30.com","domain":"bongacams30.com","tld":"com"},"ip":{"addr":"195.85.23.27","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:44.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bongacams30.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 09:19:48 GMT","end":"Wed, 31 Dec 2025 09:19:47 GMT"},"fingerprint":{"sha1":"8B:F9:E9:03:98:D0:45:8D:25:DF:0D:8C:36:1B:0E:80:70:2C:1E:3D","sha256":"F4:F7:F0:4A:6F:3D:1F:A9:29:47:3F:C3:4C:7D:F7:6D:76:13:8E:8E:45:74:55:1C:73:CE:16:94:89:F2:76:60"}}},"request":{"raw":"GET /track?v=2\u0026c=363412 HTTP/1.1\r\nHost: bongacams30.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 23 Nov 2025 02:05:44 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\nlocation: https://bngtrak.com/hit.php?v=2\u0026c=363412\r\ncf-ray: 9a2d1a7388f41a30-OSL\r\nx-bc: ded7850\r\nx-zone: 5a-web51\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=KO4e4qJFVbw6.TC8IJL.r06q1fUKvqkeGm8aGpIYZNk-1763863544-1.0.1.1-_YHSaatWjfGmFRoE9VkkF98r7_UDfoNxNTKGY1YGBbzfISfUhlgGT4rO2b.kDwl9q.kNrg2OYj6nITWAsvmSrke1TKEjtgrN3kcCO8DQwlgMy.k8Zo4dJ..mLpg2lYFP; path=/; expires=Sun, 23-Nov-25 02:35:44 GMT; domain=.bongacams30.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":46,"connect":7,"send":0,"wait":37,"receive":1,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bngtrak.com/hit.php?a=183967\u0026p=2\u0026camp=631","fqdn":"bngtrak.com","domain":"bngtrak.com","tld":"com"},"ip":{"addr":"31.192.112.221","port":443,"asn":48684,"as":"Viking Host B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:45.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bngtrak.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Tue, 03 Jun 2025 00:00:00 GMT","end":"Fri, 03 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:65:E9:D9:F9:3F:CB:8F:58:5F:C4:2E:D5:44:DB:B0:38:1D:5A:3A","sha256":"92:0E:CC:64:11:B5:66:84:BD:55:BD:0A:44:43:6C:9B:6A:78:75:21:BB:2F:0A:F6:EE:F4:D2:63:A0:B2:88:98"}}},"request":{"raw":"GET /hit.php?a=183967\u0026p=2\u0026camp=631 HTTP/1.1\r\nHost: bngtrak.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\nset-cookie: BCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.promo-bc.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongocams.biz\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongacams.org\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongacams11.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bcmspt.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngwlt.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngpt.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngpst.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngprl.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngpop.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngosv.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngvs.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngdyn.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngdin.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.dynspt.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.ecdyn.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.trkbc.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.trkbng.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngtrk.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngtrak.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bcprm.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngprm.com\nBCH_H=f7e590352ee65e1b4b97882e578f06eb%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bngrol.com\r\nlocation: https://bongacams.com?bcs=bGVnb2Y3ZTU5MDM1MmVlNjVlMWI0Yjk3ODgyZTU3OGYwNmViOjoxODM5Njc6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6NTgwMTIyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~\r\nexpires: Sun, 23 Nov 2025 02:05:44 GMT\r\nx-bcs: ded7013\r\nstrict-transport-security: max-age=0;\r\ncache-control: no-cache, public\r\nx-bc-bl: 102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":256,"dns":21,"connect":17,"send":0,"wait":22,"receive":0,"ssl":216},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bongacams.com/?bcs=bGVnb2Y3ZTU5MDM1MmVlNjVlMWI0Yjk3ODgyZTU3OGYwNmViOjoxODM5Njc6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6NTgwMTIyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~","fqdn":"bongacams.com","domain":"bongacams.com","tld":"com"},"ip":{"addr":"195.85.23.89","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:45.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bongacams.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 02 May 2025 00:00:00 GMT","end":"Mon, 01 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:E5:1E:9D:FE:EE:60:B4:57:D1:80:25:CB:0B:CF:49:85:21:CD:9E","sha256":"41:07:E9:F0:BF:0E:AE:5D:01:2B:64:B5:48:40:B5:DC:6D:FD:18:F7:99:CB:5E:56:99:2B:CC:B7:51:21:A8:A4"}}},"request":{"raw":"GET /?bcs=bGVnb2Y3ZTU5MDM1MmVlNjVlMWI0Yjk3ODgyZTU3OGYwNmViOjoxODM5Njc6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6NTgwMTIyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~ HTTP/1.1\r\nHost: bongacams.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=GQ4nt1DMQ0c0IlgAjjuzKokXJYZbuQ.acgHlIiMeKAQ-1763863544-1.0.1.1-z5EyYft8fv4C9yw7m2hMCW_lFvbRYhsf6MfpUw3zS3r_4uC0vPZMfvA_m3ERkBoUOCAy3awgCbssYESUIvoZOyYdtta8uUodJKoyEv1XW_I3pqrozr7ggVByW7aVrU44\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 23 Nov 2025 02:05:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\nset-cookie: bonga20120608=654953145358d9ff597348ae73164787; path=/; domain=.bongacams.com; secure; HttpOnly; SameSite=None\nts_type2=1; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nfv=AGD1ZmL4ZmL3ZD==; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nuh=n3D0MRSbJaSzZJyJHKuGBTuHGQL3GD==; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nratr=183967%3A%3A580122%3A%3A2025-11-23%2004%3A05%3A45%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A; expires=Mon, 11-Nov-2075 02:05:45 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com; HttpOnly\nBONGAH_HIT=f7e590352ee65e1b4b97882e578f06eb%3A%3A183967%3A%3Ahttps%3A%2F%2Fbetsonsport.ru%2F%3A%3A%3A%3A%3A%3A580122%3A%3A%3A%3A%3A%3A0%3A%3A0%3A%3A0%3A%3A0%3A%3A%3A%3A0%3A%3Adefault%3A%3A0%3A%3A2025-11-23%2004%3A05%3A45; expires=Fri, 22-May-2026 02:05:45 GMT; Max-Age=15552000; path=/; domain=.bongacams.com; secure; HttpOnly; SameSite=None\nBONGA_REF=https%3A%2F%2Fbetsonsport.ru%2F; expires=Fri, 22-May-2026 02:05:45 GMT; Max-Age=15552000; path=/; domain=.bongacams.com; HttpOnly\nreg_ver2=3; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com\nsg=419; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com; secure; SameSite=None\nwarning18=%5B%22en_US%22%5D; expires=Mon, 23-Nov-2026 02:05:45 GMT; Max-Age=31536000; path=/; domain=.bongacams.com; secure; SameSite=None\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: origin-when-cross-origin\r\nx-ua-compatible: IE=edge,chrome=1\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-zone: 5a-web51\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a2d1a777a20712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.twilightspire11.xyz/?afrc=A609052807","fqdn":"www.twilightspire11.xyz","domain":"twilightspire11.xyz","tld":"xyz"},"ip":{"addr":"104.18.1.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:46.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"twilightspire11.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 20:06:42 GMT","end":"Thu, 01 Jan 2026 21:06:31 GMT"},"fingerprint":{"sha1":"A5:D5:39:DA:A4:E8:11:DA:AE:7E:64:7D:62:FF:C2:99:EB:41:0E:E5","sha256":"A1:04:40:F5:9E:3F:DF:29:5B:C6:88:9C:12:27:41:1C:1A:09:0D:A4:41:A3:1C:0D:94:2E:3B:7C:A8:46:BE:A4"}}},"request":{"raw":"GET /?afrc=A609052807 HTTP/1.1\r\nHost: www.twilightspire11.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/\r\nCookie: skin=pa; lang=en_US\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 23 Nov 2025 02:05:47 GMT\r\ncontent-length: 0\r\nlocation: http://www.twilightspire11.xyz/en/?afrc=A609052807\r\nserver: cloudflare\r\ncache-control: max-age=604800\r\ncf-cache-status: DYNAMIC\r\nset-cookie: mobile=\"\"; Path=/; Domain=.twilightspire11.xyz; Expires=Thu, 01 Jan 1970 00:00:10 GMT\nskin=pa; SameSite=None; Secure; Path=/; Domain=.twilightspire11.xyz\nlang=en_US; SameSite=None; Secure; Path=/; Domain=.twilightspire11.xyz\r\ncf-ray: 9a2d1a808ac9b4ff-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"betsonsport.ru/click/www.thundercrest65.xyz/?afrc=A609052807","fqdn":"betsonsport.ru","domain":"betsonsport.ru","tld":"ru"},"ip":{"addr":"217.26.27.243","port":443,"asn":41783,"as":"Informational technologies and electronic communications LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:47.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"betsonsport.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 02 Nov 2025 07:28:15 GMT","end":"Sat, 31 Jan 2026 07:28:14 GMT"},"fingerprint":{"sha1":"83:0B:C4:C4:A4:16:38:D6:04:00:79:FB:78:66:E0:E8:FE:74:9A:4B","sha256":"42:71:BD:6D:BA:3D:2C:C2:FD:2E:1C:26:1D:71:28:BD:E4:E4:16:57:A1:13:4D:CE:20:E4:DF:7D:8C:0D:CC:01"}}},"request":{"raw":"GET /click/www.thundercrest65.xyz/?afrc=A609052807 HTTP/1.1\r\nHost: betsonsport.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://betsonsport.ru/click/sport66.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx/1.29.1\r\ndate: Sun, 23 Nov 2025 02:05:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept, Cookie, Content-Type, Authorization, Content-Length, X-Requested-With, Origin\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Set-Cookie, X-Powered-By\r\nvary: Origin\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.29.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"4845f01eaa8068384625e302e9a4eb05","sha1":"fb6ff8293fa45e17ba97f84954e7d1d5b0d38f87","sha256":"8a482f2271a42c5f54c96e816a84340a6f2357a5b81f927d07d00788f5140a41","sha512":"bb58f2438524b518b19f2b74c5d598460735958f77c310ba3710520d1d88ce7975449977c9965dbca87cd6a824c8ab82e56bea6d571d79594079f0a0ea404d77","ssdeep":"","tlshash":"4160000c03030f0c00c0c03ccfc00030000c03000cc033f00000c00c000000c3cc00fc","first_seen":"2023-03-13T05:02:59Z","last_seen":"2026-04-05T04:00:23.011102Z","times_seen":9885,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bngtrak.com/hit.php?v=2\u0026c=363412","fqdn":"bngtrak.com","domain":"bngtrak.com","tld":"com"},"ip":{"addr":"31.192.112.221","port":443,"asn":48684,"as":"Viking Host B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://betsonsport.ru/click/sport66.php","date":"2025-11-23T02:05:47.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bngtrak.com","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Tue, 03 Jun 2025 00:00:00 GMT","end":"Fri, 03 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"BF:65:E9:D9:F9:3F:CB:8F:58:5F:C4:2E:D5:44:DB:B0:38:1D:5A:3A","sha256":"92:0E:CC:64:11:B5:66:84:BD:55:BD:0A:44:43:6C:9B:6A:78:75:21:BB:2F:0A:F6:EE:F4:D2:63:A0:B2:88:98"}}},"request":{"raw":"GET /hit.php?v=2\u0026c=363412 HTTP/1.1\r\nHost: bngtrak.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://betsonsport.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 02:05:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\nset-cookie: BCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.promo-bc.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bongacams.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bongocams.biz\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bongacams.org\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bongacams11.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bcmspt.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngwlt.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngpt.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngpst.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngprl.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngpop.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngosv.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngvs.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngdyn.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngdin.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.dynspt.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.ecdyn.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.trkbc.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.trkbng.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngtrk.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngtrak.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bcprm.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngprm.com\nBCH_H=b93161dcc3ca1999a684c96a7421ed01%7C2025-11-23; expires=Mon, 11 Nov 2075 02:05:47 GMT; Max-Age=1576800000; path=/; domain=.bngrol.com\r\nlocation: https://bongacams.com?bcs=Zm9yaGI5MzE2MWRjYzNjYTE5OTlhNjg0Yzk2YTc0MjFlZDAxOjoxODM5Njc6Omh0dHBzOi8vYmV0c29uc3BvcnQucnUvOjo6Ojo6MzYzNDEyOjowOjowOjowOjo6OjA6OmRlZmF1bHQ6OjA~\r\nexpires: Sun, 23 Nov 2025 02:05:46 GMT\r\nx-bcs: ded7013\r\nstrict-transport-security: max-age=0;\r\ncache-control: no-cache, public\r\nx-bc-bl: 102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T04:47:05.041284Z","times_seen":13359598,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}