{"report_id":"23c00002-2a80-426e-af7e-3a4442f831dd","version":6,"status":"done","tags":[],"date":"2025-10-11T19:47:52Z","url":{"schema":"http","addr":"live.batstream.cc/","fqdn":"live.batstream.cc","domain":"batstream.cc","tld":"cc"},"ip":{"addr":"162.255.119.26","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"title":"Live Stream Sports | Batmanstream"},"submit":{"url":{"schema":"http","addr":"live.batstream.cc/","fqdn":"live.batstream.cc","domain":"batstream.cc","tld":"cc"},"ip":{"addr":"162.255.119.26","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-15T19:47:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-11T19:47:42Z","timestamp":1760212062,"ip_dst":{"addr":"172.18.0.6","port":36154,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"162.255.119.26","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Namecheap URL Forward","source":"{\"timestamp\":\"2025-10-11T19:47:42.553457+0000\",\"flow_id\":2202273276239984,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"162.255.119.26\",\"src_port\":80,\"dest_ip\":\"172.18.0.6\",\"dest_port\":36154,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2035208,\"rev\":2,\"signature\":\"ET INFO Namecheap URL Forward\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_02_16\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_02_16\"]}},\"http\":{\"hostname\":\"live.batstream.cc\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://live.batstream.vip\",\"length\":49},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":49,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":572,\"bytes_toclient\":519,\"start\":\"2025-10-11T19:47:32.073840+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-11T19:47:43Z","timestamp":1760212063,"ip_dst":{"addr":"172.18.0.6","port":36164,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"162.255.119.26","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Namecheap URL Forward","source":"{\"timestamp\":\"2025-10-11T19:47:43.361613+0000\",\"flow_id\":1196370460697766,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"162.255.119.26\",\"src_port\":80,\"dest_ip\":\"172.18.0.6\",\"dest_port\":36164,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2035208,\"rev\":2,\"signature\":\"ET INFO Namecheap URL Forward\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_02_16\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_02_16\"]}},\"http\":{\"hostname\":\"live.batstream.cc\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://live.batstream.vip\",\"length\":49},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":49,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":692,\"bytes_toclient\":519,\"start\":\"2025-10-11T19:47:32.877734+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"iclickcdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"iclickcdn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"iclickcdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-05T22:12:06.373682Z","alert_count":0,"request_count":1,"received_data":3198,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"batstream.vip","ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-26","domain_rank":0,"first_seen":"2025-10-11T19:47:52.932844Z","last_seen":"2025-10-11T19:47:52.932844Z","alert_count":0,"request_count":14,"received_data":38122,"sent_data":7746,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"live.batstream.cc","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-04-01","domain_rank":0,"first_seen":"2022-04-09T22:08:38Z","last_seen":"2025-08-11T13:54:43.304115Z","alert_count":4,"request_count":2,"received_data":43085,"sent_data":888,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2025-10-05T22:20:34.751616Z","alert_count":0,"request_count":2,"received_data":141081,"sent_data":1060,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"live.batstream.vip","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-26","domain_rank":0,"first_seen":"2025-10-11T19:47:52.940649Z","last_seen":"2025-10-11T19:47:52.940649Z","alert_count":0,"request_count":10,"received_data":1561003,"sent_data":4667,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-05T22:12:07.052692Z","alert_count":0,"request_count":1,"received_data":368050,"sent_data":439,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-05T22:12:07.524768Z","alert_count":0,"request_count":2,"received_data":25518,"sent_data":1110,"comment":"","tags":null,"fingerprints":null},{"fqdn":"my.rtmark.net","ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-10-29","domain_rank":43911,"first_seen":"2015-02-04T09:54:57Z","last_seen":"2025-10-06T00:34:29.689436Z","alert_count":0,"request_count":1,"received_data":841,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"iclickcdn.com","ip":{"addr":"104.26.12.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-03-20","domain_rank":835206,"first_seen":"2020-03-25T19:06:34Z","last_seen":"2025-10-06T07:33:00.966971Z","alert_count":3,"request_count":1,"received_data":111128,"sent_data":415,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"oyo4d.com","ip":{"addr":"139.45.197.118","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2019-03-26","domain_rank":201644,"first_seen":"2025-06-02T17:08:26.404235Z","last_seen":"2025-10-06T15:53:55.024008Z","alert_count":0,"request_count":1,"received_data":833,"sent_data":605,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.batstream.vip","ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-26","domain_rank":0,"first_seen":"2025-10-11T19:47:52.927577Z","last_seen":"2025-10-11T19:47:52.927577Z","alert_count":0,"request_count":14,"received_data":40072,"sent_data":7802,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-11T19:47:42Z","timestamp":1760212062,"ip_dst":{"addr":"172.18.0.6","port":36154,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"162.255.119.26","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Namecheap URL Forward","source":"{\"timestamp\":\"2025-10-11T19:47:42.553457+0000\",\"flow_id\":2202273276239984,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"162.255.119.26\",\"src_port\":80,\"dest_ip\":\"172.18.0.6\",\"dest_port\":36154,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2035208,\"rev\":2,\"signature\":\"ET INFO Namecheap URL Forward\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_02_16\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_02_16\"]}},\"http\":{\"hostname\":\"live.batstream.cc\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://live.batstream.vip\",\"length\":49},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":49,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":572,\"bytes_toclient\":519,\"start\":\"2025-10-11T19:47:32.073840+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-11T19:47:43Z","timestamp":1760212063,"ip_dst":{"addr":"172.18.0.6","port":36164,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"162.255.119.26","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Namecheap URL Forward","source":"{\"timestamp\":\"2025-10-11T19:47:43.361613+0000\",\"flow_id\":1196370460697766,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"162.255.119.26\",\"src_port\":80,\"dest_ip\":\"172.18.0.6\",\"dest_port\":36164,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2035208,\"rev\":2,\"signature\":\"ET INFO Namecheap URL Forward\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_02_16\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_02_16\"]}},\"http\":{\"hostname\":\"live.batstream.cc\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://live.batstream.vip\",\"length\":49},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":49,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":692,\"bytes_toclient\":519,\"start\":\"2025-10-11T19:47:32.877734+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d4be432288c837a6cf5f08927630ada4","sha1":"2769851b2d65f1ca147ca3e8652a57b129fc42cd","sha256":"4c2a356b59882f7e29103288c69e70503041ee82ba986e8aa37b631ed121af62","sha512":"184893d4cbdcdf0258f1d953cde10e45772d141fe205747d289b037c966db9cc63e0dbc4499a04e7b2fb856f5c8de56cb615f62f6571feaf50e80163c2c59012","ssdeep":"","tlshash":"8f010008e03a82e2002a303088020080000a0000c00b80200000800280088a00aa8000","size":817,"data":"","first_seen":"2025-10-11T19:47:58.327662Z","last_seen":"2026-02-20T14:34:54.859258Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d4be432288c837a6cf5f08927630ada4","sha1":"2769851b2d65f1ca147ca3e8652a57b129fc42cd","sha256":"4c2a356b59882f7e29103288c69e70503041ee82ba986e8aa37b631ed121af62","sha512":"184893d4cbdcdf0258f1d953cde10e45772d141fe205747d289b037c966db9cc63e0dbc4499a04e7b2fb856f5c8de56cb615f62f6571feaf50e80163c2c59012","ssdeep":"","tlshash":"8f010008e03a82e2002a303088020080000a0000c00b80200000800280088a00aa8000","size":817,"data":"","first_seen":"2025-10-11T19:47:58.327662Z","last_seen":"2026-02-20T14:34:54.859258Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d4be432288c837a6cf5f08927630ada4","sha1":"2769851b2d65f1ca147ca3e8652a57b129fc42cd","sha256":"4c2a356b59882f7e29103288c69e70503041ee82ba986e8aa37b631ed121af62","sha512":"184893d4cbdcdf0258f1d953cde10e45772d141fe205747d289b037c966db9cc63e0dbc4499a04e7b2fb856f5c8de56cb615f62f6571feaf50e80163c2c59012","ssdeep":"","tlshash":"8f010008e03a82e2002a303088020080000a0000c00b80200000800280088a00aa8000","size":817,"data":"","first_seen":"2025-10-11T19:47:58.327662Z","last_seen":"2026-02-20T14:34:54.859258Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"58273122fa738ff0bec8720606e06394","sha1":"b65a243407fe7440c5ad2d19c0011501854f3807","sha256":"d84b9cd46d40cf35fc62219bfd81ec9752c77e53d5393b7149d04c95c744b5a7","sha512":"d004fb861cdbcb657aa6c414429c891cccf34be9800625ba8f3fe3c1b7f569665a0dff5f5e8414b9fd8701f8b0c7cabfbee4af7d80190a150d031bb170fd6255","ssdeep":"","tlshash":"dec02bcc210a0c7041fb37008b3fb600f0423214ecd47932480a23848e30f03db48c10","size":153,"data":"","first_seen":"2025-10-11T19:47:58.328859Z","last_seen":"2026-02-20T14:34:54.861848Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"882cef0c0b2b9e870960e8aa795778bc","sha1":"d2a76a002a61fa7bbe76ec0054a59fbf81674257","sha256":"fa171a42ee02a3360fd7cf18dff380969c558b7b70af897e9bf814203db88d23","sha512":"dafdd31920b98bfaaee3da5af04bdd7ef76e52a88997a44bc46525f6b06d4a1629f660256cc63bc32cb6842f221dd57c8db70265cdd5a2d07c2eeb79f2a34d83","ssdeep":"","tlshash":"58b0926e54e90a4942ce1bcc3a2e3a26e2b0e43d8680c616a405e00604860640a208cd","size":114,"data":"","first_seen":"2025-02-17T09:18:47.71707Z","last_seen":"2026-03-05T12:10:32.402339Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iclickcdn.com/tag.min.js","fqdn":"iclickcdn.com","domain":"iclickcdn.com","tld":"com"},"ip":{"addr":"104.26.12.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4602ba01583c2514a9abd08435c3035c","sha1":"e766d257a08fad64c002c4732f30f25f700f8be1","sha256":"4e16eb978a977773df526423e558ff04ea7d5e435a171ee8beb856800be027a4","sha512":"b3ce476794e8747ca8034d5935f40713094a6e9dcb237fe3c1b54b209b3a3980bbf7a5ac1736412a217d1952c78bf4162fc838965541e63f891d413beb17cfde","ssdeep":"1536:I8zmHlk4JQ9aO4kD97aZ06GUqo54Az0SBYQ4+DIVV3BWw:jzsJkaO44K06GUb0S6z3xWw","tlshash":"a2b33bc6226a241612bf8034445bed0eb5aecd8104cdcdb8e1e5b8662d78b16d3f7fd9","size":109924,"data":"","first_seen":"2025-10-08T11:40:34.402808Z","last_seen":"2025-10-13T11:53:28.853954Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d4be432288c837a6cf5f08927630ada4","sha1":"2769851b2d65f1ca147ca3e8652a57b129fc42cd","sha256":"4c2a356b59882f7e29103288c69e70503041ee82ba986e8aa37b631ed121af62","sha512":"184893d4cbdcdf0258f1d953cde10e45772d141fe205747d289b037c966db9cc63e0dbc4499a04e7b2fb856f5c8de56cb615f62f6571feaf50e80163c2c59012","ssdeep":"","tlshash":"8f010008e03a82e2002a303088020080000a0000c00b80200000800280088a00aa8000","size":817,"data":"","first_seen":"2025-10-11T19:47:58.327662Z","last_seen":"2026-02-20T14:34:54.859258Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d4be432288c837a6cf5f08927630ada4","sha1":"2769851b2d65f1ca147ca3e8652a57b129fc42cd","sha256":"4c2a356b59882f7e29103288c69e70503041ee82ba986e8aa37b631ed121af62","sha512":"184893d4cbdcdf0258f1d953cde10e45772d141fe205747d289b037c966db9cc63e0dbc4499a04e7b2fb856f5c8de56cb615f62f6571feaf50e80163c2c59012","ssdeep":"","tlshash":"8f010008e03a82e2002a303088020080000a0000c00b80200000800280088a00aa8000","size":817,"data":"","first_seen":"2025-10-11T19:47:58.327662Z","last_seen":"2026-02-20T14:34:54.859258Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/js/jquery.min.js","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0fca26b5a37a66d68d0f4406976be4b5","sha1":"ee000eb654b3bd37185665d3901e93b34ce1aa52","sha256":"8c2812ded6436715279f8fd8db58de307aa39ab0296fe3cf0e879067c51e9b18","sha512":"cf010995991a8f8b50cfb4b466d3b457b0a6addc4f2fd96c48c33d40ac251de400894828ccd99662b13fc9ca25c676ef0aee05faa4910530ff9996d03c411645","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp94:t4J+R3jL5TCOauTwD6FdnCVQNea98HrF","tlshash":"7a93d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97162,"data":"","first_seen":"2023-03-07T01:06:51Z","last_seen":"2026-04-26T06:25:50.578486Z","times_seen":6553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ee01a7a476558be2ea312315c3fee76","sha1":"3c895576ccca4bc7dc658d97daa9624c7c35da8a","sha256":"3d907a767ec9f3431d4b27679a383a2fbf7d751707aa46d87e44d24193c69142","sha512":"123d6ac13187ff1ed0dcb3b152beea740b858c97942bc371281ffee8b08a3f34520732d274b776ae11b592c4c0a0d64577f4140995b47c98ea9eae176524865c","ssdeep":"","tlshash":"b1f005943cec44244377102527fb9148743965292c0afd54f94dc4812f5aeec14bb94c","size":538,"data":"","first_seen":"2025-10-11T19:47:58.33145Z","last_seen":"2026-02-20T14:34:54.864943Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b1fdaf3a97aaf1f4ab8b4e26b09f1da5","sha1":"1195766420823f6cbc5e6f83f6e79f5efc77b23f","sha256":"bc973cfadb88578d2e06a9391d9ce776c1f157bfb617fe5cd4eb79b707ce3b6b","sha512":"95607866e6e4650a93e229a81730b24662501359dda676c87b73ccc42ead41aebf2f0d1594c303ef69fc749c028e3fbab36032385103f818f5bdf21e502902b4","ssdeep":"192:vK8e6i+yepcZ5v0rvphO/Ba8eAUiFbqJ4M:tWlepcZGDphO/ENF2GF","tlshash":"03026664f75c121a85b6322d5a2e62dc343cd7713806885e9c2ca6942cb4d2fe76fcb9","size":8331,"data":"","first_seen":"2025-10-11T19:47:58.333078Z","last_seen":"2026-02-20T14:34:54.871457Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/jquery-ui-1.12.1.custom/jquery-ui.min.js","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e964c0dd0657c2cd8704736312fe5bb7","sha1":"65e770ffc14bfe8ba57f238352f3ed027918aaf2","sha256":"de55f8247b1682887c7d5634e3ac5a78c89cdc867e6570325cbe929927a36bc8","sha512":"a3fa544cdc9b631de5cdb9eb96416a865b26e5840532d31e8e9d099835870f4c1971b81814837cac3a07f0401015ae02d290860d38e9d8bdd4bcb3e2cf1fe797","ssdeep":"192:9Mjc27mtv+b71RrKm2zODtR+DtpCmD1frsNoTDqgl2O3MGqYIs9OMvgPQFkNTTAt:9B27S+bzKfkja1fhDVzjV+T8t","tlshash":"0e729508724479a119cb90e4143b2e0ba27265ddd4044c8cf539cdcf9ebda88b27bb7e","size":17214,"data":"","first_seen":"2023-03-07T13:11:01Z","last_seen":"2026-03-08T17:36:12.638373Z","times_seen":117,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e76d376de21223cc5228f4f759c6a43c","sha1":"310d92cf744a80344f6d3e2f091d86f38205cc2a","sha256":"2176f8a4f5b46a3fc21b8f6b083328f462d3a64e353dc7a9dfaa28f86660b16b","sha512":"31d00f2d5c167d6355f3ae1c815614548ed35e66fcae96c7443fc5cb521aa91dda31646c1e109c2e464a363511501362ad24d26cd88c96fa04ba3b99dfd7a534","ssdeep":"1536:H019T8GjXADPvOynFh02V9cI8pHRCSAwwZxDVN6FbJ:H0j8kCmynFq2VPWCdhtr6Ft","tlshash":"e144326541d48a24b33247c1898b725ae8d52203d951cd43ddcdebacc1ae3b4377aabf","size":270023,"data":"","first_seen":"2025-10-11T19:47:58.334566Z","last_seen":"2025-10-11T19:47:58.334566Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d4be432288c837a6cf5f08927630ada4","sha1":"2769851b2d65f1ca147ca3e8652a57b129fc42cd","sha256":"4c2a356b59882f7e29103288c69e70503041ee82ba986e8aa37b631ed121af62","sha512":"184893d4cbdcdf0258f1d953cde10e45772d141fe205747d289b037c966db9cc63e0dbc4499a04e7b2fb856f5c8de56cb615f62f6571feaf50e80163c2c59012","ssdeep":"","tlshash":"8f010008e03a82e2002a303088020080000a0000c00b80200000800280088a00aa8000","size":817,"data":"","first_seen":"2025-10-11T19:47:58.327662Z","last_seen":"2026-02-20T14:34:54.859258Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/js/jquery.scrolling-tabs.js","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"094ecce4fd250e6c15486fce95bc9305","sha1":"5c98aa6f9a9e9da4296e10f896487d032741bb50","sha256":"1b7671b7c1b3cf6ae80a6fe4576cf786a2cce5e57ecdd4f1d26135e90b7e22a9","sha512":"b682c261864d7f21b51d558d4f1d865b38d0c76a31f2c9e273218b4ca3fd2db18ba449ce33e04300981362447162ed27917d2228cc895758b0a53d1b7537df48","ssdeep":"1536:6k9LB91wG+wt1vWwGKzdDxbgJLYSHhad0EDq8nnhGfuG1:6eBpPRGvF","tlshash":"8943b60d37f239718167b07eca0f61c9ab1281437a09ec50384e76589f8dbb551f9eea","size":60424,"data":"","first_seen":"2023-03-07T13:11:01Z","last_seen":"2026-03-08T17:36:12.61463Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"48a5023aa1230eed17fd94bac057cde0","sha1":"36a9f3fc4b9fdeeb7c64bbb0374997e7f319d684","sha256":"3bed8db518723ebb7e2fd406dd0da529a70021c7745838a5f869e59c3f1fa420","sha512":"a582c17045cb28b6d24602eb2b999b48d9d51bbd7999bd899ad827f0860e3edf76c72f87d64b27dc2a7d46438725aea3545f51513d4c02112dbd1eedf7df0853","ssdeep":"","tlshash":"81f05908e1805216e576601d447fa9083bb5ed513ac0de0151c94c703e80b0325dfef4","size":487,"data":"","first_seen":"2023-03-08T10:01:26Z","last_seen":"2026-03-05T12:10:32.410843Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d4be432288c837a6cf5f08927630ada4","sha1":"2769851b2d65f1ca147ca3e8652a57b129fc42cd","sha256":"4c2a356b59882f7e29103288c69e70503041ee82ba986e8aa37b631ed121af62","sha512":"184893d4cbdcdf0258f1d953cde10e45772d141fe205747d289b037c966db9cc63e0dbc4499a04e7b2fb856f5c8de56cb615f62f6571feaf50e80163c2c59012","ssdeep":"","tlshash":"8f010008e03a82e2002a303088020080000a0000c00b80200000800280088a00aa8000","size":817,"data":"","first_seen":"2025-10-11T19:47:58.327662Z","last_seen":"2026-02-20T14:34:54.859258Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d4be432288c837a6cf5f08927630ada4","sha1":"2769851b2d65f1ca147ca3e8652a57b129fc42cd","sha256":"4c2a356b59882f7e29103288c69e70503041ee82ba986e8aa37b631ed121af62","sha512":"184893d4cbdcdf0258f1d953cde10e45772d141fe205747d289b037c966db9cc63e0dbc4499a04e7b2fb856f5c8de56cb615f62f6571feaf50e80163c2c59012","ssdeep":"","tlshash":"8f010008e03a82e2002a303088020080000a0000c00b80200000800280088a00aa8000","size":817,"data":"","first_seen":"2025-10-11T19:47:58.327662Z","last_seen":"2026-02-20T14:34:54.859258Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d4be432288c837a6cf5f08927630ada4","sha1":"2769851b2d65f1ca147ca3e8652a57b129fc42cd","sha256":"4c2a356b59882f7e29103288c69e70503041ee82ba986e8aa37b631ed121af62","sha512":"184893d4cbdcdf0258f1d953cde10e45772d141fe205747d289b037c966db9cc63e0dbc4499a04e7b2fb856f5c8de56cb615f62f6571feaf50e80163c2c59012","ssdeep":"","tlshash":"8f010008e03a82e2002a303088020080000a0000c00b80200000800280088a00aa8000","size":817,"data":"","first_seen":"2025-10-11T19:47:58.327662Z","last_seen":"2026-02-20T14:34:54.859258Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d4be432288c837a6cf5f08927630ada4","sha1":"2769851b2d65f1ca147ca3e8652a57b129fc42cd","sha256":"4c2a356b59882f7e29103288c69e70503041ee82ba986e8aa37b631ed121af62","sha512":"184893d4cbdcdf0258f1d953cde10e45772d141fe205747d289b037c966db9cc63e0dbc4499a04e7b2fb856f5c8de56cb615f62f6571feaf50e80163c2c59012","ssdeep":"","tlshash":"8f010008e03a82e2002a303088020080000a0000c00b80200000800280088a00aa8000","size":817,"data":"","first_seen":"2025-10-11T19:47:58.327662Z","last_seen":"2026-02-20T14:34:54.859258Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/js/bootstrap.min.js","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","size":37045,"data":"","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-04-26T09:03:52.584676Z","times_seen":80015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d4be432288c837a6cf5f08927630ada4","sha1":"2769851b2d65f1ca147ca3e8652a57b129fc42cd","sha256":"4c2a356b59882f7e29103288c69e70503041ee82ba986e8aa37b631ed121af62","sha512":"184893d4cbdcdf0258f1d953cde10e45772d141fe205747d289b037c966db9cc63e0dbc4499a04e7b2fb856f5c8de56cb615f62f6571feaf50e80163c2c59012","ssdeep":"","tlshash":"8f010008e03a82e2002a303088020080000a0000c00b80200000800280088a00aa8000","size":817,"data":"","first_seen":"2025-10-11T19:47:58.327662Z","last_seen":"2026-02-20T14:34:54.859258Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d4be432288c837a6cf5f08927630ada4","sha1":"2769851b2d65f1ca147ca3e8652a57b129fc42cd","sha256":"4c2a356b59882f7e29103288c69e70503041ee82ba986e8aa37b631ed121af62","sha512":"184893d4cbdcdf0258f1d953cde10e45772d141fe205747d289b037c966db9cc63e0dbc4499a04e7b2fb856f5c8de56cb615f62f6571feaf50e80163c2c59012","ssdeep":"","tlshash":"8f010008e03a82e2002a303088020080000a0000c00b80200000800280088a00aa8000","size":817,"data":"","first_seen":"2025-10-11T19:47:58.327662Z","last_seen":"2026-02-20T14:34:54.859258Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d4be432288c837a6cf5f08927630ada4","sha1":"2769851b2d65f1ca147ca3e8652a57b129fc42cd","sha256":"4c2a356b59882f7e29103288c69e70503041ee82ba986e8aa37b631ed121af62","sha512":"184893d4cbdcdf0258f1d953cde10e45772d141fe205747d289b037c966db9cc63e0dbc4499a04e7b2fb856f5c8de56cb615f62f6571feaf50e80163c2c59012","ssdeep":"","tlshash":"8f010008e03a82e2002a303088020080000a0000c00b80200000800280088a00aa8000","size":817,"data":"","first_seen":"2025-10-11T19:47:58.327662Z","last_seen":"2026-02-20T14:34:54.859258Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-V4D3082FX6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0cb693c9e20f8a5bdee380cf6ae0a313","sha1":"91d6d3d491e3743568c9dc5c3c62793abedc974a","sha256":"71b7032199ed6f98f95f67ebcbd3725ea496375c2f494e85d4fb1d583bdb9338","sha512":"7ca203b5254b984d25005b0748866ba3e6ac54c9e4b8513a90b623340e9a2274523ae2c0ad91305ca00d3dee274c24aa56381e81da5710189b2f9c719ab25af5","ssdeep":"6144:7P/yp2/4tk0uwbWZJT+Nju5204OZSkndXA2:+YQm0KZJu0JV","tlshash":"e67407cd73d674624393a578503f018ba17b6892f44cc899f18adee52e74a9a0237f7c","size":367446,"data":"","first_seen":"2025-10-11T19:47:58.307198Z","last_seen":"2025-10-11T19:47:58.307198Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d4be432288c837a6cf5f08927630ada4","sha1":"2769851b2d65f1ca147ca3e8652a57b129fc42cd","sha256":"4c2a356b59882f7e29103288c69e70503041ee82ba986e8aa37b631ed121af62","sha512":"184893d4cbdcdf0258f1d953cde10e45772d141fe205747d289b037c966db9cc63e0dbc4499a04e7b2fb856f5c8de56cb615f62f6571feaf50e80163c2c59012","ssdeep":"","tlshash":"8f010008e03a82e2002a303088020080000a0000c00b80200000800280088a00aa8000","size":817,"data":"","first_seen":"2025-10-11T19:47:58.327662Z","last_seen":"2026-02-20T14:34:54.859258Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"57f4db8c539dd4011cdeb87a98c3d323","sha1":"918f714dc23d3947197cb64b48e9a061a582be18","sha256":"fbd5bac9faf75211aee402f75429f6d1b683072e7df97b3d1a58309dfefc5150","sha512":"475578eb5e124c4d9b1b428226c649f8216276f6db318acf31180b47ecb1f4cba7a05b124c5bcb5c550b0632e0fedeee1263ad28bd03d76f3d8901ce4602ceea","ssdeep":"","tlshash":"ccd0a7ba25d85635485a61987436faaa3db530606d97200b809ca8199814fb74901884","size":223,"data":"","first_seen":"2023-03-07T22:02:40Z","last_seen":"2026-02-20T14:34:54.873225Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"domTimer","is_inline":false,"md5":"d4be432288c837a6cf5f08927630ada4","sha1":"2769851b2d65f1ca147ca3e8652a57b129fc42cd","sha256":"4c2a356b59882f7e29103288c69e70503041ee82ba986e8aa37b631ed121af62","sha512":"184893d4cbdcdf0258f1d953cde10e45772d141fe205747d289b037c966db9cc63e0dbc4499a04e7b2fb856f5c8de56cb615f62f6571feaf50e80163c2c59012","ssdeep":"","tlshash":"8f010008e03a82e2002a303088020080000a0000c00b80200000800280088a00aa8000","size":817,"data":"","first_seen":"2025-10-11T19:47:58.327662Z","last_seen":"2026-02-20T14:34:54.859258Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.batstream.vip/img/competition/wta.png","fqdn":"www.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/competition/wta.png HTTP/1.1\r\nHost: www.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://live.batstream.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 1279\r\nlast-modified: Wed, 12 Dec 2018 18:51:50 GMT\r\netag: \"5c1158c6-4ff\"\r\nexpires: Fri, 07 Nov 2025 05:23:51 GMT\r\ncache-control: public, max-age=2592000\r\npragma: public\r\naccept-ranges: bytes\r\nage: 310989\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bKGaHN9f3P99JzKncR3D8iuo2JeZC8tlzAOrhp5vxolrWYNAVooVjNmCGYAgxLM7FilbnRNdlBfpfUYkG5TL120OkNbMTMtKl7O1hQbRdQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98d0debcf873568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 28, 8-bit colormap, non-interlaced","md5":"6df78407f7162b7371c63f6585ee8e77","sha1":"4e522e95f33acc05652be1dcb0052e1e8179a0ed","sha256":"0abd8361e7c7fa1d09162000c8d137c7bdc738120b573003cb9330be742becd8","sha512":"5a54bcae094017bcdb37b29b67a0cd08e2c11db6f7876796ab44edb9105f567ddb2902da134544deee8e742ffb951a77ab41b621dd3a816b8b58b55c4b00aaac","ssdeep":"","tlshash":"c321eaa01b7c08ef66633257412cb8589fc50b236aca04cfd70b043ffc65aa9001744f","first_seen":"2023-05-10T10:46:04Z","last_seen":"2026-03-08T17:36:12.610764Z","times_seen":79,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.batstream.vip/img/countries/United-states.png","fqdn":"www.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/countries/United-states.png HTTP/1.1\r\nHost: www.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://live.batstream.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 656\r\nlast-modified: Wed, 12 Dec 2018 18:51:50 GMT\r\netag: \"5c1158c6-290\"\r\nexpires: Thu, 30 Oct 2025 13:46:07 GMT\r\ncache-control: public, max-age=2592000\r\npragma: public\r\naccept-ranges: bytes\r\nage: 972053\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s67%2BgIhf7%2FCAQnVzX2xPPka9QIPWTkfHT2VLZaN8i%2FKKowxIjd4zw5V2FVv19IqsZAUHmiT%2BoyBDT7udc7k%2BYzC%2FoMoH%2Fpq1CXrDDgTW8A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98d0debcf874568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"ae506a6c014bfeb8d8cbfdfbe94c14c9","sha1":"f4e74440c4e79e71959b9b8f799f2e8a7e15b7ee","sha256":"bc6dd978e70894c8a0148e6806f4fde9566ee59349adb03c02a61a3b2e25b6f1","sha512":"9f0119afef901697cf8410e94c65e43fe11a7e5f7f469b024645b2ed8689bdbae3c13b98ed36deda850de9198a90b5e5e0ec849c2132718544a3afe1e463b03e","ssdeep":"","tlshash":"baf023e7c8d0e43b9ef6d2924d139af58872077402634801dd79f47dac85754839cde0","first_seen":"2023-04-10T16:41:39Z","last_seen":"2026-04-26T09:24:45.759148Z","times_seen":923,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.batstream.vip/img/countries/Russia.png","fqdn":"www.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/countries/Russia.png HTTP/1.1\r\nHost: www.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://live.batstream.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 403\r\nlast-modified: Wed, 12 Dec 2018 18:51:50 GMT\r\netag: \"5c1158c6-193\"\r\nexpires: Sun, 02 Nov 2025 05:32:57 GMT\r\ncache-control: public, max-age=2592000\r\npragma: public\r\naccept-ranges: bytes\r\nage: 742443\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FoChzTeL8P9WjNMJTUvjuIDi%2BDuJg68yYOITGpasdKHRu2cQKW3TfU%2BMGlWO0tSGmwAL92G5tqeNfnTa4NpoakOEEouRjssrCXE2mLZkRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98d0debcf875568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":403,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"d8df89b036e6afb48f72d2440831bad0","sha1":"04abb4b29dae9c6f1ac0f1d8a507aabe26a3be35","sha256":"2db4b55326c0ef7cd3caf53e835ae1f38629da1d1c2f5a127e0785165b16078c","sha512":"a17587746e1fbb8bdb0d2348558128c073dbb52d55ceb591add7851236330f180a8b0aff42c5de5bd0a7c489309ce78e5d95a16357cfdea1ae69904a8279ddc8","ssdeep":"","tlshash":"b0e0abdaa795042ec91841a207152539beb34a680e43bb1a8d06a075e6d170402902a1","first_seen":"2023-04-30T18:47:46Z","last_seen":"2026-04-25T20:03:26.721487Z","times_seen":291,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.batstream.vip/img/countries/Colombia.png","fqdn":"www.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/countries/Colombia.png HTTP/1.1\r\nHost: www.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://live.batstream.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 452\r\nlast-modified: Wed, 12 Dec 2018 18:51:50 GMT\r\netag: \"5c1158c6-1c4\"\r\nexpires: Sun, 26 Oct 2025 11:05:39 GMT\r\ncache-control: public, max-age=2592000\r\npragma: public\r\naccept-ranges: bytes\r\nage: 1327281\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Na2qKQ3k3P9O13t3hha9S670bpLpcV1157v1wuYG7F2OUDAQlHX%2B8G3YtYx%2F3o9uziklpyj%2FVq90PgU9S5Ky3PoxH99jM%2FqDL0OZ8uxiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98d0debd0877568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"75424c29643b094a5537e8a273c3741e","sha1":"ba1a69ba4ea453c0283314ac16dbcac943cde8e4","sha256":"bcfd80f5e003eb5b1e8fa5ca27b90f5a1a28ad1585c3817064a1659258cf77ad","sha512":"3364ff4f32aac6010ede409d05bdca438533b8d8d76a1ce4c2526c8314427a51ec4f4e3d1c4c0283e28603b5079505c9910b237a0625feb09389077b3380822e","ssdeep":"","tlshash":"15f0d49a022019f6c5eacc4678011d3cd8ab87e15f434c6a915eec4b725a6552540790","first_seen":"2023-05-10T15:16:24Z","last_seen":"2026-04-06T06:26:09.218329Z","times_seen":92,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Titillium+Web:400,600,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:33.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:52 GMT","end":"Mon, 15 Dec 2025 08:41:51 GMT"},"fingerprint":{"sha1":"04:E6:D3:58:E3:A1:E3:05:2B:C3:56:5D:68:BB:1B:0A:08:C6:E3:FB","sha256":"25:4C:B3:A3:9A:E1:D7:FD:25:B6:BF:E9:AA:97:95:20:5D:F2:15:EA:41:46:B6:6B:01:17:19:26:EC:EF:D3:CA"}}},"request":{"raw":"GET /css?family=Titillium+Web:400,600,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 11 Oct 2025 19:47:33 GMT\r\ndate: Sat, 11 Oct 2025 19:47:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2512,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"92a90d1ed15a1a9046f8e2d6e8484d96","sha1":"4751abf0b1ccc79aeb400ff3232761f573ce9eea","sha256":"194ed2b920576a415e0664312ad5e11688d637d1d2856e308637572acbe07a35","sha512":"f24f021774a96a8e8b590f548ba3c01d107e35b7b55b0358883f5f9065343ca735b10d8f622bde1bc57da8b50f423252c2bdb8f14934eccc54f07d2eba2f1c62","ssdeep":"","tlshash":"3151dc810c6ba104e79309c653dd3d37df0e32516498b834affe18e8bc96d6a936571d","first_seen":"2025-09-11T22:39:58.118711Z","last_seen":"2026-04-26T08:42:54.628441Z","times_seen":128,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":97,"dns":1,"connect":7,"send":0,"wait":20,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/favicon.ico","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: live.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nCookie: coffset=2; _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncontent-security-policy: frame-ancestors *\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jC0dPO%2FcgHwHb%2BDK36BNRiBNKJAKMig1Bp9RoRQB%2BvqD5OWyyaMfWkubLS2OjL1uBVADLcE9NVozmsTYNc9Ye%2FhD%2BIJSu0GTxlAzjhTVp5k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98d0debb8d1356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42843,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (415)","md5":"902b22c064ab147cbf37786d036507cc","sha1":"a62fa9b7f9e2d82e311db7a50b73f62ac1842a5b","sha256":"76f97a97d4e32d22b866521e22db82592406e876dec55cf4f44ac98773a283e5","sha512":"3862c78813d22811eb216081afb99361a595f8c63655534c9f3148d985392f30c89acf62556a90487729c87c0fba11825ec0f8582290a8a12e81e4b06726dd27","ssdeep":"384:lsE7+OPk+l2M8ID2mfwrhWlepcZGDphO/ENF2GMpTmtlI9rgEGy7GHYO22h9wl/j:v73k+oM97fwrksMTEv2GoTmCoij","tlshash":"1413d602bb8d640a321342a8253a77f8213e4537e9158dbcf87f77b877c09da8277995","first_seen":"2025-10-11T19:47:58.297094Z","last_seen":"2025-10-11T19:47:58.297094Z","times_seen":1,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batstream.vip/img/countries/Italy.png","fqdn":"batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/countries/Italy.png HTTP/1.1\r\nHost: batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: text/html\r\nlocation: https://www.batstream.vip/img/countries/Italy.png\r\nserver: cloudflare\r\nage: 556\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KcJR3HVIYCae9UeFMjpQZaVWmtLk1r356nYb43nhrfbk7uYbXQl0zLTG1Bt28xi%2BLIzb5jrtjXIsHAy805L96q9lRz4FQASSp1V1\"}]}\r\ncf-ray: 98d0debc3b0956a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":536,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":89,"dns":1,"connect":3,"send":0,"wait":7,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batstream.vip/img/countries/Argentina.png","fqdn":"batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/countries/Argentina.png HTTP/1.1\r\nHost: batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: text/html\r\nlocation: https://www.batstream.vip/img/countries/Argentina.png\r\nserver: cloudflare\r\nage: 556\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WhwjyBqkV9MV6eHI87XhYMVKIdSH0vS%2F8kg1%2FkvFb4%2FcrImgsjX4A17RkXwSAofrlDAXKWbwtToxWtl%2BlEOayIef6X6a3lr1q07N\"}]}\r\ncf-ray: 98d0debc3af956a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":501,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batstream.vip/img/competition/nhl-1.png","fqdn":"batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/competition/nhl-1.png HTTP/1.1\r\nHost: batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: text/html\r\nlocation: https://www.batstream.vip/img/competition/nhl-1.png\r\nserver: cloudflare\r\nage: 556\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pvnljGQ%2B98M0UUfC6rbO%2FjvHOfClyadAPi1zoxhNikKxgSRUiVe9gQ%2B22PTDgZt6j%2B3eEAXBF92aNP4UBoMKwuJ0aK8zUbVXBHdn\"}]}\r\ncf-ray: 98d0debc3afc56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5037,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batstream.vip/img/competition/pga.png","fqdn":"batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/competition/pga.png HTTP/1.1\r\nHost: batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: text/html\r\nlocation: https://www.batstream.vip/img/competition/pga.png\r\nserver: cloudflare\r\nage: 556\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lTrNUmVTwmA07FPIvXsrTUdbXv2HEL2axtjt4vX0YMRv218Kk4QpajBhka4WmHSmZGkOkAK2zeOODeAsnpzx9kNycITnVwOoQzYF\"}]}\r\ncf-ray: 98d0debc3b0456a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1340,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.batstream.vip/img/competition/atp.png","fqdn":"www.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/competition/atp.png HTTP/1.1\r\nHost: www.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://live.batstream.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 1915\r\nlast-modified: Wed, 12 Dec 2018 18:51:50 GMT\r\netag: \"5c1158c6-77b\"\r\nexpires: Fri, 07 Nov 2025 05:23:51 GMT\r\ncache-control: public, max-age=2592000\r\npragma: public\r\naccept-ranges: bytes\r\nage: 310989\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B8k9%2BeDeuEdcXBRlwWzCrupFLdcZgh4HGgU%2BsdP1EiO3LWlvwJd6j%2FDN5jDGq9myCDL6dFQSRL09EQ9VR%2FEYGvjH8VbbsyIZ1V8w9SSRPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98d0debcf871568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1915,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 39 x 45, 8-bit colormap, non-interlaced","md5":"11a66a9e3576dbf0484caedfd75791d7","sha1":"3d8c4a73e9603cc26aa6967059b9f0530a8a12d7","sha256":"a78746173ec6317c28a07f3f80c15c6d0f60381e2c76cedf865eff48d5a8e82e","sha512":"fb59ecb8370e102f0d43f7b73ed55148afbe25c1b2b2d48bd8013f70d17d1fc932eafd24bdacb2200483f10952baf50cec6f3793ca63b1de0ead975243fb214d","ssdeep":"","tlshash":"5f411b39b255a8d2daa135c06ed9f534ed1dc60a4820b758653cbe3c6af325201857bd","first_seen":"2023-05-10T10:46:04Z","last_seen":"2026-03-08T17:36:12.633489Z","times_seen":84,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.batstream.vip/img/countries/International.png","fqdn":"www.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/countries/International.png HTTP/1.1\r\nHost: www.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://live.batstream.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 7316\r\nlast-modified: Wed, 12 Dec 2018 18:51:50 GMT\r\netag: \"5c1158c6-1c94\"\r\nexpires: Thu, 23 Oct 2025 10:38:14 GMT\r\ncache-control: public, max-age=2592000\r\npragma: public\r\naccept-ranges: bytes\r\nage: 1588126\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GNvlmwvZ7UTrHeMz0tsz234bMsil%2FP2tZYHKxPIPVySWC8iM9g1uueZ07%2BAw1ObERqDULDrKsR%2F4xt5zF0ncX9QW8Q7f4BEu4KwOjJzO1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98d0debd0878568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7316,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"47d7e7a2a6f0f65bb07f4b41637410bf","sha1":"35036e851b4ea63e39c5a3b8d47572f51baef653","sha256":"db3de9616bcc66d2e639b6923283ca03c0aefc53f48dd53dddb293e276036a1d","sha512":"050ecac91fd7518e17186bce3fab5d746d113f2fec086b1e125d4bd987803e62993463922d1a9206108fa76cafa411351a12809afe96dd599e5432863481551e","ssdeep":"192:WtQdZifh3FT8N627JISjYoAVBXkKZiL6pbUbY:WWifNFTS7uSjYoAzXkupT","tlshash":"bde1af61cd52bbd61786a07c2fc46361a03616f0020589abc6ee2778463cf51862efd7","first_seen":"2023-05-10T10:46:04Z","last_seen":"2026-03-08T17:36:12.606022Z","times_seen":110,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batstream.vip/img/countries/Germany.png","fqdn":"batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/countries/Germany.png HTTP/1.1\r\nHost: batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: text/html\r\nlocation: https://www.batstream.vip/img/countries/Germany.png\r\nserver: cloudflare\r\nage: 556\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WYEOsfs72hAZDh6NTI3s26HoTItBAu0V65j%2BJv0kqCi47e4YOLHMEi8%2FLdzS0%2BmlKjgW0i70bcHmf3NSo3HBA8lMAALsqARpOZQL\"}]}\r\ncf-ray: 98d0debc3b0a56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":483,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":88,"dns":1,"connect":7,"send":0,"wait":7,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.cc/","fqdn":"live.batstream.cc","domain":"batstream.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T19:47:29.089Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: live.batstream.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-11T19:47:42Z","timestamp":1760212062,"ip_dst":{"addr":"172.18.0.6","port":36154,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"162.255.119.26","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Namecheap URL Forward","source":"{\"timestamp\":\"2025-10-11T19:47:42.553457+0000\",\"flow_id\":2202273276239984,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"162.255.119.26\",\"src_port\":80,\"dest_ip\":\"172.18.0.6\",\"dest_port\":36154,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2035208,\"rev\":2,\"signature\":\"ET INFO Namecheap URL Forward\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_02_16\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_02_16\"]}},\"http\":{\"hostname\":\"live.batstream.cc\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://live.batstream.vip\",\"length\":49},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":49,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":572,\"bytes_toclient\":519,\"start\":\"2025-10-11T19:47:32.073840+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-11T19:47:43Z","timestamp":1760212063,"ip_dst":{"addr":"172.18.0.6","port":36164,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"162.255.119.26","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Namecheap URL Forward","source":"{\"timestamp\":\"2025-10-11T19:47:43.361613+0000\",\"flow_id\":1196370460697766,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"162.255.119.26\",\"src_port\":80,\"dest_ip\":\"172.18.0.6\",\"dest_port\":36164,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2035208,\"rev\":2,\"signature\":\"ET INFO Namecheap URL Forward\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_02_16\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_02_16\"]}},\"http\":{\"hostname\":\"live.batstream.cc\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://live.batstream.vip\",\"length\":49},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":49,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":692,\"bytes_toclient\":519,\"start\":\"2025-10-11T19:47:32.877734+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/css/widget.css","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:33.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /css/widget.css HTTP/1.1\r\nHost: live.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 19:47:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jan 2019 22:44:24 GMT\r\netag: \"5c4f85c8-38c2\"\r\nexpires: Sat, 25 Oct 2025 19:37:37 GMT\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\npragma: public\r\ncontent-encoding: gzip\r\nage: 1382963\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AefKOJnHYwl9brpNF%2BZ0epxylPfdRTIFlZGrtKqxe%2FZtQjN0%2F1oM3K0BRJ3LX9%2Btr2g8bpdFDJrkhXdbuYELHVrHLWRj0RltvKlQCkwyR%2Fs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d0deb778e156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14530,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11562)","md5":"6823dcc95b3faf2941db325a70529b34","sha1":"3ea30da8d59c979e762b67313a2d3728691024d0","sha256":"8d00a6a9febd2557b842da6369b48c6ee661b86049864d802f56976bc2f02f5e","sha512":"9273c3293a35c0fd75cf22f05f1847a4591d5ae359badec30e364f2275df3c73fd4452ca2a56088f73c97d0d0235426e653293f3be5487f151474d539e914285","ssdeep":"384:mKfb6GquUh9D39zfVTHDTfZnVB7XRHTHzlTpxeHKQ95B95CzP:rT6GquUh9D39zfVTHDTfZnVB7XRHTHzv","tlshash":"40629662f189211fba17c5a578632bfced588046eac10e7e7e2b73ba87431d54277a01","first_seen":"2023-04-08T10:05:55Z","last_seen":"2026-03-08T17:36:12.574635Z","times_seen":85,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/jquery-ui-1.12.1.custom/jquery-ui.min.js","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:33.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /jquery-ui-1.12.1.custom/jquery-ui.min.js HTTP/1.1\r\nHost: live.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 19:47:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jan 2019 22:44:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 20 Oct 2025 11:11:42 GMT\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\npragma: public\r\nage: 1845318\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tPGY7BJrTWX39WegWBSbsayQ0Y%2BD3fon0CmonsSo5g2bnZgSZtoA%2FJUMn3NKErvejolUBKX%2BYxaxZ%2Fb6baVByF7ls5Um5JkP%2Flgh3QJPxqE%3D\"}]}\r\netag: W/\"5c4f85c8-433e\"\r\ncontent-encoding: br\r\ncf-ray: 98d0deb788ea56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17214,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17014)","md5":"e964c0dd0657c2cd8704736312fe5bb7","sha1":"65e770ffc14bfe8ba57f238352f3ed027918aaf2","sha256":"de55f8247b1682887c7d5634e3ac5a78c89cdc867e6570325cbe929927a36bc8","sha512":"a3fa544cdc9b631de5cdb9eb96416a865b26e5840532d31e8e9d099835870f4c1971b81814837cac3a07f0401015ae02d290860d38e9d8bdd4bcb3e2cf1fe797","ssdeep":"192:9Mjc27mtv+b71RrKm2zODtR+DtpCmD1frsNoTDqgl2O3MGqYIs9OMvgPQFkNTTAt:9B27S+bzKfkja1fhDVzjV+T8t","tlshash":"0e729508724479a119cb90e4143b2e0ba27265ddd4044c8cf539cdcf9ebda88b27bb7e","first_seen":"2023-03-07T13:11:01Z","last_seen":"2026-03-08T17:36:12.638373Z","times_seen":117,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-V4D3082FX6","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:33.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:44 GMT","end":"Mon, 15 Dec 2025 08:40:43 GMT"},"fingerprint":{"sha1":"02:50:AA:DF:C5:16:76:73:9E:ED:AD:C4:E5:98:EB:E7:2D:B9:C3:33","sha256":"6C:68:2F:0A:C2:03:62:A1:8E:7B:3B:BB:D6:6D:96:A7:78:6C:78:0F:1D:F0:EB:77:84:A5:4A:DD:07:44:9B:DD"}}},"request":{"raw":"GET /gtag/js?id=G-V4D3082FX6 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 11 Oct 2025 19:47:33 GMT\r\nexpires: Sat, 11 Oct 2025 19:47:33 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 127755\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":367446,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"0cb693c9e20f8a5bdee380cf6ae0a313","sha1":"91d6d3d491e3743568c9dc5c3c62793abedc974a","sha256":"71b7032199ed6f98f95f67ebcbd3725ea496375c2f494e85d4fb1d583bdb9338","sha512":"7ca203b5254b984d25005b0748866ba3e6ac54c9e4b8513a90b623340e9a2274523ae2c0ad91305ca00d3dee274c24aa56381e81da5710189b2f9c719ab25af5","ssdeep":"6144:7P/yp2/4tk0uwbWZJT+Nju5204OZSkndXA2:+YQm0KZJu0JV","tlshash":"e67407cd73d674624393a578503f018ba17b6892f44cc899f18adee52e74a9a0237f7c","first_seen":"2025-10-11T19:47:58.307198Z","last_seen":"2025-10-11T19:47:58.307198Z","times_seen":1,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":137,"dns":3,"connect":28,"send":0,"wait":70,"receive":83,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batstream.vip/img/countries/Worldwide.png","fqdn":"batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/countries/Worldwide.png HTTP/1.1\r\nHost: batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: text/html\r\nlocation: https://www.batstream.vip/img/countries/Worldwide.png\r\nserver: cloudflare\r\nage: 556\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rRqUFl%2BdfBAmNtA0Ock0ymfyqK0HK72A1mUGMDxgeW0e49u3UPrxKFdv5jd8mKTUcS2ZTH%2FmkNb7wHsbWZ2SER2ayLuAPZGhO%2FiW\"}]}\r\ncf-ray: 98d0debc3b0556a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7316,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":95,"dns":6,"connect":1,"send":0,"wait":7,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batstream.vip/img/competition/atp.png","fqdn":"batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/competition/atp.png HTTP/1.1\r\nHost: batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: text/html\r\nlocation: https://www.batstream.vip/img/competition/atp.png\r\nserver: cloudflare\r\nage: 556\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bX7mke7zP%2BMRfYEXbaUj5C%2FcRQI4Yd%2FX2yRw7riFcC%2BpAQhjuy%2F7daEnKiJG1dSuw1JFnjq%2Bj74ThO%2Bfs2XeEhUSc6BsbFuZlSIw\"}]}\r\ncf-ray: 98d0debc3af656a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1915,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":85,"dns":1,"connect":1,"send":0,"wait":12,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batstream.vip/img/countries/International.png","fqdn":"batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/countries/International.png HTTP/1.1\r\nHost: batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: text/html\r\nlocation: https://www.batstream.vip/img/countries/International.png\r\nserver: cloudflare\r\nage: 556\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vajDd1guX753%2FdlFYH%2BwTNUSEhFg4DYRiQWi0TbMBZzZmZiiQf1xXVL7IeBQOcwYwPKT%2FIImCd3YGb%2B%2FAIVWDGOa%2BTWNB7%2BZqJ9B\"}]}\r\ncf-ray: 98d0debc3b0756a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7316,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":91,"dns":1,"connect":3,"send":0,"wait":5,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batstream.vip/img/countries/Spain.png","fqdn":"batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/countries/Spain.png HTTP/1.1\r\nHost: batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: text/html\r\nlocation: https://www.batstream.vip/img/countries/Spain.png\r\nserver: cloudflare\r\nage: 556\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y8hgqzYv599xQ6%2BkAjfHlVal47RXwNV9B5%2FVAEryXiLEbc0wF6NBdpoDn04CFNBh0A0FPBCxcmkWc6zJsD3hJr4dif4igTLklT2z\"}]}\r\ncf-ray: 98d0debc4b1056a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":666,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":90,"dns":2,"connect":26,"send":0,"wait":7,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batstream.vip/img/competition/nba.png","fqdn":"batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/competition/nba.png HTTP/1.1\r\nHost: batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: text/html\r\nlocation: https://www.batstream.vip/img/competition/nba.png\r\nserver: cloudflare\r\nage: 556\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2F6lM%2F1Twq9WmLcCWUfoD%2B8NwBrapvtS8Akxt6ea%2B0wxpefTAOGwszeEqsiEFY99lAjVNst94jD318MzpE8GkB1dqf9LXpEcZqBu\"}]}\r\ncf-ray: 98d0debc3aff56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1374,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.batstream.vip/img/countries/Argentina.png","fqdn":"www.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/countries/Argentina.png HTTP/1.1\r\nHost: www.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://live.batstream.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 501\r\nlast-modified: Wed, 12 Dec 2018 18:51:50 GMT\r\netag: \"5c1158c6-1f5\"\r\nexpires: Sat, 08 Nov 2025 18:31:18 GMT\r\ncache-control: public, max-age=2592000\r\npragma: public\r\naccept-ranges: bytes\r\nage: 177342\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G86WAOvwbNgwZ2EUgmKFdXfl3BbWfcL1shTbmyEiI26VSYnIeuoCnle6ewoFGE4i2MlhiKecYARspVGhHOVe40%2BsSuO0fJjQICIQnh5Rag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98d0debcf870568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":501,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"642effb774d7c72d624a81eb6c65a50b","sha1":"2ae35ec3cd566d43c3dd2744f5fec66e614294d7","sha256":"b1677775027796b6cde3f41186a2c4dac6613c8638db055ea7d0885eae8eab4b","sha512":"1ceed1a718a759d5d9c658286350abdc4fe6de62a4369bdfaac351a5ad101047dfceeea857097a283d0b8231a1d350564cce08d07713564beb790d15eda15089","ssdeep":"","tlshash":"ecf005ed074134a6873b564311f62615a0f70ff94b563406866dd7eb39d14550011d80","first_seen":"2023-05-10T10:46:05Z","last_seen":"2026-04-06T06:26:09.294203Z","times_seen":101,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.batstream.vip/img/competition/nhl-1.png","fqdn":"www.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/competition/nhl-1.png HTTP/1.1\r\nHost: www.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://live.batstream.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 5037\r\nlast-modified: Sat, 09 Feb 2019 21:53:02 GMT\r\netag: \"5c5f4bbe-13ad\"\r\nexpires: Sat, 08 Nov 2025 18:31:18 GMT\r\ncache-control: public, max-age=2592000\r\npragma: public\r\naccept-ranges: bytes\r\nage: 177342\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dprO7umfTf9GGHCCd%2Bt%2FAca5cae1jDvYwj9Z1njiQZG3KQbGE20kC3sdDMIoc80ZgHm9rMvumwz9Li8%2Fe%2FEdC79VSeQsk8TFJSv5RIMxrA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98d0debcf872568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5037,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"476059d25e1677b9500dcfaae3a2c84f","sha1":"547b12d6101fbf9d88332fc69873eba821b11a78","sha256":"82c76ddb103128f22808f55c8aee8b8aeb8c7d6b8c027e8312fed740a67a9f4a","sha512":"bd368a7458464b0b6adeeb0be1f856752589c798044246ad00d6f1fe967fc0dad90dec1c4c5c14f3bceaba61d709c146313ae856d99244de6d6ca7d824f97514","ssdeep":"96:eSco7F8knmWIJwH/00TgHoSHHlHac86Z5uea1zqI/PZ09PyVnxXDj1QGHe:eSR7F8kn2IS1apeI50xKN+","tlshash":"82a18e0430492cb5a54ff9c1bafc236a6e234f304a42e5c9ddc768432a704abf54cad2","first_seen":"2023-05-10T15:16:24Z","last_seen":"2026-03-08T17:36:12.572401Z","times_seen":69,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.batstream.vip/img/countries/Spain.png","fqdn":"www.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/countries/Spain.png HTTP/1.1\r\nHost: www.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://live.batstream.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 666\r\nlast-modified: Wed, 12 Dec 2018 18:51:50 GMT\r\netag: \"5c1158c6-29a\"\r\nexpires: Fri, 07 Nov 2025 05:23:51 GMT\r\ncache-control: public, max-age=2592000\r\npragma: public\r\naccept-ranges: bytes\r\nage: 310989\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S8DfRf4fm5k4TqERlvZ0UvNAxnDqaQgwmBvu65N6npwlriLVOigucHMQu7Vs%2FyaOixQkenbubKs33W6L5oWea7jt7%2Fqvk8DmxMJ7vjFPPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98d0debd087e568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":666,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"5fa381a8eb16d9e673d32980e7fd1710","sha1":"fc29fbbebe97109ef1d16a0d4a65637d6b725ac8","sha256":"7b6f223153c8eda1b541326f9cd66aeb53a28801c58c4de751fd2f9f6f1d96ff","sha512":"d9312d282d6eac68e7afa007cfc7f4f4b0280ad02dee01d8479137317fe6e903fd10db068a23899062cf5fac8ab82680db26f1fbddeda5f9d5b97626ac68dba9","ssdeep":"","tlshash":"3e01c8882cef486f4639d6931014028466eb78b4333bcd84d0e53c1eefc32843090f52","first_seen":"2023-04-30T18:47:46Z","last_seen":"2026-04-26T05:23:22.422853Z","times_seen":286,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/js/bootstrap.min.js","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:33.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /js/bootstrap.min.js HTTP/1.1\r\nHost: live.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 19:47:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jan 2019 22:44:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 20 Oct 2025 11:11:42 GMT\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\npragma: public\r\nage: 1845318\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rHYROKqf5IaujEPRXo6DSGiW5%2BA4rWt67Mg2iugUcrb03Q4kKe91xiwi%2BEV8odZqXmxtsWjHWLf9%2B5p3%2FtUS6hRSZtpIUzbdg1wF21aMQfI%3D\"}]}\r\netag: W/\"5c4f85c8-90b5\"\r\ncontent-encoding: br\r\ncf-ray: 98d0deb788e656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"5869c96cc8f19086aee625d670d741f9","sha1":"430a443d74830fe9be26efca431f448c1b3740f9","sha256":"53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef","sha512":"8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45","ssdeep":"768:o2rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfbx8Gf3Zq7Q:Jg73zhq0GvbJ3ZKQ","tlshash":"b6f28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:02:54Z","last_seen":"2026-04-26T09:03:52.584676Z","times_seen":80015,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/titilliumweb/v19/NaPDcZTIAOhVxoMyOr9n_E7ffBzCGItzYw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/titilliumweb/v19/NaPDcZTIAOhVxoMyOr9n_E7ffBzCGItzYw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://live.batstream.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12116\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Oct 2025 17:28:11 GMT\r\nexpires: Thu, 08 Oct 2026 17:28:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 267563\r\nlast-modified: Tue, 09 Sep 2025 18:58:10 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12116, version 1.0","md5":"b65bd9e79f1dd93eb8e0cd83e3fe62f9","sha1":"3bb357672e2c3942ca0f67d8861aea3cb80284b9","sha256":"f356ff5613e1b6789a47ae3bd6b72fa6fb61d44493811bcb758fb4229b7a8bcb","sha512":"b030ef30e20ab608a54e6744c2d2108513d6181674e0e1e360fd3530453fe9fbb50786fb854448b70fe472d091ef88485f38c54d4de6c3b0445697bdac01ab21","ssdeep":"192:IZMY5n8XHp+fpbeY2swnzsDHycy2a/xwAJK0ANVtQR3TpOYEQFN66R+xx415OpnE:IqY583pwXwwDScyuAJ+Vt66Q3FExb6","tlshash":"b442bf8ada8ee683e3f567717b3e09474d9a2843ee79f8995b03012095b00906658e88","first_seen":"2025-06-03T21:25:26.821297Z","last_seen":"2026-04-26T08:46:54.577143Z","times_seen":3064,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":184,"dns":1,"connect":28,"send":0,"wait":29,"receive":10,"ssl":156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/titilliumweb/v19/NaPDcZTIAOhVxoMyOr9n_E7ffHjDGItzYw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:41:58 GMT","end":"Mon, 15 Dec 2025 08:41:57 GMT"},"fingerprint":{"sha1":"01:8A:1A:53:EB:C1:22:A3:A0:69:16:42:30:E0:DF:75:70:19:84:BA","sha256":"A0:39:D8:8F:4E:08:6C:CC:FB:5E:20:98:FA:7C:2B:9F:6F:D6:F3:10:BF:EF:02:93:42:E4:94:E6:FD:A4:8D:35"}}},"request":{"raw":"GET /s/titilliumweb/v19/NaPDcZTIAOhVxoMyOr9n_E7ffHjDGItzYw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://live.batstream.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 11732\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 08 Oct 2025 17:22:48 GMT\r\nexpires: Thu, 08 Oct 2026 17:22:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 267886\r\nlast-modified: Tue, 09 Sep 2025 18:57:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11732,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11732, version 1.0","md5":"6a025e37840087fc773a919e805d677c","sha1":"4f716b1a077ece2131283eb0eb033595baa0dd97","sha256":"9e3162d81ed6681322ab34791660f1b45c79945197e7a7dbb217005b2926caf4","sha512":"5820533d57126e6b1ac98e1a719b319a79dc14f6b91d8c01652f4ffdc55119b881ef1346520e98bfe01e5d0b6bfb9f682df80dfa22e1c9ec66d6030a47930111","ssdeep":"192:TGmzw/sd1bnYKK3INB6lG7BCYw1JKWZS218VXv9oe8lBaMPnhT98yFZhPD4Sctg:69/sMrSeU9wjLSDIBtPnhVFjcSOg","tlshash":"b232b0e73d815e2dc5d8fa325057c2c61f31707b4ed5ce6dc888e38629b177496643a1","first_seen":"2025-06-03T23:22:11.175795Z","last_seen":"2026-04-26T08:48:08.160601Z","times_seen":3627,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":165,"dns":0,"connect":30,"send":0,"wait":33,"receive":1,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batstream.vip/img/competition/wta.png","fqdn":"batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/competition/wta.png HTTP/1.1\r\nHost: batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: text/html\r\nlocation: https://www.batstream.vip/img/competition/wta.png\r\nserver: cloudflare\r\nage: 556\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v79gK2lBAEdau2LevTYwnumbAogO9Qwce4Rhl%2BiW9SmQ6OS5m%2Fe%2FfmGT5CizGd23lJcjggUI%2BTc3Vp8hvd0FA175P7jKoOn%2Fk6iF\"}]}\r\ncf-ray: 98d0debc3b0256a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.batstream.vip/img/competition/nba.png","fqdn":"www.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/competition/nba.png HTTP/1.1\r\nHost: www.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://live.batstream.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 1374\r\nlast-modified: Wed, 12 Dec 2018 18:51:50 GMT\r\netag: \"5c1158c6-55e\"\r\nexpires: Sun, 26 Oct 2025 11:05:40 GMT\r\ncache-control: public, max-age=2592000\r\npragma: public\r\naccept-ranges: bytes\r\nage: 1327280\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2BbK8QGFNfzJZUkrRfL9YDxjW1peNWZS3dHXWjyzTq6vAp4cYJkw1uq59Q%2F%2FUFGDkCsQodgP8DVzzlOriXOzwREWBlY%2FXMhHZ2DFuhkvzQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98d0debce86f568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1374,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit colormap, non-interlaced","md5":"25762c300f29ba794c5af6891bc7b685","sha1":"3e5c198196cd0f6431d6bb3b1818c9ca6a56cd62","sha256":"0ec2a31fffc3ad2df6ec7270ed68cc96b3b92516d1977569bcf99bb231be855c","sha512":"dd9bf764a97207a823eb4e47a4dd1d25bf274088f8289b2aae9d5f4ee37d0fe88c883a9068b2f352dbc60228b34fa830ba47eed8a833ea6897b98df0ee3c6260","ssdeep":"","tlshash":"60210870e27a0ab9811041323d4eba056c968e6c6ae1cfd06884709f6339230dcd23ae","first_seen":"2023-05-10T10:46:04Z","last_seen":"2026-03-08T17:36:12.599599Z","times_seen":78,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"104.18.41.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"my.rtmark.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 28 Aug 2025 13:14:02 GMT","end":"Wed, 26 Nov 2025 14:13:48 GMT"},"fingerprint":{"sha1":"7A:B2:21:7F:72:E3:39:3E:95:5D:FB:ED:BB:1C:7E:88:C4:7A:B1:B3","sha256":"FB:1D:6D:AF:DA:57:8D:9A:8B:B2:CC:FF:A2:55:C8:F3:71:3D:49:77:06:FC:4D:6F:16:91:61:6F:89:1C:A3:CB"}}},"request":{"raw":"GET /gid.js HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://live.batstream.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://live.batstream.vip\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=08025f57796342a3ef6b7df1337dcf79; expires=Sun, 11 Oct 2026 19:47:34 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 98d0debf087956ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"00e2c36780667c7ae74b0d56ed96bc5f","sha1":"a89e2b178a385bb57ca203499e9f98ef8f8446a4","sha256":"e35c242b28bd77c03fba1cfeb8f1c83dd48499aeb4310b2a72aa0bf537f7165d","sha512":"ca0e8dd8b05557c83aaaf262ac00a45a6531cd563eec761c0a500cdeff8dc21ea5411272c505f7b92c4819dfc032a50fef88b27ad1ff769fb4c6211dc086f626","ssdeep":"","tlshash":"8ca00251142d158840e1292b7dc6d78961109046fd0a621689e999512d9669c5bc725d","first_seen":"2025-10-11T19:47:58.316265Z","last_seen":"2025-10-11T19:47:58.316265Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":166,"dns":1,"connect":1,"send":0,"wait":41,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/css/jquery.scrolling-tabs.css","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:33.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /css/jquery.scrolling-tabs.css HTTP/1.1\r\nHost: live.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 19:47:33 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jan 2019 22:44:24 GMT\r\netag: W/\"5c4f85c8-5a7\"\r\nexpires: Fri, 07 Nov 2025 16:56:18 GMT\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\npragma: public\r\ncontent-encoding: gzip\r\nage: 269441\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2BjXzXPJumTvB%2Fp04WPJAZf%2F2OtiIqO%2Bl3hVBaiHP0p65NAhMjB3%2FvcG5ZOSdX%2FwNfPR0t7NwygJ%2FuACBz%2FBP5hUEwQ%2F6EE4Zc800smXU9I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d0deb788f056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1447,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"61902173db5d43c0d28e97492cad1a29","sha1":"021d8da3eb4cdeb3ea3d958b1845fd8164ab4522","sha256":"c7b7b7dd29913e1efa668006f4a14801dd49ce4581a7628840c8b92d5804440f","sha512":"4049e1859cb80c9104b255bd6d564d053346c2a55e2dfddab1771da48221e54b8d558fd69b1059e8cd85dbbcb6df1e16fffc9766aabf60d5d77828b451ab5e00","ssdeep":"","tlshash":"46319c56baf1106773e5f2bebc12f7879600c70bb0ee9cee3a420564c956326207add1","first_seen":"2023-04-08T10:05:55Z","last_seen":"2026-03-08T17:36:12.589132Z","times_seen":66,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batstream.vip/img/countries/Russia.png","fqdn":"batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/countries/Russia.png HTTP/1.1\r\nHost: batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: text/html\r\nlocation: https://www.batstream.vip/img/countries/Russia.png\r\nserver: cloudflare\r\nage: 556\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9A8tlrn8JmQszuPzpk%2BNKLkAB5iTtRJ0MfuMGDA3iiCvXCptjCMQBUe9BI9GGieAAStMaVBzLqFa1lP3Ip8D7mBpZ2bygy2cnwLV\"}]}\r\ncf-ray: 98d0debc3afb56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":403,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":68,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.batstream.vip/img/competition/pga.png","fqdn":"www.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/competition/pga.png HTTP/1.1\r\nHost: www.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://live.batstream.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 1340\r\nlast-modified: Sat, 09 Feb 2019 21:44:32 GMT\r\netag: \"5c5f49c0-53c\"\r\nexpires: Sat, 08 Nov 2025 18:31:18 GMT\r\ncache-control: public, max-age=2592000\r\npragma: public\r\naccept-ranges: bytes\r\nage: 177342\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a1YJfi%2F89qKThwymF5oNxGZlDbPWXcHVKetcB0uFfDcVtwFt1PLNiGV4z44T8ztUndcSyK8x3KVyc7C67RU8MOWalBXOH%2FbetawqsjWQVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98d0debd0879568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1340,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 27 x 25","md5":"1235d821813d950a94eb4a1f65421f7c","sha1":"2dedf0a09e2f47485b7448578ddd3534cd36ce05","sha256":"360b90423b6381b08116e749a0236ca3cd13ad4f069d3776fd1e1d54b5390c25","sha512":"08cbf9ceef2fc427305c4d65d5035a549632246745b4c504f9684bd9b5c5415b02bbac19bc00cb60312b11d0a883dee7078b8aabdecaa642fa9ff878e5d867c7","ssdeep":"","tlshash":"4b212b9e09129daccf62df7c893acc039c8125894e43024e202dcf31d0946bcbafd6ad","first_seen":"2023-05-11T18:53:33Z","last_seen":"2026-04-04T20:32:33.027457Z","times_seen":80,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T19:47:33.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: live.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 19:47:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncontent-security-policy: frame-ancestors *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QtcWc0tnIyuf1LY7J%2F%2FVT6sovCJOEdiFhyb8BbVlE52pMgcP3LXBSpeq6Bex0goaDDYkP6OihVwG6eZYrPE5Be86c5R86stBG8K%2B0hy513%2BqPQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98d0deb4fb7235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:3.3.7","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":42843,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (415)","md5":"902b22c064ab147cbf37786d036507cc","sha1":"a62fa9b7f9e2d82e311db7a50b73f62ac1842a5b","sha256":"76f97a97d4e32d22b866521e22db82592406e876dec55cf4f44ac98773a283e5","sha512":"3862c78813d22811eb216081afb99361a595f8c63655534c9f3148d985392f30c89acf62556a90487729c87c0fba11825ec0f8582290a8a12e81e4b06726dd27","ssdeep":"384:lsE7+OPk+l2M8ID2mfwrhWlepcZGDphO/ENF2GMpTmtlI9rgEGy7GHYO22h9wl/j:v73k+oM97fwrksMTEv2GoTmCoij","tlshash":"1413d602bb8d640a321342a8253a77f8213e4537e9158dbcf87f77b877c09da8277995","first_seen":"2025-10-11T19:47:58.297094Z","last_seen":"2025-10-11T19:47:58.297094Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":63,"dns":1,"connect":1,"send":0,"wait":98,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:33.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 03:23:24 GMT","end":"Mon, 08 Dec 2025 04:23:14 GMT"},"fingerprint":{"sha1":"2D:94:96:D6:08:54:E8:A2:4A:A9:D7:90:E4:75:91:6B:AC:CB:AA:24","sha256":"24:50:0C:86:73:A4:E6:6C:AD:20:57:80:86:4E:19:B1:E9:76:7F:2A:BE:CC:E9:75:B2:07:67:62:FA:9B:E7:8D"}}},"request":{"raw":"GET /bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://live.batstream.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 19:47:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 98d0deb8180cb505-OSL\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"ec3bb52a00e176a7181d454dffaea219\"\r\nlast-modified: Mon, 25 Jan 2021 22:03:59 GMT\r\ncdn-cachedat: 08/01/2025 15:36:41\r\ncdn-proxyver: 1.33\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1077\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 1893d83b0a3655e6d1d0fc326d02a8a5\r\ncdn-cache: HIT\r\nage: 179027\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121200,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65371)","md5":"ec3bb52a00e176a7181d454dffaea219","sha1":"6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68","sha256":"f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c","sha512":"e8c5daf01eae68ed7c1e277a6e544c7ad108a0fa877fb531d6d9f2210769b7da88e4e002c7b0be3b72154ebf7cbf01a795c8342ce2dad368bd6351e956195f8b","ssdeep":"768:Vy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:nw/a1fIuiHlq5mN8lDbNmPbh","tlshash":"2cc3c7a0f21031ea7333c55a75d0ed872219a153e56a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-04-26T09:01:00.233208Z","times_seen":59745,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":85,"dns":4,"connect":1,"send":0,"wait":18,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/js/jquery.min.js","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:33.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /js/jquery.min.js HTTP/1.1\r\nHost: live.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 19:47:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jan 2019 22:44:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 08 Nov 2025 18:03:12 GMT\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\npragma: public\r\nage: 179027\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1GnTqyz3YkIDMeoBGpEiZ62aSXHzVrxB%2B9futvJm6D0LHujOFiULQD5HuC0C%2BSTjItBIvux%2FLaMNJVeDrctpcIgApr7s9QSL9b4EsRRbuAQ%3D\"}]}\r\netag: W/\"5c4f85c8-17b8a\"\r\ncontent-encoding: br\r\ncf-ray: 98d0deb788e456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97162,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32077)","md5":"0fca26b5a37a66d68d0f4406976be4b5","sha1":"ee000eb654b3bd37185665d3901e93b34ce1aa52","sha256":"8c2812ded6436715279f8fd8db58de307aa39ab0296fe3cf0e879067c51e9b18","sha512":"cf010995991a8f8b50cfb4b466d3b457b0a6addc4f2fd96c48c33d40ac251de400894828ccd99662b13fc9ca25c676ef0aee05faa4910530ff9996d03c411645","ssdeep":"1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp94:t4J+R3jL5TCOauTwD6FdnCVQNea98HrF","tlshash":"7a93d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:06:51Z","last_seen":"2026-04-26T06:25:50.578486Z","times_seen":6553,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/js/jquery.scrolling-tabs.js","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:33.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /js/jquery.scrolling-tabs.js HTTP/1.1\r\nHost: live.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 19:47:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jan 2019 22:44:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 22 Oct 2025 16:31:01 GMT\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\npragma: public\r\nage: 1653358\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ftJboYZh6CDk1sxW%2BCyaxw0Us4cNrR3NZqfPKF7%2FgRLRT2swqm1CpsvGknvx%2BLVlKDUmAyZtHyyLnTAX1kGa2G2HoRjTQQAVt2t%2BSbiUCqk%3D\"}]}\r\netag: W/\"5c4f85c8-ec08\"\r\ncontent-encoding: br\r\ncf-ray: 98d0deb788f256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60424,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"094ecce4fd250e6c15486fce95bc9305","sha1":"5c98aa6f9a9e9da4296e10f896487d032741bb50","sha256":"1b7671b7c1b3cf6ae80a6fe4576cf786a2cce5e57ecdd4f1d26135e90b7e22a9","sha512":"b682c261864d7f21b51d558d4f1d865b38d0c76a31f2c9e273218b4ca3fd2db18ba449ce33e04300981362447162ed27917d2228cc895758b0a53d1b7537df48","ssdeep":"1536:6k9LB91wG+wt1vWwGKzdDxbgJLYSHhad0EDq8nnhGfuG1:6eBpPRGvF","tlshash":"8943b60d37f239718167b07eca0f61c9ab1281437a09ec50384e76589f8dbb551f9eea","first_seen":"2023-03-07T13:11:01Z","last_seen":"2026-03-08T17:36:12.61463Z","times_seen":105,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iclickcdn.com/tag.min.js","fqdn":"iclickcdn.com","domain":"iclickcdn.com","tld":"com"},"ip":{"addr":"104.26.12.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iclickcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 29 Aug 2025 11:37:09 GMT","end":"Thu, 27 Nov 2025 12:36:48 GMT"},"fingerprint":{"sha1":"60:2F:47:1C:D2:40:95:F2:8C:1B:35:63:DF:E9:81:33:C8:69:82:BD","sha256":"93:8A:1A:0B:08:F4:41:4E:97:BE:29:48:62:80:EE:B7:E2:FB:57:DB:AF:99:C6:DF:D4:BF:DA:A7:0F:8C:06:3B"}}},"request":{"raw":"GET /tag.min.js HTTP/1.1\r\nHost: iclickcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-trace-id: fc8eba66dd9a9938241f3138e185e48a\r\ncache-control: max-age=86400\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://kartinki.web.app\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\nexpires: Sun, 12 Oct 2025 13:18:30 GMT\r\ntiming-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 23343\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 11 Oct 2025 13:18:30 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lkTc%2BomRnbyEUFsYVx8keHzt5Exqpl1VXo1Ovu9qEROb04uuKJQUe1MQYLLo%2Fb4EhxT3BDAsiDcd229is0dsgw33Aitusb86csI%3D\"}]}\r\ncf-ray: 98d0debadaceb500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109924,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4602ba01583c2514a9abd08435c3035c","sha1":"e766d257a08fad64c002c4732f30f25f700f8be1","sha256":"4e16eb978a977773df526423e558ff04ea7d5e435a171ee8beb856800be027a4","sha512":"b3ce476794e8747ca8034d5935f40713094a6e9dcb237fe3c1b54b209b3a3980bbf7a5ac1736412a217d1952c78bf4162fc838965541e63f891d413beb17cfde","ssdeep":"1536:I8zmHlk4JQ9aO4kD97aZ06GUqo54Az0SBYQ4+DIVV3BWw:jzsJkaO44K06GUb0S6z3xWw","tlshash":"a2b33bc6226a241612bf8034445bed0eb5aecd8104cdcdb8e1e5b8662d78b16d3f7fd9","first_seen":"2025-10-08T11:40:34.402808Z","last_seen":"2025-10-13T11:53:28.853954Z","times_seen":101,"resource_available":true,"data":null}},"time_used":429,"timings":{"blocked":205,"dns":9,"connect":1,"send":0,"wait":9,"receive":0,"ssl":202},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"iclickcdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"iclickcdn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"iclickcdn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/list.php?id=21\u0026sport=\u0026sp=\u0026r=\u0026l=\u0026l2=","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /list.php?id=21\u0026sport=\u0026sp=\u0026r=\u0026l=\u0026l2= HTTP/1.1\r\nHost: live.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nCookie: coffset=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBkZOEY1ddpnQz7KOx0%2FvC%2FzyrmNSQOkRGSC3YZKeIpi6ppERGa86CO8HvEw6L1BQsuJ7RtHWK%2FO4MGSfIklFTtupDgrVZ5nvSHzHVgtBaU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 98d0deb98b5256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":604926,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (64670)","md5":"660b445aa80608e035470a877063c60c","sha1":"6f8d16755b4a438faf21ca92d0f0c3c2931d3f11","sha256":"d7548a207cb62ea8ec50a1050ec810eae7affe635d65e987c282d5ca3aa3a2c2","sha512":"435f5b011d47cb480ee9641ff589b5e53209dfd777902c18c1ac1f4f796c5b534755e153a15a0544bbe1b0d79c0377663d138c8410b01ce4e8b6d8ef1e55787a","ssdeep":"3072:j0j8kCmynFq2VPWCdhtr6FSnz/fdTVwudC:wYn42tDD6FKDfdxwudC","tlshash":"c3d4863680d5163b613786c0766927eef0a66286cd43dc3185e9fb7ce2db864722317b","first_seen":"2025-10-11T19:47:58.321581Z","last_seen":"2025-10-11T19:47:58.321581Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"live.batstream.vip/images/st_icons.png","fqdn":"live.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /images/st_icons.png HTTP/1.1\r\nHost: live.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nCookie: coffset=2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 635111\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jan 2019 22:44:24 GMT\r\netag: \"5c4f85c8-9b0e7\"\r\nexpires: Fri, 17 Oct 2025 09:01:09 GMT\r\ncache-control: public, max-age=2592000\r\naccess-control-allow-origin: *\r\npragma: public\r\naccept-ranges: bytes\r\nage: 2112352\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=deyRVdtPq4frzX%2BRXhMeY%2Fs9%2BJmIQpjakzfSZDVL7KsMep9IXqJuqBPsTQF3BR%2FhvOakbJT9vEYHAcm6yrN1HhatG%2FsWpXWR5cdHIUYqiSE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98d0deb9ebad56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":635111,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 512, 8-bit/color RGBA, interlaced","md5":"42551fd6b12e69a5467212de8fb83e2b","sha1":"c8cf9c3a890a6567f04ef3a18b90c9e570978c2b","sha256":"0ddfa6f903fae79327c8402de2ac4bceadb0c14bff340610d66a76d9e6122595","sha512":"cbf63449e85b4401a906dc9e3bc7f2c9f266bc02bb2d81e803316b49bb8a557f3651285d5ecdade45737e6473de00e3054156564d016a74105057ba98d0fb5a9","ssdeep":"12288:d3yQulDQ9QW2ykBASsZSKIf9jOtIXGZ8YeNplXFkmtsKSksoJ7l0v15Nl3dfiMOs:d3yLliQW2ykrH1jru85XFkmQJor0vr3H","tlshash":"ead4235a9c9ab904b92a7a02f7850c78f6e3f0b841f5dca9d522c454c1dbbf5c118fa3","first_seen":"2023-05-10T10:46:04Z","last_seen":"2026-03-08T17:36:12.640168Z","times_seen":113,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.batstream.vip/img/countries/Germany.png","fqdn":"www.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/countries/Germany.png HTTP/1.1\r\nHost: www.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://live.batstream.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 483\r\nlast-modified: Wed, 12 Dec 2018 18:51:50 GMT\r\netag: \"5c1158c6-1e3\"\r\nexpires: Sat, 08 Nov 2025 18:31:18 GMT\r\ncache-control: public, max-age=2592000\r\npragma: public\r\naccept-ranges: bytes\r\nage: 177342\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0wRn%2FLglyVAX2njyxnuMwMPeeXVg6qiyhyEaSAzRWO4KGk9EWJdtCPux7qZCaiGfMB5Zw%2Fhsgk2xNZrsaDTaqz3EqN%2F0lVC91JDrLj%2FtZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98d0debd087d568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":483,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"9f8cc07c258bcd2de0c7900861e20ffc","sha1":"fed97219e44693d4f3918fc4037b325732225d81","sha256":"07cd5a4cad20604f77dced9c7d8a92ca9ae3321718e5a1935296e4d75f921a19","sha512":"2eb0fd75755ad76102aca1a424c3d345233a674f66a6f81a0113631e8b99da58a0777351837f29188c7d8a243cfacd87055a9625ac5c42ba1f1bf9e387b351c3","ssdeep":"","tlshash":"1bf00ee612809dde8c2e1d69220284bc90532a968b438c10803ed8a86fc04dab04c604","first_seen":"2023-04-30T18:47:46Z","last_seen":"2026-04-26T08:47:16.902214Z","times_seen":258,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.batstream.vip/img/countries/Worldwide.png","fqdn":"www.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/countries/Worldwide.png HTTP/1.1\r\nHost: www.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://live.batstream.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 7316\r\nlast-modified: Wed, 12 Dec 2018 18:51:50 GMT\r\netag: \"5c1158c6-1c94\"\r\nexpires: Tue, 21 Oct 2025 10:37:00 GMT\r\ncache-control: public, max-age=2592000\r\npragma: public\r\naccept-ranges: bytes\r\nage: 1761001\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EibbWmBE5ACiZ5hHvB7I7BrlVkDEtMcpqB4ZixVsW4bY2B5jKwf2f1SoPBZamtYjYBfPT%2BnaZtv1dVglzFKA%2BRRmzHf3vE5%2Brb8LOSEuvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98d0debd087a568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7316,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"47d7e7a2a6f0f65bb07f4b41637410bf","sha1":"35036e851b4ea63e39c5a3b8d47572f51baef653","sha256":"db3de9616bcc66d2e639b6923283ca03c0aefc53f48dd53dddb293e276036a1d","sha512":"050ecac91fd7518e17186bce3fab5d746d113f2fec086b1e125d4bd987803e62993463922d1a9206108fa76cafa411351a12809afe96dd599e5432863481551e","ssdeep":"192:WtQdZifh3FT8N627JISjYoAVBXkKZiL6pbUbY:WWifNFTS7uSjYoAzXkupT","tlshash":"bde1af61cd52bbd61786a07c2fc46361a03616f0020589abc6ee2778463cf51862efd7","first_seen":"2023-05-10T10:46:04Z","last_seen":"2026-03-08T17:36:12.606022Z","times_seen":110,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.batstream.vip/img/countries/Italy.png","fqdn":"www.batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/countries/Italy.png HTTP/1.1\r\nHost: www.batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://live.batstream.vip/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 536\r\nlast-modified: Wed, 12 Dec 2018 18:51:50 GMT\r\netag: \"5c1158c6-218\"\r\nexpires: Wed, 05 Nov 2025 16:33:55 GMT\r\ncache-control: public, max-age=2592000\r\npragma: public\r\naccept-ranges: bytes\r\nage: 443585\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZPCCWeuNHlraioGLVcbBgWOVmKaKwTusO%2FNnWoRP2Kk2ixcd4A9rbtx%2FXkOM%2BFpYiisCMBQ9MI4ltqnank3yHk9uDVJbl%2BAKv77gPDQOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 98d0debd087c568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":536,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"cb2a2c0133218ed487fedb13cb557cef","sha1":"ea4b442f1bf67762919cea8c2d912e03f8f1ef56","sha256":"7a09ba2cf9603da25ee59dff5b1e4ddb0fc20453c73375793ee8449f2186597c","sha512":"c826ff36ccdcc73f4fad356f8fe2f71dcba22936bd49161212d42d49559c2aceef5be71ffe9f62f6a6304fc09e9025fc482e8a57c8666b253c611fb4af83e35b","ssdeep":"","tlshash":"58f075e01610447f4c4d11a91f8bce34d19246b10781cf8e1ca4d48eddef54df8d0e40","first_seen":"2023-05-10T10:46:04Z","last_seen":"2026-04-26T05:23:22.394787Z","times_seen":226,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"oyo4d.com/5/3505548/?oo=1\u0026js_build=iclick-v1.1586.2\u0026userId=08025f57796342a3ef6b7df1337dcf79\u0026dmn=iclickcdn.com\u0026tt=2\u0026ix=0","fqdn":"oyo4d.com","domain":"oyo4d.com","tld":"com"},"ip":{"addr":"139.45.197.118","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:35.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oyo4d.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 Aug 2025 05:09:42 GMT","end":"Thu, 30 Oct 2025 05:09:41 GMT"},"fingerprint":{"sha1":"CA:B0:55:2C:92:65:6D:F3:1E:6D:BA:45:88:FD:65:2F:07:36:13:27","sha256":"DA:EB:6B:D8:17:3D:D3:8F:2D:0D:B8:71:CE:2B:40:9E:83:B9:6F:46:25:7F:24:C5:24:83:76:CC:BB:09:4A:7F"}}},"request":{"raw":"POST /5/3505548/?oo=1\u0026js_build=iclick-v1.1586.2\u0026userId=08025f57796342a3ef6b7df1337dcf79\u0026dmn=iclickcdn.com\u0026tt=2\u0026ix=0 HTTP/1.1\r\nHost: oyo4d.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2579\r\nOrigin: https://live.batstream.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 19:47:35 GMT\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: https://live.batstream.vip\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon\r\naccess-control-max-age: 86400\r\ntiming-allow-origin: *\r\npragma: no-cache, no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":132,"dns":43,"connect":26,"send":0,"wait":29,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"live.batstream.cc/","fqdn":"live.batstream.cc","domain":"batstream.cc","tld":"cc"},"ip":{"addr":"162.255.119.26","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T19:47:32.885Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: live.batstream.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Sat, 11 Oct 2025 19:47:33 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 49\r\nConnection: keep-alive\r\nLocation: https://live.batstream.vip\r\nX-Served-By: Namecheap URL Forward\r\nServer: namecheap-nginx\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42843,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":153,"dns":1,"connect":160,"send":0,"wait":160,"receive":2,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-11T19:47:42Z","timestamp":1760212062,"ip_dst":{"addr":"172.18.0.6","port":36154,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"162.255.119.26","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Namecheap URL Forward","source":"{\"timestamp\":\"2025-10-11T19:47:42.553457+0000\",\"flow_id\":2202273276239984,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"162.255.119.26\",\"src_port\":80,\"dest_ip\":\"172.18.0.6\",\"dest_port\":36154,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2035208,\"rev\":2,\"signature\":\"ET INFO Namecheap URL Forward\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_02_16\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_02_16\"]}},\"http\":{\"hostname\":\"live.batstream.cc\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://live.batstream.vip\",\"length\":49},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":49,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":572,\"bytes_toclient\":519,\"start\":\"2025-10-11T19:47:32.073840+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-10-11T19:47:43Z","timestamp":1760212063,"ip_dst":{"addr":"172.18.0.6","port":36164,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"162.255.119.26","port":80,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Namecheap URL Forward","source":"{\"timestamp\":\"2025-10-11T19:47:43.361613+0000\",\"flow_id\":1196370460697766,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"162.255.119.26\",\"src_port\":80,\"dest_ip\":\"172.18.0.6\",\"dest_port\":36164,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2035208,\"rev\":2,\"signature\":\"ET INFO Namecheap URL Forward\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2022_02_16\"],\"deployment\":[\"Perimeter\"],\"reviewed_at\":[\"2024_10_14\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_02_16\"]}},\"http\":{\"hostname\":\"live.batstream.cc\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://live.batstream.vip\",\"length\":49},\"files\":[{\"filename\":\"/\",\"sid\":[],\"gaps\":false,\"state\":\"CLOSED\",\"stored\":false,\"size\":49,\"tx_id\":0}],\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":692,\"bytes_toclient\":519,\"start\":\"2025-10-11T19:47:32.877734+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 03:23:24 GMT","end":"Mon, 08 Dec 2025 04:23:14 GMT"},"fingerprint":{"sha1":"2D:94:96:D6:08:54:E8:A2:4A:A9:D7:90:E4:75:91:6B:AC:CB:AA:24","sha256":"24:50:0C:86:73:A4:E6:6C:AD:20:57:80:86:4E:19:B1:E9:76:7F:2A:BE:CC:E9:75:B2:07:67:62:FA:9B:E7:8D"}}},"request":{"raw":"GET /bootstrap/3.3.7/fonts/glyphicons-halflings-regular.woff2 HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://live.batstream.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://maxcdn.bootstrapcdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: font/woff2\r\ncf-ray: 98d0deb99952b505-OSL\r\ncdn-pullzone: 252412\r\ncdn-uid: b1941f61-b576-4f40-80de-5677acb38f74\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\netag: W/\"448c34a56d699c29117adc64c43affeb\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:00 GMT\r\ncdn-cachedat: 06/09/2025 22:09:50\r\ncdn-proxyver: 1.28\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 864\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: a2e86c991d2eebbf62a6cc6958938fdf\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\nage: 2517841\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18028,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18028, version 1.589","md5":"448c34a56d699c29117adc64c43affeb","sha1":"ca35b697d99cae4d1b60f2d60fcd37771987eb07","sha256":"fe185d11a49676890d47bb783312a0cda5a44c4039214094e7957b4c040ef11c","sha512":"3811804f56ec3c82f0bef35de0a9250e546a1e357fb59e2784f610d638fec355a27b480e3f796243c0e3d3743be3eadda8f9064c2b5b49577e16b7e40efcdb83","ssdeep":"384:Y22oezK7jlf4flnEPn9+1z2DIH6r3lEsNgV:Y22oeKjlCnm9+1y8gA","tlshash":"d082d0f4ea92999085b01c37d19acb48dc87b9cef5a4d01611e4e13eb5ff8ad684c6c8","first_seen":"2023-04-05T16:42:51Z","last_seen":"2026-04-26T09:09:17.451257Z","times_seen":39942,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batstream.vip/img/countries/United-states.png","fqdn":"batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/countries/United-states.png HTTP/1.1\r\nHost: batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: text/html\r\nlocation: https://www.batstream.vip/img/countries/United-states.png\r\nserver: cloudflare\r\nage: 556\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=spdAmgy5qThqPYIDeWPKFUE3nJSNc4gspW41S2pE9oEZ%2F%2B3rfyGrzcF51UKBVb19Plv2iH3D3er%2FuJVtVa5TPQNixr9KHjciAOB3\"}]}\r\ncf-ray: 98d0debc3afd56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"batstream.vip/img/countries/Colombia.png","fqdn":"batstream.vip","domain":"batstream.vip","tld":"vip"},"ip":{"addr":"172.67.155.182","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://live.batstream.vip/","date":"2025-10-11T19:47:34.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"batstream.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 Aug 2025 15:51:00 GMT","end":"Mon, 24 Nov 2025 16:46:39 GMT"},"fingerprint":{"sha1":"CB:6B:7D:D7:AD:B9:3E:6B:92:E3:6E:45:62:A2:92:6E:B5:7D:C1:4C","sha256":"BA:0C:8B:9D:65:12:0D:9E:21:C2:8E:30:B4:86:42:6A:7F:2A:1A:5A:B6:E1:4F:D3:51:29:AF:7B:EA:12:1F:22"}}},"request":{"raw":"GET /img/countries/Colombia.png HTTP/1.1\r\nHost: batstream.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://live.batstream.vip/\r\nCookie: _ga_V4D3082FX6=GS2.1.s1760212054$o1$g0$t1760212054$j60$l0$h0; _ga=GA1.1.1910927057.1760212054\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Sat, 11 Oct 2025 19:47:34 GMT\r\ncontent-type: text/html\r\nlocation: https://www.batstream.vip/img/countries/Colombia.png\r\nserver: cloudflare\r\nage: 556\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RbwTgPGUrNsiui189w8UiYnamRViFKq167Dw534W9jo0JZU%2FiBY1rLoGvxOU35crj4JdLJNKekJpS2AUsg8jj%2Baa1ZlrjNJbFVWL\"}]}\r\ncf-ray: 98d0debc3afe56a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":452,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-26T10:03:08.222447Z","times_seen":14220713,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}