{"report_id":"275f83c1-4815-4e10-9bd9-aa649cf32d0a","version":6,"status":"done","tags":[],"date":"2025-12-25T07:11:11Z","url":{"schema":"http","addr":"haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"172.67.150.124","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"title":"HAYWIN - Cổng Game Uy Tín, Đáng Tin Cậy Số 1","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"172.67.150.124","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-29T07:11:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-25T07:10:48Z","timestamp":1766646648,"ip_dst":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.21","port":53424,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed FingerprintJS Domain (openfpcdn .io in TLS SNI)","source":"{\"timestamp\":\"2025-12-25T07:10:48.456861+0000\",\"flow_id\":811185699613016,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":53424,\"dest_ip\":\"54.240.174.76\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2049251,\"rev\":1,\"signature\":\"ET INFO Observed FingerprintJS Domain (openfpcdn .io in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_11_17\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_11_17\"]}},\"tls\":{\"sni\":\"openfpcdn.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":914,\"bytes_toclient\":1634,\"start\":\"2025-12-25T07:10:48.452952+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"images.dmca.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2000-05-18","domain_rank":84234,"first_seen":"2012-06-18T23:24:47Z","last_seen":"2025-12-23T20:23:16.138133Z","alert_count":0,"request_count":2,"received_data":2334,"sent_data":862,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"apirvp6.traskiprik.info","ip":{"addr":"104.21.36.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-03-30","domain_rank":4541870,"first_seen":"2023-04-09T06:01:46Z","last_seen":"2025-12-21T09:05:46.154644Z","alert_count":0,"request_count":1,"received_data":835,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"openfpcdn.io","ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-11-10","domain_rank":9255,"first_seen":"2021-11-11T13:02:44Z","last_seen":"2025-12-22T12:06:47.052906Z","alert_count":0,"request_count":1,"received_data":39555,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-12-21T22:20:20.869237Z","alert_count":0,"request_count":2,"received_data":293017,"sent_data":909,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-21T22:17:33.83847Z","alert_count":0,"request_count":2,"received_data":749845,"sent_data":883,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"apirvp4.traskiprik.info","ip":{"addr":"104.21.36.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-03-30","domain_rank":4541303,"first_seen":"2023-04-09T06:01:46Z","last_seen":"2025-11-14T07:24:17.807761Z","alert_count":0,"request_count":1,"received_data":845,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"haywinclub.me","ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-23","domain_rank":0,"first_seen":"2025-11-09T05:47:32.298692Z","last_seen":"2025-11-09T05:47:32.298692Z","alert_count":0,"request_count":51,"received_data":4847068,"sent_data":31211,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery UI:1.12.1","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"p5.js","description":"p5.js is a JavaScript library for creative coding, with a focus on making coding accessible and inclusive for artists, designers, educators, beginners, and anyone else.","website":"https://p5js.org","common_platform_enumeration":"","icon":"p5.js.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2693b2769ddc82c9e94d0439b46f23ee","sha1":"a0f5eba3f986c570283204c87fc45d851875d218","sha256":"77b1bbad24359183014c60c491e08f28060976c6ec55bba2a7c8a1b26e7d7102","sha512":"a7890b348d3b0e5210cb2e37fb6b6657e7b04ea54567fe8573393623702500c6746d6f5c6613d25ead2f0e8ac477280d504d932eb0053058ad5b3e141209ec4d","ssdeep":"","tlshash":"07f0a34b3ddb14702d57a13e573d891420933127b484d0337dfcc8251f0874a4964aec","size":506,"data":"","first_seen":"2025-09-20T07:51:22.647348Z","last_seen":"2025-12-25T07:11:19.489534Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"89558b523e1e1d6c940b7e84588f36b2","sha1":"6f6235cc3e71432a9d28587bcfb21ff3c2f97678","sha256":"34ddb2661e364f935b5654180bba0dc3e9c8b0816c31e8adf26a3e1aca108000","sha512":"f4e87e3b187f83153eafeec39c9c774515633c4857bc83187e2f59cdb59246d585d06a01227fa94473effbab36501ade28a201df24f485df382379130da32bdf","ssdeep":"","tlshash":"89e0f10cf035385432ffb171893faab46d95680f340681403ac84ee5ef012d3d82154e","size":401,"data":"","first_seen":"2025-09-20T07:51:22.648407Z","last_seen":"2025-12-25T07:11:19.490479Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/assets/vendor/libs/form-validation/auto-focus.js","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7fadf739f9da4a229ab6dfbf9694dea","sha1":"2e7b7e900623e9a261e03673074737bfd1bc627f","sha256":"d97bf5e30035a7d18da20b1d8ec13acb63a5f87f5f4b5493561b2f46a42c850f","sha512":"6b8758fb2587c3cf5d0d66edff308a37bf4764d9d6ec0ce6c4579a0eeb09ea9f3389be5bf153137595b9f23effae13e4016d62e9669fdd4d8e913f1361019141","ssdeep":"384:Shg3vxp14Jk0vNxhMQxJ6egq6cHs1ntbdQ16oNt0K5SGksGcQhidXWWGQI158jrE:p3vJ4Jk0vNdVHsVtbiYoj0K5SNhidLxq","tlshash":"f9a273d97156b4224f57a0fa645b904b73be2418ec0a4068f5a4c0e32cb9fd9a277f3c","size":22554,"data":"","first_seen":"2024-09-19T20:09:47.221449Z","last_seen":"2026-04-02T13:54:31.377373Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f78b4fbfc39049de80a9ee586f71307","sha1":"a0871cea382a87d6456683a5b814184efdea7c38","sha256":"59f9442b99fcf648629a411dfe86ce92cd39e2c25deef8b51f93741c45a2a649","sha512":"0e6005129eeb7d53ab15cc96755e65e4f8477364274a4f2e5114dde171e09abec1bf09c7b762e7201a33c655ea36c55a466ba1b5a9fd4b3a3b102b8e4c5c6e57","ssdeep":"","tlshash":"bb01ab4b6d7bb82656f10e78e73bd62a269543335189b5c0ee89c0503a63fc87c83a5c","size":814,"data":"","first_seen":"2025-10-08T08:38:19.7906Z","last_seen":"2025-12-25T07:11:19.491379Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"987d68d6fd801026526ea069ec8f83a4","sha1":"317105f83253e7fad0fca0536dafa9823fc96bd1","sha256":"5b6a208d5cc225e012184f3b8cad380760d158dc00b5f1a56f21fe7b00b4591a","sha512":"168b684079b5b1bd9df8038528453b72740a7e0d7fd4f7017ad98bdc02f9abf43818e31774a200116e3a03f9f8650270c0ee6732e3d318b43c890a5dcc1adb8b","ssdeep":"","tlshash":"7401ef4bad46f40a49f54f38e3bac729238716b70249b480afc8c0806a23f883c86d1c","size":818,"data":"","first_seen":"2025-11-11T22:41:10.450205Z","last_seen":"2025-12-25T07:11:19.492071Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"33af5a115a4ed455aa584466c6c65f00","sha1":"c3c28d5e99e3f82ffbe5b032bd727cc2e7b5ac96","sha256":"9452cf2f418b674987680c147386af8696f87b570a1b743dfde75c7e8e1323d3","sha512":"51791749445f881357a90815a30597701ef758de260ced4b5422db51570b7ed6840596c1bc6d8d0a2cbebfb55040f5658573e0576bc1f7f349fb9b3a7400a50c","ssdeep":"192:v2tlx/bHJKyy4xlmd/9ixm1m9Uf/+QR+AJqRvvTPliQ1lT019in:vczpPxo/kAmN3RXTWin","tlshash":"0b12622d72f2043a4077a1b62bdf26993a32100b7506dd493e5ddb412f90d798ea1bef","size":9525,"data":"","first_seen":"2025-09-20T07:51:22.650584Z","last_seen":"2025-12-25T07:11:19.492803Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/fingerprintjs/v4","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbedc7274a2f03b28cab86a88c50684f","sha1":"c69c09de367560625ade11e042cbc15defa8b283","sha256":"dceecee491e0029e101d4d1e77318c115fe2433ff681ba864e4afa091801b2f4","sha512":"42f6696c97e492e4c31009edfde9f4f2cddaba8d3ce984ad394e5e3d139746482f6c5346f313a183944982704894189a320ecc3c11e25e1d4acca6d7f35df4d3","ssdeep":"384:NxcDKdRZKgEaMRMBp5iKQID95wH3KqwzrWmKj5+pCqNFaiE8E0QIQfJWbkhGYKom:EaRBp5Kjnc9NwlJWbhSu9A8","tlshash":"930316d8b2c3b06e227368b5407f6006b23a7d54346d8842c523e5d57ca9e6e913bfbc","size":38855,"data":"","first_seen":"2025-04-11T02:03:59.120104Z","last_seen":"2026-04-03T04:37:09.518767Z","times_seen":1745,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/js/jquery.js","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de7242b656989c8858defbfcd85fd2cc","sha1":"551aa0b6b05283a486d4908514298eb82d261875","sha256":"18490a9583036d4e58ad7448e5f405c1adec66ee1cd8b7b2903d5ce81c58bca6","sha512":"bb87c5ad60318fade2d82dd3ea8e745194ba85c6eb48adb743c7b3ae3f7b789dbda5b8f7bb63bd8cf0880abfe523bdaaa4c23b5e789c97635b0639005cb9c33d","ssdeep":"6144:ghKsBEPySL59uuAHoh9DbtsmelRnc9rQF5QdD08LIH9AkIRcbLMYTu4xkaJgH/Um:xhb2lRnc9rQF6d0lH9AkIRcbLMYNxA/j","tlshash":"e264e7a676fb02390d36bbd9932f155ab53fec98b1108512a82ebc5c201c514c6e7f7b","size":328010,"data":"","first_seen":"2025-02-06T00:26:15.537117Z","last_seen":"2025-12-25T07:11:19.457411Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","size":253669,"data":"","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-04-03T16:21:00.453087Z","times_seen":16442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/assets/vendor/libs/form-validation/popular.js","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d649cbb08615224b26dfbe774bd1610f","sha1":"1083745e0a96109d13e00d12d9b6420da59fae11","sha256":"fd94e86fa042a66694b546a4469f824705b0a1a7fb0b5e02dd9b38985fa4ea45","sha512":"25b372994493ef942c619b098b26dd0d65ab27e33df2a199bca3fec633bb54aa66d2e4615e31799e157ceb1d53447be8ae645071c436f4397aa5cf9b0398ed5f","ssdeep":"1536:Kmqad4Jk0WNHjAF3nLXyAZOHexqei/w/VrtTbX0XHv7hShhwBlZRY0zccPCbW2Pg:KZzwzhgdq3UHCWcMTAC8","tlshash":"b783d68db16675310fab50ea205fd04f33bea525e80d94a8f964c1e21cb4ec66277f39","size":83086,"data":"","first_seen":"2025-09-20T07:51:22.637065Z","last_seen":"2025-12-25T07:11:19.450948Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a79829cf26bbe5158df2a7f27f52f0f4","sha1":"cf045252a2ee6d7e4567631baab2a74008c757d8","sha256":"4e3a124e38103891b9178390db41b3256225bf918c1409eff56b8e726bda3ad3","sha512":"a143d49d8d8f849dcebda0c48d95d96fdfea8ac95f0494976a6415db9902ad20896b7a177ead101d3a72ad0ca64e339e3ea8a2dd8eebc8be8cbed1a6d6fa2a27","ssdeep":"192:L50ADoyF3ttylkxNPInguCzhGUCapyW3BOdkMnwaCICn2s5Kr7/:L6sdtyvC85qBOFnDV","tlshash":"4c22c765f0f2656200bb31b96bef905636b1401b7049ce58fe6c4b852f90e8496b3fed","size":10520,"data":"","first_seen":"2025-09-20T07:51:22.651695Z","last_seen":"2025-12-25T07:11:19.493755Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://sneat-bootstrap-html-admin-template-free/./libs/jquery/jquery.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c01f09037ccbdd8c6216a69dab46b40d","sha1":"f594b9e73e9e2b7862758d8782d6855c900406b3","sha256":"dda37cd06ea679048c4959eb1345c481bbc8c7c1f3e903e49268663d8c061f83","sha512":"308863a79240a65f7092bd73ad669419a22fa9071c3582507d3ba33adc73204ffb596931af9e2e92ca89e1b362c6ddea5685b129b260f12dce4b0416313f20d9","ssdeep":"","tlshash":"bd11574d19496c0fa1b0b8e8eb1fc6f361c7f11074693c8ca4aa722429b4804e9eb361","size":951,"data":"","first_seen":"2025-02-06T00:26:15.593776Z","last_seen":"2026-02-07T20:47:46.048066Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"webpack","addr":"webpack://sneat-bootstrap-html-admin-template-free/./node_modules/jquery/dist/jquery.js?","fqdn":"webpack","domain":"webpack","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"059ec6f72dec7231acad59ebe53a20b0","sha1":"939ff18bb7dfe6ab4f41bca4c9c14bab277470cf","sha256":"79c953913555225d41690eff8b90e70e6ec11c0f49699eb973af835dabde9343","sha512":"48386ca62e5641c645eb126a95ece54cfda3cba1fd8d37779a648372f2c9eeafa8b9acd9312511865c8d83faa1c4972b8300fb9d5710905326de765b1adc1182","ssdeep":"6144:3wsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfq:QuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAc","tlshash":"8b54a3d8f78d112e423231aaed2e12cdbb7dd171561454aebd4d497c24a083c83baf7a","size":285615,"data":"","first_seen":"2025-02-06T00:26:15.605584Z","last_seen":"2026-02-07T20:47:46.065879Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/js/jquery.form.js","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08a24670beb2eae7ef79a6d5ac23874b","sha1":"eca8a1978457941622833130e92b9b274e2b3a36","sha256":"3a16fd80d67008f1c947cf93ebb20e2af2ed1a6317e194d35ed15046076c4211","sha512":"3a2e9c8c3bd0a0d139fffcd0a4bf4f21b005838236868b02f345e7ca8a3431060e86f60775fbe0a009bf011d7fbe25e88aea3fed4a492330ae69b8181ad33cf7","ssdeep":"768:Kh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV5uMwMGM+zA:eiwDM1YuW+WkeBEfcPZ079SjCOoliMIj","tlshash":"e413a24a79eb12a2192334b94bef90497739d0231108dda07d4c53d0afd4db4a6fafe8","size":43892,"data":"","first_seen":"2023-03-07T01:26:42Z","last_seen":"2026-04-03T13:20:52.539025Z","times_seen":1021,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HLQ807QTXG\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e49de7531d76b06f2c020b2b0b136e7","sha1":"dcafff74e0a75db8e08d853bcc10990c73608031","sha256":"2447b9844bc4c95b13b546f9475f00f315869c8e0fe8add72374f22fa304352c","sha512":"18492f0de13b17dc9bd7bf2eac989dab33dd33fc742cf660f6b355d2d9c9a3d65f28c3a46bedb63c6481fd16959413338843f0540087d20b5a4f3feebb5a6913","ssdeep":"6144:zT2Ie7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:zbC8bu7/1mbrnsy39WbMpb","tlshash":"0f941ace73c674269396e078503f118ba57b29e2b45cc896f189cce42d74a9a4237f7c","size":433667,"data":"","first_seen":"2025-12-25T07:11:19.483689Z","last_seen":"2025-12-25T07:11:19.483689Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","size":465,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-04-03T19:18:30.912138Z","times_seen":12380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WFMT2WMG","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6467bc6ed40c2b641f0349539b0ed01e","sha1":"ba2489216fbc883aba1eae7057ec0c2e5a7830e0","sha256":"795e8b596faa1910f1e3da144d368168df59f3d7a787ef5b2b0d3cc55dd463d8","sha512":"2c384f9107eb96a8029804c5e1fcad4104367da5339e164ce6f43aa9207391fb69498f304c5aa8521377d9632f78bcac2e3270e7d381f0b87a16dcf976bb838c","ssdeep":"6144:oIeJq2bulKYv9VHDmHYmyBFz0nsywWCxRnc:pSbu7llAns3WCxO","tlshash":"526418cdb3c6742683a3a474503f118ba17b7992e84cd895f186ccd42e74aaa4237f7d","size":314944,"data":"","first_seen":"2025-12-25T07:11:19.481851Z","last_seen":"2025-12-25T07:11:19.481851Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/js/bootstrap.js","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"864fcd5c0460858e4a60f3677632fa64","sha1":"4eb4f48883632288474f84be0caf04178182ba30","sha256":"fb7d0aaa3b4f799d12b367a86093eeb6985673242c8b1fce449bf4d3bf5284c6","sha512":"61fb71670ca8eb222f29a042a12d3ca99424a84ab10aa72ab606c8119a7f2687d7b1ce60a5d85df86467c73ef5fb82ef144a6bbc5f5f74f20ca88f6dd3029d1d","ssdeep":"1536:xSS1Nn3pNLCj00HFuEKQu1Di7tVSA8Y5C/LRddq:4EQkY5Cndq","tlshash":"6fa394997281b0724a9ba07a503f120ff33b6895508a8058b53ad9dd5f7cd89b273f7c","size":98952,"data":"","first_seen":"2025-09-20T07:51:22.619639Z","last_seen":"2025-12-25T07:11:19.460866Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/assets/vendor/libs/form-validation/bootstrap5.js","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ebfccc433ae8493ddc28ef6257d09ca","sha1":"f42d40ae2a37313c4b051e34ede38a899b577ae8","sha256":"c54929bdfc1db29d4d1b155fad36dc22de190a87aa5be24a9c41a74ab91874f5","sha512":"c73db2073c6fb678e43d34b1486325a86091e2c72a3c9da682d305cee4c0e9d7cfeb279a84ab0b2c4d8e1f90b6ef8b67046baa12e286623acb762e8bcd2b557e","ssdeep":"768:m3vx4Jk0vNdVHsVniC/jOOJNEZhidLlIO88J4C2IOvphbhhwnUaGo26tJ4V8dhxi:m3vx4Jk0vNdVHsVniC/jOOJNEZhidLlQ","tlshash":"d1e283997256a8324f5b50fe704ba04f73fa2119d8094468f5a8c0e36db9fd63267f38","size":32093,"data":"","first_seen":"2024-09-19T20:09:47.217706Z","last_seen":"2026-04-02T13:54:31.446999Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","size":465,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-04-03T19:18:30.912138Z","times_seen":12380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a98655b10108d7659b7d9ef7544dcd2","sha1":"5174bba46406ff4a5f1c53983ac2a955fbf6af52","sha256":"01daca151c1b5d89edf8d02b716b8e037a7952ef8e336c798976e76e893e5538","sha512":"1c2dc043f650f173b1085788b44189f0d095e5d4233b537a379c68ae5175c34f363f2a6b093ae3a24ac02d73452e33e6697549f077b0b5b585a280713ffff0b7","ssdeep":"","tlshash":"698000800bc02a030ac22f8e8b320ab000fe28022e0808208fbf02b80022020c2baef0","size":36,"data":"","first_seen":"2024-05-08T21:32:09Z","last_seen":"2026-02-13T22:06:34.569838Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"861e8329bc1229b8d6ca90eceaaa1f9d","sha1":"d508b811ed4e2200641db9d55c0e1a90ac26a390","sha256":"6e4fdb9ef53023be5f9098cf5e175e96d4515f2696fc863d0d443bd47fb16949","sha512":"d728a8816fb4a43bac4e959a449a49d38931994fa97dcf82a0eb640344644000b92d4183e2a5859764da371c1be18a1d79c07025c7ab9bd60671319a318c6d3a","ssdeep":"","tlshash":"c3016f4b5d67f816a1e24f74b63fd62a22a1162255c7f1c0dacac4505e63fc43c95a4c","size":810,"data":"","first_seen":"2025-12-25T07:11:19.496198Z","last_seen":"2025-12-25T07:11:19.496198Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9143835934f4250743831f6375266a1e","sha1":"51120c6ae38ad3e32b1c684696c73aa9392d9ef0","sha256":"d27e31fe05d595675ec089896692dd837525b3922220b76bc6d65aeb042c98b0","sha512":"1bb0bc0f1c9fef719f6b947be9681a5eccab114e1993a1562e39b6df5f1ddd0a1a47b6333b4fc694b0ff65551b3927f3198e3ef86f60615f520f7bb5f1bdcebf","ssdeep":"","tlshash":"d2011e0b2f06b00245f14e3cee3bd22621a60b220589f480af888060bf23f887c87d5c","size":806,"data":"","first_seen":"2025-12-25T07:11:19.496985Z","last_seen":"2025-12-25T07:11:19.496985Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"haywinclub.me/img/icon_user_new.svg","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:48.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/icon_user_new.svg HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nCookie: _ga_HLQ807QTXG=GS2.1.s1766646648$o1$g0$t1766646648$j60$l0$h0; _ga=GA1.1.1883756816.1766646648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:48 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Thu, 04 Sep 2025 11:43:44 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"68b97b70-406\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w7tDxq8s5GxJLUWtq0Lk6hQNxXoq5QsdzZ0shv3hEZQetgxHDRFCJxyNVaPeVnR7u4GBZxejhn4gXvx7C3WRwimEcSOrfLwWJuJdLL4%3D\"}]}\r\ncf-ray: 9b3685502f38120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1030,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0eb94cf82e3087ea01a10726ffec3ce7","sha1":"12a1ad22ef305ae9641b4aca338f57ea74e68505","sha256":"e3e2367a32e1c352c8a6ad13fbf42fa9526c42565e20520b524c49d4a221eacc","sha512":"d7f8bfae88f59faf11256f99f8e21d4ff0980ded1d96f5c60de5aab75a6de5304372b35e53857db4a242c18d468d5dd09f4dc4ca579aaeb3f588fde6895a169d","ssdeep":"","tlshash":"4111ccdb8ba4b2d8a0d4c3d6a6251035777b74f22f65ee1082089f0c3e9184e4cc8c84","first_seen":"2025-09-20T07:51:22.623985Z","last_seen":"2025-12-25T07:11:19.430535Z","times_seen":7,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/web_play_btn.webp","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:48.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/web_play_btn.webp HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nCookie: _ga_HLQ807QTXG=GS2.1.s1766646648$o1$g0$t1766646648$j60$l0$h0; _ga=GA1.1.1883756816.1766646648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27494\r\nlast-modified: Tue, 01 Jan 1980 11:00:00 GMT\r\npriority: u=4,i=?0\r\netag: \"12cf40b0-6b66\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LB34eqptyQoK9U%2Ft%2FBeIsk5HTe%2F%2BDSVPBhR%2FYyOzRseOyrn7GlgwkkSKwdr1kyWcdrKZM9ze59Rfb%2F8vc3L1Kc6RPM6vFg5kxl7bXjo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3685503f3e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27494,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6f27df352baa2dde089a53568d57278b","sha1":"616446b0cae77da2b82dbf7521a88903d6d7be62","sha256":"387e0706cde75b14d00f85797dc2eb8ae7d2fe3b988d7b13202e50595c41a024","sha512":"cbdf080fa806f223da02207a03fee7f7dc41e279f46faaa3f120af94e0826233a37993c6d16da06e258f928bb3b908c8e4d0288f13fbbb15f7edd7c5bf7a532b","ssdeep":"768:/k/BGp7jc90Aaalrw1lW5eL/jGSnn7C35lRKT1TczzTe:/k/c1j00An8WoGSn7CplRKOva","tlshash":"a4c2e028be7bd99cf27f1e356399c35053a87c90962e9bd05ed10c6ad416f017d306b2","first_seen":"2025-09-20T07:51:22.641774Z","last_seen":"2026-03-25T06:59:32.333078Z","times_seen":8,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:48.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.dmca.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 14:11:36 GMT","end":"Wed, 11 Feb 2026 14:11:35 GMT"},"fingerprint":{"sha1":"D0:D0:E7:F6:3C:34:21:08:97:86:15:92:7E:27:AD:71:88:4B:1C:96","sha256":"A0:C3:10:7A:20:67:69:7B:94:55:B9:7E:E2:D8:42:66:5A:99:27:3F:C8:89:E6:B3:05:1A:72:55:75:49:0D:A6"}}},"request":{"raw":"GET /Badges/DMCABadgeHelper.min.js HTTP/1.1\r\nHost: images.dmca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 07:10:48 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1574055\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\netag: \"26b181f16d28d51:0\"\r\nlast-modified: Fri, 21 Jun 2019 20:14:34 GMT\r\nx-powered-by: ASP.NET\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:10\r\ncdn-edgestorageid: 830\r\nlink: \u003chttps://dmca-images.azurewebsites.net/Badges/DMCABadgeHelper.min.js\u003e; rel=\"canonical\"\r\ncdn-requestid: d6739d7c50da487ef0475d20f51ba2b4\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":465,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-04-03T19:18:30.912138Z","times_seen":12380,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/roll_to_detail_mobile.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/roll_to_detail_mobile.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 4952\r\nlast-modified: Mon, 11 Aug 2025 17:04:20 GMT\r\npriority: u=4,i=?0\r\netag: \"689a2294-1358\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WzDNcnGY33iiAoPHKKePjlFnZA14tscEhb37%2B2H1Qho16TnKtwmIvKbDgPDtwSTlZkApaALTNaAr2gBkrgMPToZHUblo%2BddgXO6dAb0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548fed6120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4952,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 90 x 82, 8-bit/color RGBA, non-interlaced","md5":"fdb0bb36a5a927757ec7683afcd208ae","sha1":"1a2dfbf659409b9f3093aa6b13bbfad06287fb47","sha256":"e2529563536a7819e80d22afde749b5d3b8d8fdf55175c29651ed72fadf39f15","sha512":"65513d34b49994e85247298a5d4a88074761f3a24d193f2b0330e111f82ff1f1323ca4e70a56ad6b03b4f91ccac4d0d9cde664a5511f7328138b38b410320b80","ssdeep":"96:YSTi+07kilv/Bf2XRMc6JreDNqzOJMaVOFe5KsjBJRhbJEYTJ8ohhe+0/tgMvmzm:YS++okI91JKDEfaVp5Ksj5PWr/tgMSm","tlshash":"0da18d15952746e7cb03aca99bc255901325c16e1068adc477dea31f3223eb4c3cb772","first_seen":"2025-09-20T07:51:22.591718Z","last_seen":"2025-12-25T07:11:19.433736Z","times_seen":7,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/Xoc_Dia_nomal.webp","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/Xoc_Dia_nomal.webp HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17946\r\nlast-modified: Fri, 01 Aug 2025 01:27:42 GMT\r\npriority: u=4,i=?0\r\netag: \"688c180e-461a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aBQp0ypRXsVerEYAO7P%2BOGARYPfXjH7Wh%2BTxPNzgX3dO04YGqSp7vzf7y9g5AeJdKPEinghMOqTOY1GH%2B5rJC9Gg7vGBemQIlTCfmPs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548fed9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17946,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ff1c2dce1002cf7438207b03c53e979d","sha1":"b8662ba15f68016e8a99a2eed20d09047be6af9e","sha256":"c754ed7b95f82ac2ccbc8f5cd57d082a4b6957b2ce00c7d096438603240c13d1","sha512":"2b1e133a2de5e68d957d485dc6d97b88ff8819afaeee620c7973d8f3288d0cffffca50748c6a66a0adb94cf5e03c70d7acd4167911abc5a76104e4f003f65668","ssdeep":"384:vonf4bL2wYvEfczJ8nf8K+KBkhISjgOUc6AMEsdPERT:voKL2wY/F8kK+WyIdOUHNEsdcp","tlshash":"3b82d008db75ea57dcf320f12175e75ca898461a79a68cbb21108fb89c7e9b2c180b80","first_seen":"2025-09-20T07:51:22.588033Z","last_seen":"2026-03-25T06:59:32.334172Z","times_seen":8,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":376,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/assets/vendor/libs/form-validation/bootstrap5.js","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /assets/vendor/libs/form-validation/bootstrap5.js HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sat, 07 Jun 2025 06:10:40 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6843d7e0-7d5d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7T1NlahIKAK%2BFQcrUgwRHRosCjEa6chIyxvtZqcKdsOR7I38y7M97HDMuSX5RDcwO7ZKoMvD5BKNb2eZAc5hnY6gVXjUvQp1vc96ccU%3D\"}]}\r\ncf-ray: 9b368548eec7120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32093,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"6ebfccc433ae8493ddc28ef6257d09ca","sha1":"f42d40ae2a37313c4b051e34ede38a899b577ae8","sha256":"c54929bdfc1db29d4d1b155fad36dc22de190a87aa5be24a9c41a74ab91874f5","sha512":"c73db2073c6fb678e43d34b1486325a86091e2c72a3c9da682d305cee4c0e9d7cfeb279a84ab0b2c4d8e1f90b6ef8b67046baa12e286623acb762e8bcd2b557e","ssdeep":"768:m3vx4Jk0vNdVHsVniC/jOOJNEZhidLlIO88J4C2IOvphbhhwnUaGo26tJ4V8dhxi:m3vx4Jk0vNdVHsVniC/jOOJNEZhidLlQ","tlshash":"d1e283997256a8324f5b50fe704ba04f73fa2119d8094468f5a8c0e36db9fd63267f38","first_seen":"2024-09-19T20:09:47.217706Z","last_seen":"2026-04-02T13:54:31.446999Z","times_seen":16,"resource_available":true,"data":null}},"time_used":529,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/icon-facebook.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/icon-facebook.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 10800\r\nlast-modified: Wed, 30 Jul 2025 10:13:20 GMT\r\npriority: u=4,i=?0\r\netag: \"6889f040-2a30\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pAvBxI3xAcWwDXV6bNp%2FaIACGorsTuRSmXnUeAnst4QovLAjggESuCyB9AjdnxzcMyuHyH62iGuw120PYw%2FCd1w9hCPzdyCKwr%2B%2BTQY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548eecb120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10800,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 84, 8-bit/color RGBA, non-interlaced","md5":"e18d6c97ef29f204f7907a99d1cd5042","sha1":"58d801659528cd73afc5b4bee347641883464b33","sha256":"fbd255b09d80e2757ba70f343e4f3d22ac084f0ed239d0974403ee163ee8d29d","sha512":"ff1f0a5085bb21e28faa6598405ae91e5390d55cf252560ba8e579d82bae1e806ead7d56f4b0627f5293e2ce015dd4679c5de692a5c75d3f177534024bca8fbc","ssdeep":"192:pSOK/3ibwfhns4n2Anecr+5C4bGJkYDyN7CKl5s4GY0GyGszc:QOK/qwfJzZf+5FiJHasRFJy","tlshash":"3d22cf679798ce6dfa045f3650b005f522708d95ee1f9eea1dc6c31c411f123a50beab","first_seen":"2025-09-20T07:51:22.643718Z","last_seen":"2025-12-25T07:11:19.437591Z","times_seen":7,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/Tai_Xiu_MD5.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/Tai_Xiu_MD5.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 35651\r\nlast-modified: Wed, 30 Jul 2025 09:25:38 GMT\r\npriority: u=4,i=?0\r\netag: \"6889e512-8b43\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jOPTLT%2Bv4Qy6HJk1NlcAalKInUiYUsr7j8Tz6u4jzgGxovB6id8D4wYFDADNA5eUPozHRv3ibG%2FPLQBZAZBgBBgvjYudpfQ6YoD05aI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548fedd120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35651,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 109 x 154, 8-bit/color RGBA, non-interlaced","md5":"a55558fa3631a7acf97598ae73857064","sha1":"6001ddd764071eb3050c57ba50a0d90b5fa16e9b","sha256":"3a614c033f6ce28685f6190c7093a7d0257c98d47fffd294cb06e8d18cbea069","sha512":"f2e1c740db28df31cc54d25a11a9c7fc37e164a8d942cbe6096740fcdd77a779d9ce39cd58ef0b5ce0cb459f405a8aa0a9597374fabf0bb53c68d62aa289c349","ssdeep":"768:OWfdQmAWrrOdSkKogzP8XEx+nc3Nhcdl6eM8HfgO8w8UfE6Kozr:O4d/GYx+ddl6U/gOf8UfZPX","tlshash":"c4f2f1d61aa5cac929d73298007cf69dbe94e3d1fec8cd40293aec31c70ae51fa46195","first_seen":"2025-09-20T07:51:22.58931Z","last_seen":"2025-12-25T07:11:19.438876Z","times_seen":7,"resource_available":false,"data":null}},"time_used":559,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/reg_btn.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:48.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/reg_btn.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nCookie: _ga_HLQ807QTXG=GS2.1.s1766646648$o1$g0$t1766646648$j60$l0$h0; _ga=GA1.1.1883756816.1766646648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 66629\r\nlast-modified: Wed, 30 Jul 2025 07:42:58 GMT\r\npriority: u=4,i=?0\r\netag: \"6889cd02-10445\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vVSWIuO1HOpYO%2Ft6DpqPszWS8xaG4KCKmdgUkea9BAE6dWW9pBYcyT66d%2FCoenwMvl%2FDIqTo%2Bn0iukbTbT5ZVnIGXu%2BnA3XcfEZunP8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3685502f3c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66629,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 411 x 122, 8-bit/color RGBA, non-interlaced","md5":"35c29e935b98f8b51dbd40d994921939","sha1":"76cc3f6bc175100c55394de11058dfc1abb081a2","sha256":"ec57f69c99a75136b199129aeeeb00efc0b36693e214f539b3e995f6f19bf873","sha512":"5aef3abb34d7e51501e55344ed97fe0eee02bd936934078dbd828304d4a991ff90c44fdc3bdbbb9650f61eef1252a570a8c26eee18e3013555c6f6878e7b9002","ssdeep":"1536:nylUokp8FHQRYPemaPJ4EFgdQxyQRLsbKyfGzXrZroYhFe6LiCGoQkY:ylUkHyYPejPJsxIsO2Gh8YrTDTQn","tlshash":"a35302c43ab8a3e009105a12ddce8f4347e57e8c96e89dc53569d9c5827e4e441bbcfe","first_seen":"2025-09-20T07:51:22.628798Z","last_seen":"2025-12-25T07:11:19.440082Z","times_seen":7,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":357,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apirvp6.traskiprik.info/sw/collect?aff_id=hay.win","fqdn":"apirvp6.traskiprik.info","domain":"traskiprik.info","tld":"info"},"ip":{"addr":"104.21.36.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:48.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traskiprik.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 07:28:54 GMT","end":"Thu, 29 Jan 2026 08:27:24 GMT"},"fingerprint":{"sha1":"85:83:3E:38:57:1E:05:83:B2:D6:F5:D1:74:8C:11:11:91:49:94:94","sha256":"FF:67:AC:22:09:84:68:44:0B:C8:83:A2:C8:14:76:B3:44:8F:CF:D6:47:63:9E:2F:5A:77:1E:5B:12:A9:A8:F3"}}},"request":{"raw":"GET /sw/collect?aff_id=hay.win HTTP/1.1\r\nHost: apirvp6.traskiprik.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://haywinclub.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 07:10:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-execution-time: 4.911 ms\r\nx-trace-id: 10a6eca4-58d6-4667-9c52-221c10324502\r\nx-request-id: c734d99f-1d2e-4f93-9e4a-3554acfb1d19\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FiG9eV7ZQg%2FQVmifhZv%2B3bhQcJU04yOiAtAF1oLN0v2jAw0NaAg9PZlsGkbLGMOWcn47LBho%2B%2F2FXzAyLYPZpBuvAfR1p0%2BXmnsVogNeeqCQg5vWQoFv\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b368551bf0376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"549bda7ed4b9dfd4769d53d4255c9825","sha1":"cb70fa7df6d9ba98f0a317e85883eb2a44c041a3","sha256":"d4dbe546440a6713a139c454b4c3c38c00197f190edf34e4b2d89da84064a956","sha512":"ff7120cab46e1b123fd4ca34a5f3f226abe8556a7b1da54e87a23814dc1d78ae07dd6221ae1cc2360665ceb9ff4806c23ee47ab6e9a09198959582ca49b93bb6","ssdeep":"","tlshash":"30b014111cc07cf45dc30147d557751517fc1555c71500455c5d4f35d71457477c3511","first_seen":"2025-09-20T07:51:22.607957Z","last_seen":"2025-12-25T07:11:19.441221Z","times_seen":7,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":46,"dns":22,"connect":1,"send":0,"wait":277,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/assets/vendor/libs/form-validation/form-validation.css","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /assets/vendor/libs/form-validation/form-validation.css HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sat, 07 Jun 2025 06:10:40 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6843d7e0-61b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B2qc9o6GsmTRcRoOU0oMQw7nrlJhVpTSRY2IvGziuP0UoVXP%2FAd6Kt3lR1azNgt0ggBROm0%2F%2FOd5D5hhmZF2m84YLoVjIRPPxNmvmfY%3D\"}]}\r\ncf-ray: 9b368548dec5120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1563,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1562)","md5":"3389b77317a1257bec45ee2b4eac663f","sha1":"da3f1bf6406a19984e9bd62fd17d067dcbf0d69f","sha256":"c2e0187dd7f0c2b97552fa8109f8866f83a45dcaf4cbded9a974bdb71fd0eeb2","sha512":"5dc0eb9aac76a9ab2ff60d67df7f8316eb0b65e1fbf462e96b43a209e52b2ecdddfb1102f65bbe10f33af6e0e91b2613e316f3915a62d06f5abcf8b09c39fe39","ssdeep":"","tlshash":"6631152b02dd01a495b03cbb76e83ec250cadfc1bd8385c9a17aaac04c68472f177d62","first_seen":"2024-09-19T20:09:47.182032Z","last_seen":"2026-03-05T09:01:35.986684Z","times_seen":18,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/assets/vendor/libs/form-validation/auto-focus.js","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /assets/vendor/libs/form-validation/auto-focus.js HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sat, 07 Jun 2025 06:10:40 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6843d7e0-581a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=04SZS8Dd16WO2S8PTEnERSjg%2FT0pH8xUH%2BCOcQ8loA%2F7EyNJtz3pLWpfPgH3vpIKnY3mJP7SrbQUgTvIb46sbRWPfOvsyFxpVZbRA5I%3D\"}]}\r\ncf-ray: 9b368548eec8120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22554,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22486)","md5":"e7fadf739f9da4a229ab6dfbf9694dea","sha1":"2e7b7e900623e9a261e03673074737bfd1bc627f","sha256":"d97bf5e30035a7d18da20b1d8ec13acb63a5f87f5f4b5493561b2f46a42c850f","sha512":"6b8758fb2587c3cf5d0d66edff308a37bf4764d9d6ec0ce6c4579a0eeb09ea9f3389be5bf153137595b9f23effae13e4016d62e9669fdd4d8e913f1361019141","ssdeep":"384:Shg3vxp14Jk0vNxhMQxJ6egq6cHs1ntbdQ16oNt0K5SGksGcQhidXWWGQI158jrE:p3vJ4Jk0vNdVHsVtbiYoj0K5SNhidLxq","tlshash":"f9a273d97156b4224f57a0fa645b904b73be2418ec0a4068f5a4c0e32cb9fd9a277f3c","first_seen":"2024-09-19T20:09:47.221449Z","last_seen":"2026-04-02T13:54:31.377373Z","times_seen":16,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/choi_haywin.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/choi_haywin.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 43466\r\nlast-modified: Mon, 11 Aug 2025 15:56:16 GMT\r\npriority: u=4,i=?0\r\netag: \"689a12a0-a9ca\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yE6qK86BUlvCiSd06E3GOUgibNEouKxOog%2B%2FUbkXR6xBeHZE%2B0FxfOWPIKUrTUg07wVHQ9LM%2B92PEQQgSHvaCp33bVmj59CGlEYRilI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548fecf120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43466,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 504 x 85, 8-bit/color RGBA, non-interlaced","md5":"dc5d6e1da8162023b8ec0b67c98a7765","sha1":"178e5d5034fde31eedf179060a3db72e74f0032f","sha256":"a5d3d3092a9b3c29b71be579bafae6728690bffcc1d9e17e100beb02ffd22cba","sha512":"6fa5f88ac16afb44c849ced012893f485af207c8df1f3631d545ec22c3e96969bdecdc648dd07d14b98ec765e45b2ce6649d61b51c0a771de34a9a1a646ee311","ssdeep":"768:e4hLSs7248OVds/6K4iNRaOK1jPJvYQPBXqRH3avi53513lq60UuULiI:rPh88dWlD39K1DJvY4AOs51w+Lt","tlshash":"a11302cbfaf426c67e948f5b2770629bb34f956a456930a1f243b92411354ce4eacc3c","first_seen":"2025-09-20T07:51:22.58669Z","last_seen":"2025-12-25T07:11:19.444763Z","times_seen":7,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":350,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/f_news_icon.svg","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/f_news_icon.svg HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 07:46:20 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68ca674c-21c8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kunlAnK%2Fm88V5ehv%2Fn%2BSZazOKb7C2mNUquRi9j6wmsUqFjZaG47DXnCrJvZvNLvJVlTRDUpLsK63nx7x8c3Wl0E%2Btn3cLa1s53cKrUc%3D\"}]}\r\ncf-ray: 9b3685490ee3120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8648,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c841ce3c7e82834be96fc1a23d6de18e","sha1":"ede83261dbe3d02dbef408b7dfd053b13b4c7a78","sha256":"abfae541e9d888bb366dbf0c8b2280daaca747cb644761ac9119a4bab75cc679","sha512":"5be48dac02504e938fcbb1cbcd2753bdc6a05c655e9b6bb2cb531411bbe09e883a61f9259f88cdf48e14b92edadcf6a37714c283fe72651c7e964119d91ab31b","ssdeep":"192:zDPIsDAcCzUQ5ie99cQBY/ogGiYxcLQFRMBo7uf5buzVzOBg:4sDAcC5+QWQgLlQFRLuR6zVzOBg","tlshash":"840242efa7c8a6c0d54af762c802a43da67b34feef5643c50650aa96b7201a58c4ccd4","first_seen":"2025-09-20T07:51:22.614045Z","last_seen":"2025-12-25T07:11:19.445861Z","times_seen":7,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/group_line_bottom.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/group_line_bottom.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 370\r\nlast-modified: Wed, 30 Jul 2025 10:44:08 GMT\r\npriority: u=4,i=?0\r\netag: \"6889f778-172\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FS9z4z2MyohPJho6k5qyVu1f6NdXIV7yMdjTnrgfuhXrRnGhz1zc9hcySHU3uwB2sADgtcE7lhWRCZnkCYO%2BtaELeBtJgIgQmongM48%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3685490ee2120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":370,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 991 x 2, 8-bit colormap, non-interlaced","md5":"f7696242236a00a4635760b65f443cde","sha1":"893497e9d6d1586a9223cbb1016c8eb8a17b6e82","sha256":"f52490c2be834af84ba03b3155fcd0cd75a0505cbf72ec5f993c8f3969fca56b","sha512":"ed38780276d0d292e959d49cd645db5619055fee79f4699e4911d5bf97edfc6610241c0cfed943bfc9072cfc8a50d80b6dc4904a48436a6cc0137308a78fa1f5","ssdeep":"","tlshash":"e5e095ed71741c72d9370fe744045d340f8f2d7d5060151082157cf8063748543a8356","first_seen":"2025-09-20T07:51:22.627906Z","last_seen":"2025-12-25T07:11:19.447023Z","times_seen":7,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/input_bg_normal.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:48.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/input_bg_normal.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nCookie: _ga_HLQ807QTXG=GS2.1.s1766646648$o1$g0$t1766646648$j60$l0$h0; _ga=GA1.1.1883756816.1766646648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 4074\r\nlast-modified: Thu, 04 Sep 2025 11:38:12 GMT\r\npriority: u=4,i=?0\r\netag: \"68b97a24-fea\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F09Q8Fpoyd9IixilSVypV%2FtbSDVa4gTmECSRNcCjaul%2BmZn5sCOilfuR9OjqJRKQleKdzLY0sKpQxJWSOWJfnEx2ZzYMZHuNVZ7rIHA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3685502f37120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4074,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 488 x 66, 8-bit/color RGBA, non-interlaced","md5":"bbefddfa39ec623cb610caab0d4231ec","sha1":"6e1dd7bb86847453947429532ac3d380ae890d98","sha256":"da0766c458fa019a34995c06fccb9f07d7236b122893ec5886159fabcf13f49b","sha512":"99c1fe34173ee4a3b71deae6be792477a1e96855d9d4b3cc3fa2726527225c1254eb53a269886222a3fe1dd6db22ca00cf3fe4cc2c0774b8aceff4882d99408a","ssdeep":"","tlshash":"86816edea48ebe28c248eabc8f6176db27d553c97445aa460092243b1c837a09dc2f95","first_seen":"2025-09-20T07:51:22.608962Z","last_seen":"2025-12-25T07:11:19.44823Z","times_seen":7,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"openfpcdn.io/fingerprintjs/v4","fqdn":"openfpcdn.io","domain":"openfpcdn.io","tld":"io"},"ip":{"addr":"54.240.174.76","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:48.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"openfpcdn.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 27 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7E:88:9B:B1:7C:CB:A7:14:49:10:D6:FC:A3:64:23:03:9F:CC:6A:B0","sha256":"6A:98:96:56:64:4A:39:7A:9F:12:CE:F5:99:D3:C8:24:ED:17:AF:92:3F:E3:AC:C7:7D:1F:2D:74:46:2F:95:D9"}}},"request":{"raw":"GET /fingerprintjs/v4 HTTP/1.1\r\nHost: openfpcdn.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://haywinclub.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: CloudFront\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ndate: Thu, 25 Dec 2025 05:53:28 GMT\r\ncache-control: public, max-age=628142, s-maxage=11307\r\netag: W/\"xpwJ3jZ1YGJa3hHgQsvBXe+osoM\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 8wLcE-fUrfEwk97qc2PrOvo3rwNfRR_db-vgdAUS-cU3lepSb8hTFQ==\r\nage: 4643\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38855,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38323)","md5":"dbedc7274a2f03b28cab86a88c50684f","sha1":"c69c09de367560625ade11e042cbc15defa8b283","sha256":"dceecee491e0029e101d4d1e77318c115fe2433ff681ba864e4afa091801b2f4","sha512":"42f6696c97e492e4c31009edfde9f4f2cddaba8d3ce984ad394e5e3d139746482f6c5346f313a183944982704894189a320ecc3c11e25e1d4acca6d7f35df4d3","ssdeep":"384:NxcDKdRZKgEaMRMBp5iKQID95wH3KqwzrWmKj5+pCqNFaiE8E0QIQfJWbkhGYKom:EaRBp5Kjnc9NwlJWbhSu9A8","tlshash":"930316d8b2c3b06e227368b5407f6006b23a7d54346d8842c523e5d57ca9e6e913bfbc","first_seen":"2025-04-11T02:03:59.120104Z","last_seen":"2026-04-03T04:37:09.518767Z","times_seen":1745,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":24,"dns":13,"connect":1,"send":0,"wait":5,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/jqueryui/1.12.1/jquery-ui.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 7318\r\ncf-ray: 9b3685490ff449c5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-91ce\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 458220\r\nexpires: Tue, 15 Dec 2026 07:10:47 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=85FPqeTWQZXBY9g7oArcUwa3qYEYN3amyQR5YSu5JCXdC7sTqqIikFpy5NvQ1TVuQ7YFZAW2gsMuP1kl4z6dk8tgSnhxkAAE964bCC8WPPZFwqwa4mSLWeOjaR%2B7Etmwfph8WYx8\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37326,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2515)","md5":"6fd5a6e8197041971d02cf62d06f4b14","sha1":"9997bec65f4fffd3ca7178e14f67b8cd6ad1a9c7","sha256":"a7ac54f58ba507b13621ceb6fcf5fe879f5ac9bdcf049d16153110c6ad048c7c","sha512":"baba481707cb23d6432fcd6ce9e26380117b2e91be44e5e3a75a0dc138f8812942c34d0a895d6b581adfb33577b9fe6bfafeb6d5fb00c2abf2d7044979e593fc","ssdeep":"192:10OW0dCbMiEt7b6l2n+brGtUQnSMfps3+eYQY+h572hk//r8Y5Y6BjSmMErEURHz:pCwiEt7b/+vaW1e07PPiF5fy/EzDS25A","tlshash":"98f20b316b432909ba1bd1a465a11bf7d32e1342ee2b6e7f64aa345cc3d54e0c0bf5b4","first_seen":"2023-04-07T07:02:25Z","last_seen":"2026-04-03T06:57:51.331377Z","times_seen":2491,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":10,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/assets/vendor/libs/form-validation/popular.js","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /assets/vendor/libs/form-validation/popular.js HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sat, 07 Jun 2025 06:10:40 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6843d7e0-1448e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dibWeiyzz%2BXkz3wvxAxEyVcOS6ZZWMizNfxeNyjmPXYCJ99MN8j4VPShwQiglO%2F58aY4DFvLYs3NRYUDiRqw9lykTh5o360iN0mRKKk%3D\"}]}\r\ncf-ray: 9b368548dec6120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83086,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65471)","md5":"d649cbb08615224b26dfbe774bd1610f","sha1":"1083745e0a96109d13e00d12d9b6420da59fae11","sha256":"fd94e86fa042a66694b546a4469f824705b0a1a7fb0b5e02dd9b38985fa4ea45","sha512":"25b372994493ef942c619b098b26dd0d65ab27e33df2a199bca3fec633bb54aa66d2e4615e31799e157ceb1d53447be8ae645071c436f4397aa5cf9b0398ed5f","ssdeep":"1536:Kmqad4Jk0WNHjAF3nLXyAZOHexqei/w/VrtTbX0XHv7hShhwBlZRY0zccPCbW2Pg:KZzwzhgdq3UHCWcMTAC8","tlshash":"b783d68db16675310fab50ea205fd04f33bea525e80d94a8f964c1e21cb4ec66277f39","first_seen":"2025-09-20T07:51:22.637065Z","last_seen":"2025-12-25T07:11:19.450948Z","times_seen":7,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/Aviator_nomal.webp","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/Aviator_nomal.webp HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20830\r\nlast-modified: Fri, 01 Aug 2025 01:28:06 GMT\r\npriority: u=4,i=?0\r\netag: \"688c1826-515e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ve8yoDbJZuUntUVXn%2BuzKZpPogreJIRcY1GCQIHT5npmlSTp1Gsmj%2BaBDKxVlh8Mavq86zwQ2cbi6C1BaM3akMG3ky%2Fbz4voxq%2Fsyg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548fedb120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20830,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"166ad31400eb4ce4c467e38c34d1df20","sha1":"4f6227624e4f54b2fc5cecb4c4b03c74f7c4059d","sha256":"5ae094826359cc7c596872abd4021ff7c1ed824f96b2b5d1ca13a199debcdcee","sha512":"9040ba2ef434f9bd8b4e47e1c1a78510a803888023a27f2cf9431a4217b9ec00b9d563ea7d879a5ead52fd07e0ffc0fbd572be03053c033d3591dc5011a2020e","ssdeep":"384:5ZnDKkj+DWX+HseKn0WSpWsHTo7lKF4F+LezywKenLqY7Zc8+GvRE9+V:HDdCq8S0WE9zoJ7F+LezynzYLLREoV","tlshash":"5d92d08b37b809b7ce231815b32a76c41b15235d5627ebc36f359db371aa0c229cd915","first_seen":"2025-09-20T07:51:22.645886Z","last_seen":"2026-03-25T06:59:32.36759Z","times_seen":8,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/Xoc_Dia.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/Xoc_Dia.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 35655\r\nlast-modified: Wed, 30 Jul 2025 09:26:10 GMT\r\npriority: u=4,i=?0\r\netag: \"6889e532-8b47\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LDsqk36a2ARgEmXNRPKiw1hdlNCp%2Bi%2BvKj4ZaBWtWtl7kBD0LXoNLxi4TxTk22FCNEIx%2BurAXMnYkxLOQ7NAWcOI7lGs5%2Fra7qon5tQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548fede120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35655,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 105 x 143, 8-bit/color RGBA, non-interlaced","md5":"d611406b5bcaac7ae6a3bf4dcd1054ae","sha1":"6ae40e7e17844798c3769abe3a4187ecac90a50c","sha256":"1ed911deaee063b3867e04287e10551ff2b40f7450a9689190942ec219ac3be1","sha512":"7a14777259830f41f21a2d4c8d2dce988d14488074172c186d3bf99b54f73806597256f8e713981f5d677639fe0ab03b2a325dc5ba61bdb4f872b4c6a644be22","ssdeep":"768:O2FYt9EHSXd4lvvzdrkE5p3/qBiFGJNWG5OCkmzXBCumiN5KULGdP:O2FYt9EUdOBntSBiF6PwCkmzBN5No","tlshash":"17f2f21c4e7a0f65d9d2b4f6848a378f99eb5576029b8de81188f77b0cec0301e5286e","first_seen":"2025-09-20T07:51:22.616782Z","last_seen":"2025-12-25T07:11:19.453228Z","times_seen":7,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/f_guide_icon.svg","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/f_guide_icon.svg HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 07:46:20 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"68ca674c-136b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SMj7C2rSEckcijXPIRE1yfmLiJ0ed6juReCRq%2B%2BgOwUAgJdOWFyygRpA8yZD%2FqZRYvDhSJKRItUquyfhxNxbzsr7cAC98tqpG3Zfg0k%3D\"}]}\r\ncf-ray: 9b3685490ee5120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4971,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"83d8f117fd586faa1840fb4fc31858d2","sha1":"3e46521690020ad9fc5c59e7f66852bd1532890c","sha256":"ba63fa2bfa8246e4fca41eed7b2575630a7860aebc801c021da38cd7fc6a2874","sha512":"e3f8a142b8c043c7feb400e85f50087758d8fa27a845be1bc501479153126827cd7b988cede47f683c3517262c6da48c5b90eb7b37f86e909eef7d50ea4679f2","ssdeep":"96:c5UIE97sn9BmHyRYUeGLSOjOBYOQjpSTTLrq4tUINK6jAFFLVXlYo:cRS+9BL1InLltUI1AFFLVl","tlshash":"2fa133f1a30c81c89546af34dc16a934d6af1df6afc586d541c4fec5f9525a6c988cc0","first_seen":"2025-09-20T07:51:22.626431Z","last_seen":"2025-12-25T07:11:19.454303Z","times_seen":7,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/bg.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:48.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/bg.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nCookie: _ga_HLQ807QTXG=GS2.1.s1766646648$o1$g0$t1766646648$j60$l0$h0; _ga=GA1.1.1883756816.1766646648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 2273294\r\nlast-modified: Wed, 30 Jul 2025 05:21:24 GMT\r\npriority: u=4,i=?0\r\netag: \"6889abd4-22b00e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZxMLNLq%2BzefpHeMA7ouHnW8PbciDAvmBxZpnXGx42xbN1A%2FvixykPL1l8cJbKNFENzT6WVswObV8YdR8WIwvjXDUb29Cv%2BNCpjbeW%2Bg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3685501f35120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2273294,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 3045, 8-bit/color RGBA, non-interlaced","md5":"50c0b5c6430becfae69d3083dcdf0eb2","sha1":"f6e5de26f4abed90ab1e5522131acf726aa192f9","sha256":"0b8abeeccab92771caaf608c9cbb6d34f34c325fe0cdf8e3bd5f3025424921f1","sha512":"3bf28ce2ac7d199c83f576a1b7c20845b7187ef027e2a038805c95bb5644d1f27af90c80835c4df30bb0543edb57e2dbe67fe543f8c6ef40819ff667e1151820","ssdeep":"24576:Jh7Tczfs9I1xIvSh7MNistoUNWIPto0euXE40FDfGbcmBk:JlIsCkSh7MosyozPG0tIFDOowk","tlshash":"13253382dfd2fdf260706391e0869b3935961423a78c74e1dedca3789d61b61e5b880f","first_seen":"2025-09-20T07:51:22.612228Z","last_seen":"2025-12-25T07:11:19.45552Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1725,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":1347,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/icon_lock_new.svg","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:48.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/icon_lock_new.svg HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nCookie: _ga_HLQ807QTXG=GS2.1.s1766646648$o1$g0$t1766646648$j60$l0$h0; _ga=GA1.1.1883756816.1766646648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:48 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Thu, 04 Sep 2025 11:43:30 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"68b97b62-69b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M1cgCYrjHNbYM5ZcrR1L03CXqLVg3IWJsNTQ5tUv342%2F%2BxPCPYRHHEIV%2BEt9Mth9hcrU1rFW2NhbxW4uDGx7To8QVnxhzKf7bnJf8KE%3D\"}]}\r\ncf-ray: 9b3685502f39120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1691,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a65d8fd8324da01acd6551eac09357e7","sha1":"6fced6ef7bb0e6f227375026f320ccabb702661b","sha256":"63baa639cb125ee2a43f49adda3e37f7462b65aa02d475ae6ea92440a1502280","sha512":"5a757b9a0756b1656bd494d8be507cdaad9280d297bf0a9ac5c5628291ccca9c0578b65293cba9ecba0dadb9e52e8bbadca0699b1c1fba9a6cb4a655b9d7d87e","ssdeep":"","tlshash":"8a3172f5afcc32d88986e375af2485f5349f30ffbb458b44828a9360a71802d89dc804","first_seen":"2025-09-20T07:51:22.613129Z","last_seen":"2025-12-25T07:11:19.456478Z","times_seen":7,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/js/jquery.js","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /js/jquery.js HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sat, 07 Jun 2025 06:10:40 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6843d7e0-5014a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n8SIpi03v8RHlnUkA2ZAi0AAbBzmYJWEsRNVJtkUsQQMau9D%2BrjwJRfaWddZnonkKJuJQ7VTwoG0j2biR3EqDbz1%2BZSalZ4g9SdcjEQ%3D\"}]}\r\ncf-ray: 9b368548cebe120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":328010,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63061)","md5":"de7242b656989c8858defbfcd85fd2cc","sha1":"551aa0b6b05283a486d4908514298eb82d261875","sha256":"18490a9583036d4e58ad7448e5f405c1adec66ee1cd8b7b2903d5ce81c58bca6","sha512":"bb87c5ad60318fade2d82dd3ea8e745194ba85c6eb48adb743c7b3ae3f7b789dbda5b8f7bb63bd8cf0880abfe523bdaaa4c23b5e789c97635b0639005cb9c33d","ssdeep":"6144:ghKsBEPySL59uuAHoh9DbtsmelRnc9rQF5QdD08LIH9AkIRcbLMYTu4xkaJgH/Um:xhb2lRnc9rQF6d0lH9AkIRcbLMYNxA/j","tlshash":"e264e7a676fb02390d36bbd9932f155ab53fec98b1108512a82ebc5c201c514c6e7f7b","first_seen":"2025-02-06T00:26:15.537117Z","last_seen":"2025-12-25T07:11:19.457411Z","times_seen":11,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/btn_download_And.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/btn_download_And.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 147420\r\nlast-modified: Thu, 21 Aug 2025 13:49:28 GMT\r\npriority: u=4,i=?0\r\netag: \"68a723e8-23fdc\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dWBwFj4t%2BTPE8ueB7ABMjxqz%2B%2BuNLcUnmvl32RgABjFInGvDrzVn6dQ3mNCJa1Qn0i3nQiipzHULo3fnYQQSPsns1%2BRLPBQ6BL8seYQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548fed5120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147420,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 654 x 198, 8-bit/color RGBA, non-interlaced","md5":"ab1478a7f79dfdd83089549febe8946f","sha1":"230e3ebda645c54791fdf2f1e38eb57e5077964e","sha256":"2c112e78f17c21150b8160b65b656dd8f6affa618f9e48fc599ea44cb33e18d0","sha512":"dad145ac3b25e78a864b72114355f5b9dbf1a3f5981cbbc3d9f0c91e40ac01c7e0a48c5efa34c3ce0cbd9370aa51aae0b78afe96136783db4925228a3cd80ef7","ssdeep":"3072:5DGVe7Jz/miLTuSuVk6aLmZsWOf5fjmodmaSIfKAGoawilqNB+6W3L4D02:VGI7te2uLeHf5ao8ISACv0Ng3k02","tlshash":"c5e312fb2a224f77f1edc45c3450a959f6691910cb20cb512de3b252be4b0ef721598d","first_seen":"2025-09-20T07:51:22.640409Z","last_seen":"2025-12-25T07:11:19.457987Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":904,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/sound/click-button-131479.mp3","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:48.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /sound/click-button-131479.mp3 HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nCookie: _ga_HLQ807QTXG=GS2.1.s1766646648$o1$g0$t1766646648$j60$l0$h0; _ga=GA1.1.1883756816.1766646648\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:48 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 6687\r\nlast-modified: Fri, 01 Aug 2025 02:52:16 GMT\r\npriority: u=4,i=?0\r\netag: \"688c2be0-1a1f\"\r\ncontent-range: bytes 0-6686/6687\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f9G4w6QiRr496Mfm3l56ioiYJoKOMj2AkKF0MSffCE5ZFjcZoXGGisPfElDD%2By24wrF025EYZXCVgcs004NOMc5PK%2BC7cbn65%2FSifyE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368550af49120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6687,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 256 kbps, 44.1 kHz, JntStereo","md5":"6c281499ecf4cf56eae745e747bb7ef8","sha1":"8bc53fbf148436805e5657c042bfd4a9991e9f72","sha256":"bc997bca78d367c549a3a95e8a8c3578a7d7ed7b13417c97acfdf39768fbb14f","sha512":"83aa9dfacc422aac9fc7bc61df2e93bd054baf73794129bf7a6ecfd5a2d4599c8e7c438fe41ace7e1ba9a872f94d07d3e0c722c3d02e7c6ef20537cd8e8b99e1","ssdeep":"96:LmDcuqEMGrsRYNRGGTCN9teDdotwHgQM//u+hL1TksMKVA7uDbZMF9p:LXuLprsRYuWCNOD6toP6xfTks7fZMr","tlshash":"56d17d11b34ab99a2173c73a2a4567d142862f97f42776f3544a3310437be107bb573a","first_seen":"2025-09-20T07:51:22.644768Z","last_seen":"2025-12-25T07:11:19.459117Z","times_seen":8,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/js/jquery.form.js","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /js/jquery.form.js HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Fri, 06 Jun 2025 00:35:14 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"684237c2-ab74\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oh1kPaiIzofD7NPxRXkUg83Rea0A6nYTjT%2BNeoQ%2FmVWxylwHqkBNmAxOMEtwmfLw%2FY1tSIbfMX9FVHVW8Xjg0hnu%2Bou3s59NA%2FwQao0%3D\"}]}\r\ncf-ray: 9b368548cec0120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43892,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"08a24670beb2eae7ef79a6d5ac23874b","sha1":"eca8a1978457941622833130e92b9b274e2b3a36","sha256":"3a16fd80d67008f1c947cf93ebb20e2af2ed1a6317e194d35ed15046076c4211","sha512":"3a2e9c8c3bd0a0d139fffcd0a4bf4f21b005838236868b02f345e7ca8a3431060e86f60775fbe0a009bf011d7fbe25e88aea3fed4a492330ae69b8181ad33cf7","ssdeep":"768:Kh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV5uMwMGM+zA:eiwDM1YuW+WkeBEfcPZ079SjCOoliMIj","tlshash":"e413a24a79eb12a2192334b94bef90497739d0231108dda07d4c53d0afd4db4a6fafe8","first_seen":"2023-03-07T01:26:42Z","last_seen":"2026-04-03T13:20:52.539025Z","times_seen":1021,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/js/bootstrap.js","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /js/bootstrap.js HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sat, 07 Jun 2025 06:10:40 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6843d7e0-18288\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=70HCgEJ7urjr6AFZq98%2BY6oP%2BQufpnFhje9fMWyNutZqfGkm29uL6huiuHdP6hrpgJYtifelz2sVXJOfOb8gtdEKfPhBjEJjVFmWDSQ%3D\"}]}\r\ncf-ray: 9b368548dec1120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98952,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65469)","md5":"864fcd5c0460858e4a60f3677632fa64","sha1":"4eb4f48883632288474f84be0caf04178182ba30","sha256":"fb7d0aaa3b4f799d12b367a86093eeb6985673242c8b1fce449bf4d3bf5284c6","sha512":"61fb71670ca8eb222f29a042a12d3ca99424a84ab10aa72ab606c8119a7f2687d7b1ce60a5d85df86467c73ef5fb82ef144a6bbc5f5f74f20ca88f6dd3029d1d","ssdeep":"1536:xSS1Nn3pNLCj00HFuEKQu1Di7tVSA8Y5C/LRddq:4EQkY5Cndq","tlshash":"6fa394997281b0724a9ba07a503f120ff33b6895508a8058b53ad9dd5f7cd89b273f7c","first_seen":"2025-09-20T07:51:22.619639Z","last_seen":"2025-12-25T07:11:19.460866Z","times_seen":7,"resource_available":true,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":354,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/art_left_nomal.webp","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/art_left_nomal.webp HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 135566\r\nlast-modified: Tue, 01 Jan 1980 11:00:00 GMT\r\npriority: u=4,i=?0\r\netag: \"12cf40b0-2118e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gih3iouvBIAoZXv5l9lpG9bDh4337YIDb5P13Iz8chbQ%2Bw5gjwCLEsTQN976Y12i4owzH%2BzqKK3t8%2FefzSh%2BBpb8DBUI1bK6z%2FMAS7U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548fece120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135566,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d2ca94b29ecd61fc6bd4247808ece16","sha1":"21405cca33db9519a3217e8b892b01464ec6abd5","sha256":"5ebc985ac8cb0fb572e0eb5915ceca2da3eae08c967e44bd58da744f6bc7de64","sha512":"5f1b777e7c21aba0816fd63862590a913bf0f0a73f969fdac31ad17c9f85536caad14156e84fb32318e6ac5d75f8b69c58cdf5ec1e5ab21de7ccbddb32e5bbb2","ssdeep":"3072:YTx2f0WTQlKAz3Z+qPKclp9QE3lXo8RRaNxoJIA2yPRxA0:M2f0WTQlKAzJjLSE3lTR+xoOAv5b","tlshash":"60d31246710f5a0b832077aad00edbf9eb2c4a4e1a8fe0109655c5679373a5b23e1df7","first_seen":"2025-09-20T07:51:22.617708Z","last_seen":"2025-12-25T07:11:19.461903Z","times_seen":7,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/f_event_icon.svg","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/f_event_icon.svg HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 07:46:20 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68ca674c-1281\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vfCPZlKeVLwsz%2Flh9G9bbnYDPDMDdSLBH3pCWbwfTjSvd0W2YKiaGPdQNH6lFzTsDTnnDvLWg3kLrItiNqOSl2mypkd2CkElu8YAalo%3D\"}]}\r\ncf-ray: 9b3685490ee4120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4737,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a56ff9633f874c79feb31184d4d8802","sha1":"7f9691a79ed36e17210e8f2703593a864fbb9ef1","sha256":"88d9399c786d622c81c3a718354b8fbe4a2d03a1fd4c3b289b54997ec5af5d1b","sha512":"2ff9d72f2b28fcc92320151185785932e8ec8c2bd291327c1a0608024dd5a92110855cebcecf6f6ce1016ef694f2446a6c3ad21e4ed330ebb4558f55e0255dae","ssdeep":"96:cIbESWt5W1YTEWOZtHtqF4QgjiB4bXCVFS6J652eNdWkdT1XO:cOESWtjTEWEw+Qg2B4by7S6J5ezZk","tlshash":"0fa160fb6188b1c0b40be7b4d83794766a2e28f5bfe997880184fbc8b155194cc9dc60","first_seen":"2025-09-20T07:51:22.602989Z","last_seen":"2025-12-25T07:11:19.462974Z","times_seen":7,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/favicon-16x16.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:49.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nCookie: _ga_HLQ807QTXG=GS2.1.s1766646648$o1$g0$t1766646648$j60$l0$h0; _ga=GA1.1.1883756816.1766646648; fullQueryString=a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 1021\r\nlast-modified: Thu, 31 Jul 2025 23:03:24 GMT\r\npriority: u=6,i=?0\r\netag: \"688bf63c-3fd\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BylbF8b4P7nDK9m6e8ioCI%2BfQlBud4e0hDdV2NCTdkOcIetpe1y%2FI1Uv7mT6xCdrAdeF%2F2vUj%2BMSOLG545BnVjl3eS%2FeqoYE1pQhf3M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368555ffab120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1021,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"a298d42b237880c26af5e99af33f8a95","sha1":"e4ca29b67deeef9d361391ef724d14f10631ec4f","sha256":"af286214be4f2386ca1db230282ac4040e8c1d6b3fa1ef7a197fe81b2f2bbf68","sha512":"27f96078fba34acbfe9cc7b81c9abb82edf31dac7f6e255079ba810231313dc54d54da04c14dbfecee809b68fb9375a8ffdab46c0a1f72ee6be30ab00032a509","ssdeep":"","tlshash":"1511d862d648ad2c166509346b9399345fe0047d7c12a20bb50abb0f912070c36bb5bc","first_seen":"2025-09-20T07:51:22.599082Z","last_seen":"2025-12-25T07:11:19.463866Z","times_seen":7,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/css/bootstrap.min.css","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /css/bootstrap.min.css HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Thu, 31 Jul 2025 02:13:26 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"688ad146-279de\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ESUH9wuHrIjdwuZxR%2BhYBFUqrsf5vCPnZw8YXOo%2BVkVKnM7JWW6YeLGnkwlWELfOHIzkVLJVTSDYg%2FplPKOgs%2FCt1g96q%2FXU6C0bnjc%3D\"}]}\r\ncf-ray: 9b368548dec4120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162270,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65321), with CRLF line terminators","md5":"b05f9a0b7405d7c8c89c7465593dea81","sha1":"ac12399e32e8f3e3c2d947cdad4fb37f5b2f9b73","sha256":"5e125dfd65ea45a5af0bde6f71cbe72a8c4b4aa04f2d9c270ce65a6012567eb3","sha512":"76a7d2e604d42870b4798ff8ef6d73e7efb87817ad7ab018a63a458cae862d6babe48ae2adc0a9124e8af1aa6a8f0263ab19e5b1abc893b2eb1589a6c9091ec0","ssdeep":"1536:DS7CI4NT5+rMqFVD2DEBi8yNcuSElA3/uJpq3SYiLENM6HN260:u7sAGLq3SYiLENM6HN260","tlshash":"6ef352a6f5a0312de4a7c61964d0bafd152f8245d7224bfbf8273b6447892c70a73e4c","first_seen":"2023-07-08T22:57:24Z","last_seen":"2026-04-02T19:35:31.589676Z","times_seen":176,"resource_available":false,"data":null}},"time_used":1046,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":692,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/Tai_Xiu_nomal.webp","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/Tai_Xiu_nomal.webp HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19772\r\nlast-modified: Fri, 01 Aug 2025 01:27:08 GMT\r\npriority: u=4,i=?0\r\netag: \"688c17ec-4d3c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WF9Yh8p0RtPGbY1Fg8j8910PiQCmSQzqe%2Ff5L%2Fmp%2F7ZG9dEtVG4QaLodkWLG%2FT5F5rqTM%2BV9pAR21l7wMJO1BNThQQCee8KRusynnHI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548fed7120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19772,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"71ac4ae30157b195a0d8890bf53758e8","sha1":"03ce45dd122b1482f5da3bad34708c2a940c192f","sha256":"86867abdfb97ac466e8cc7bd58cb9265392ee21a1b8745570cfbdd235a2c9af5","sha512":"2b823d7ca614a87b995343ead132b7049377cf3cff6e9748e79d5962faf18f82dc708ea1eeb82c9e14c7009c446ce58527535db74338ab80af6fc7117e82b759","ssdeep":"384:XtvhQ3bnQDhx2AqVF35GUHBB+/lI9+D/WomEsc6J2XifyCgDRg/GNL:bQ3bnoTNqPHhwxmEL6uirgtg/Gx","tlshash":"7a92e1553725ed2c5a42aff8d53e29dc71e721d1091dd7a386f3983923cb8a88ef1402","first_seen":"2025-09-20T07:51:22.631721Z","last_seen":"2026-03-25T06:59:32.338197Z","times_seen":8,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/Tai_Xiu_MD5_nomal.webp","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/Tai_Xiu_MD5_nomal.webp HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19196\r\nlast-modified: Fri, 01 Aug 2025 01:29:10 GMT\r\npriority: u=4,i=?0\r\netag: \"688c1866-4afc\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cwOb8UgT2xaRusiKo32L3GiTgONcDPIc%2FlurF1zWzw0inX%2F4rurAJCms%2BzWbcWWLV%2B2wnh6wu6MMyIb5eTFE0EU%2BhOIWkgZo%2Fo%2BiDgY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548fed8120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19196,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a79402413a4bda30719f083c5456307d","sha1":"1c60bf673da9735cd2fc5e290a902eb77f51ad88","sha256":"8458c1bd191d6229b74eced156c83f007bf36849c2e9582f0adbe5dcfcba442d","sha512":"03b93d9e4d1f7a7b7f99238ef968801ef4f9d00d3f747e81620bc99abbe223db4090e66ea59c7cf254d6c0de50d64ba1601f31e592efd81dd7c00ff6fc1bf192","ssdeep":"384:R0+HDIp2EisWPUl5nzvrCldmewP90NTseiSmeX+puC3X3c5MNi0QP3Ru3Vm43d/o:dg2EeUHzvr4PwP2NTgxYmTM5MgRw3x3m","tlshash":"6c82c0a9100bf56fea9d22bb7720c34707d2e49ec49540f2e9d9371d83e550036b36d6","first_seen":"2025-09-20T07:51:22.61585Z","last_seen":"2026-03-25T06:59:32.349753Z","times_seen":8,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/volume_off.svg","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:48.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/volume_off.svg HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nCookie: _ga_HLQ807QTXG=GS2.1.s1766646648$o1$g0$t1766646648$j60$l0$h0; _ga=GA1.1.1883756816.1766646648; fullQueryString=a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:48 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Wed, 17 Sep 2025 07:46:20 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"68ca674c-e1e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2uVvvXoI7VA8aOrLVeUHeebDH8pa5lkOj1Gz%2FcLakjQMOtE22%2BuCd1ren%2FE2olzTLJsmdU%2FOzwKJS29cTExaFRr%2FaTn0WNEXfinMdt8%3D\"}]}\r\ncf-ray: 9b368550bf50120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3614,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2582e9fae8ebfbe5ce73788e24ec3075","sha1":"4ee04699a965bc3425765720ce402a05298b73bc","sha256":"6a4d07a7d133bd906c87801bd1c34388aacfa2a73902c6811a35666c5be79aba","sha512":"0bbe3896dc6574c9e37f632db77b67f438bcf92dc9766b3a01e00256ac23ee4e690ee3f33f20e2bc5c9ec8c85cb5f7930227e4534d6690f74de6e0e3ea890dca","ssdeep":"","tlshash":"3371b8a677b9e82de245a7e5ef4344b0229e91f17210c507de9dae5b60200c9dd2fec3","first_seen":"2025-09-20T07:51:22.614932Z","last_seen":"2025-12-25T07:11:19.467278Z","times_seen":7,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/Tai_Xiu.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/Tai_Xiu.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 35766\r\nlast-modified: Wed, 30 Jul 2025 09:24:16 GMT\r\npriority: u=4,i=?0\r\netag: \"6889e4c0-8bb6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c4Aexu7e2xKSyLTlwdfah1Tgg%2Fq%2Bl1V%2F%2BVfijTv9Z0ZugmSwECvOcIxcrht5uo%2B4JBR6y47yu77UMBiOf1FJgoIfhIcSUlKoxgMHyT0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548fedc120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35766,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 109 x 142, 8-bit/color RGBA, non-interlaced","md5":"930e9f2d098ea399b6410a252832ba64","sha1":"2959651ae2b5585622c65dc096fa59846dce7d44","sha256":"416e7e5e4c8a13f7977ade4f049795a01764b51fa8fd857353d3a4106903f268","sha512":"aa64c5441668698782a37ba326fd07db6b48f4a2d9967e522a3865bd49bb088e88b34394d7ea40bd358f3ba92530b0b295c06ca32de77b964f1419e533abd7c0","ssdeep":"768:57gZIJBQmtqO3JUHwqBEB0amI+KMTlLKYnKFr2nR2pVQVqTSUp9geD:uyJBQmtt3JUHwqajkleD1BVRSID","tlshash":"19f2f12ee603499da3c40c3ed3c304a99fa9e46e6104dc5d0e928693bf86f2dd794770","first_seen":"2025-09-20T07:51:22.602039Z","last_seen":"2025-12-25T07:11:19.468481Z","times_seen":7,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/poup_bg.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:48.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/poup_bg.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nCookie: _ga_HLQ807QTXG=GS2.1.s1766646648$o1$g0$t1766646648$j60$l0$h0; _ga=GA1.1.1883756816.1766646648; fullQueryString=a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 180094\r\nlast-modified: Mon, 18 Aug 2025 09:27:56 GMT\r\npriority: u=4,i=?0\r\netag: \"68a2f21c-2bf7e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uBi3BAmGbQkuDqfbhG6S3CpvF7N90y%2F7d70PThAkCrQ3EeA6qsyOVkYH0sXtXfjc%2BRyKUaWiOEoo%2FewTbZpHVQyG8CmbmjVhVofsyZg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368550ef55120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180094,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 510 x 463, 8-bit/color RGBA, non-interlaced","md5":"2d90884f1bd78375decaab6245a23177","sha1":"5c569e547af6305fcb6dbc3cf041672c20883c3d","sha256":"16c84ecefaf75bad7bf4634483beb33716dd8c4055cb8e57bebf7ec9e1a8b68b","sha512":"e9a27d10c45fb8603aaedb01a766764e32804de6fbca8d3fa1f1c2f50e8f2c2508e38fd51cc5faf2648d097ad8ee1236255110bb9b10466855fa64e8e3078a89","ssdeep":"3072:wUEJqV1gnMvvJGyO/FKRy0mhuB01k6ThCRl8Z6gEDxJh6ne0aec/WBW:J2a0yO/FKy0NBOk6TERl8ZGtJhP0ae8F","tlshash":"ba0422d8c5cfa8325a093554941278375a61cb0940f9c4fc3a5b44bf6eb08ebbf27b91","first_seen":"2025-09-20T07:51:22.607143Z","last_seen":"2025-12-25T07:11:19.469573Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1279,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":369,"receive":908,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/icon-chat.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/icon-chat.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 10170\r\nlast-modified: Wed, 30 Jul 2025 10:14:52 GMT\r\npriority: u=4,i=?0\r\netag: \"6889f09c-27ba\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uzc%2B0uC2y%2BJgau5yfNPhfT2HUxGOfTw%2F0afzeq8pVSG5FoPK4W%2Fxwa7r5J2BM7Fio2yVqBLYwv9VgO8ogBF8ymQInxl8pOoUTfVKlD8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548eeca120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10170,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 84, 8-bit/color RGBA, non-interlaced","md5":"d344732c2a7a6e0cc267ef65306b697d","sha1":"7780750a365ef8925e69e72b277e37029c84d8a6","sha256":"74e837368f8b5139e6471d90b2a7c47cb79207adb29569cd45eea1eb44daaaad","sha512":"ccd6f941a54eb38d4c800112e1f9a3151a709617a00175a0d4c36b01f981cd34a2199cd00019bb2ed9cf343e5c130cbb8461f269fd98c362dd772fb76299a493","ssdeep":"192:pSdznhR1Xn/aC5e7Qk7nd1o8kRz7uL4PNElM58BhTOyM2Mqms9Jz9ufJ/:QpnhzXnB5eskp1dkRz7uL4PNJ58XJz90","tlshash":"d122afe3fa28320dedc6e563826849b565e840bef5cf565c96f1b00b4167322c1981cc","first_seen":"2025-09-20T07:51:22.593293Z","last_seen":"2025-12-25T07:11:19.470681Z","times_seen":7,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/input_bg_active.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/input_bg_active.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 17181\r\nlast-modified: Thu, 04 Sep 2025 11:39:00 GMT\r\npriority: u=4,i=?0\r\netag: \"68b97a54-431d\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yh%2BqR02bWcSbZFg8wrN67fZ%2B7clc9qfrtQ8HoZmVoZp2FYfEScV4lfamXydVtsaRw5vaePETxa4sc7uTKeUok2TjMHBJL5uV3iJWids%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548fed0120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 488 x 65, 8-bit/color RGBA, non-interlaced","md5":"a05771a4ecd2324ebd5d1fea8e094c42","sha1":"4538d198eb10686115fb2a7c6efc52017c518ab4","sha256":"01c74bf6343ffce80f2198946db262b2d2abb7b8b711fffeba01f6188b72b945","sha512":"27b6005b7ee6fb94c0821f26ecec2d00519ea3f534d8ccc9628c7f19eb1d1741ef9ffa42f12e117d3c129db0db819a2792e44f0898e51456016801021bd09024","ssdeep":"384:1nx1GaDncQOvnjEwvZpVKOhTL2l3ML0jpa41+FmO:XoAnyz/V9Tqlc+pSh","tlshash":"6972d0f562ff2535d0a4bd992743b3a431a92550304bf453b23ad2416888d3dae3db21","first_seen":"2025-09-20T07:51:22.621939Z","last_seen":"2025-12-25T07:11:19.471759Z","times_seen":7,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/roll_to_detail.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/roll_to_detail.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2994\r\nlast-modified: Fri, 08 Aug 2025 14:46:40 GMT\r\npriority: u=4,i=?0\r\netag: \"68960dd0-bb2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9TKhejrc20gcc9%2FPYQRWZAMkhmwz0ZQo5OfQtj2%2Fw9Hec%2Fsp3CuGG1dRpiVLjRuIunwY31QjwXS%2BBfDHGJCB2%2FK0qj8AKz08TJXi%2BIs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548fed4120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2994,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 210 x 62, 8-bit colormap, non-interlaced","md5":"6517289c2a814c79ce79a7ccbd8ac757","sha1":"c94bd8f34fad3aa19dfd87834b05d6c97763d0ee","sha256":"72015e7212ea88f31024c29c3f7a087445091ebb9fbb3651b46d6a8559ed91be","sha512":"6adf3980103372b8b9f1f414582d7efc4cce9dc98af402f5de3092b1dfe9c37a09a2e36f108e5f18f72ba6020063ce57d393958e025663754e20727b1b8ff20d","ssdeep":"","tlshash":"fa512a98d700b89a59dadcf86e512331dd925ef806cbbbe5c01e79616e30dcce2a4512","first_seen":"2025-09-20T07:51:22.601177Z","last_seen":"2025-12-25T07:11:19.472948Z","times_seen":7,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/icon-eye.svg","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:48.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/icon-eye.svg HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nCookie: _ga_HLQ807QTXG=GS2.1.s1766646648$o1$g0$t1766646648$j60$l0$h0; _ga=GA1.1.1883756816.1766646648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:48 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Mon, 01 Sep 2025 13:10:48 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"68b59b58-3a4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZEzvqx8hX2jMrmuAf4fDv5iBWPLE2DxSrz4c1n8uooVMb4hCXmwMcGJPZ%2FxvPxwSWR%2FPiBb6B9eT%2BecHazAHD5Z96bAsWujmJgAkp7g%3D\"}]}\r\ncf-ray: 9b3685502f3a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":932,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9bb2c4b30289994e4eb67777f22641cc","sha1":"17b7aa78ca3c9eaaaeb8e664f00066c35795a475","sha256":"affaadd115eac2ace0dbd0b3f39b9c167e1280a32009250ae883a1f20dc5fe3a","sha512":"927d3ee8cce1116193b480057b6477426d7efa69875f0e9eec1b10de3db25fcc38dc10fed26f36c20573d74ca1c6f9130aa7f3d49608494dc03dd973d6d0687c","ssdeep":"","tlshash":"471199cfa6243ec095c8c3faf01511263f9f2472af58ca44c3568ccdba90956cb68ca4","first_seen":"2025-09-20T07:51:22.590632Z","last_seen":"2025-12-25T07:11:19.473967Z","times_seen":7,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/apple-touch-icon.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:49.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nCookie: _ga_HLQ807QTXG=GS2.1.s1766646648$o1$g0$t1766646648$j60$l0$h0; _ga=GA1.1.1883756816.1766646648; fullQueryString=a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 199942\r\nlast-modified: Fri, 15 Aug 2025 09:04:24 GMT\r\npriority: u=6,i=?0\r\netag: \"689ef818-30d06\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3OwAkAaMzErXj4C8v2QYSpcd1N0uQ4ddBXdW6040kWQPecEjLtF6yb4kN%2BgXzB2DafBc8FKOwxdrQAEcSDsJ9XRKpqJZovvPAOR6%2FNM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368555ffaa120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199942,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"0451b7120280dec453f9f6ce89514258","sha1":"6b7f0792154d186438a80320807e1c6bd1f11762","sha256":"28dbe1ba0897ed3d93477d0e66e625a5d83b1475256e69628119bea367cfa7c9","sha512":"23b9222485d607b5ea856c594f5ee00d7607a8f9ebdd3b53579b31b55eb92a66a95e8eea1121c473e778b5a827576c29840ea425ada49a9b19fae87650ab1923","ssdeep":"6144:SPwsNGA2yZ5wOxJIrLGRUxywJc9hPiIU7EFx8o3:yGARURrL6UZSoEFqo3","tlshash":"221413a6ea15fd32172a350dc41ac5facb87637db3a8f457110c09187905aeeca8b74f","first_seen":"2025-09-20T07:51:22.642776Z","last_seen":"2025-12-25T07:11:19.475042Z","times_seen":7,"resource_available":false,"data":null}},"time_used":703,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":526,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/art_right_nomal.webp","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/art_right_nomal.webp HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 138288\r\nlast-modified: Tue, 01 Jan 1980 11:00:00 GMT\r\npriority: u=4,i=?0\r\netag: \"12cf40b0-21c30\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ebdYwae6TGEz6TKLak2O%2BSUAI3zws69QFaoBCrFp72E35oHoxwkqWnC2XpjUTsOIY7%2FpZr46y%2FERqPqVBtDPvVqWw8HDsDAudGXMlRs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548fed2120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138288,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"41b0deda788aab06391eb69edbeea051","sha1":"4e181ec97b73c02acfee00779e601ca97284180b","sha256":"8dc0185b29a16e636ea494ffc03a3c3b5383210742be63032296861db3a6534e","sha512":"fa2ff31edbe25c94c518a9ee254c53d1721c1e464c269b83f3c8bdd58d012ab6235dcc47d6d48554cf40b35e0bd3ebf7cefa1e97cc9e037bc4a7910f293f7499","ssdeep":"3072:E5+cZLv1mUJvaBvGq0xTFNtpeFOcuFW+rJfnS/Mqnb+R7m+zomd8kh:E5/LdmUJvaO5ISkbgC+8s8kh","tlshash":"36d31245443a0e72e3e79c20d39a9c604c56d62c22f9f86ead2f506173ed86116fb3f6","first_seen":"2025-09-20T07:51:22.600146Z","last_seen":"2025-12-25T07:11:19.475965Z","times_seen":7,"resource_available":false,"data":null}},"time_used":939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":573,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/Bau_Cua.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/Bau_Cua.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 31958\r\nlast-modified: Wed, 30 Jul 2025 09:26:52 GMT\r\npriority: u=4,i=?0\r\netag: \"6889e55c-7cd6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SoH3KnIgaP3PjHMPnmyQNFuSWiCM46PONHTHVZMhgryI1TAbxDHvYfl7wSavgZHYMqW8kIac8A5UUbnG9u9pmvH9Ai4wX%2BfX0VO5ziM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3685490edf120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31958,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 105 x 143, 8-bit/color RGBA, non-interlaced","md5":"326f1ecab1a701521b5d1f34bd29ec90","sha1":"31b6213b33b7458cd4e26f42ceacc52519053a48","sha256":"8309b90aa18e6d73a611a34a2e185c7b9f2ff860c29757368506291ff6c71948","sha512":"685de797ea22fff012dfe782ab0bbface1ddb7872300edb8a7338fa893fa9e50328f298b67a8d09bda47483ad1691589470fa4c63ba7396600bedfa33373fb93","ssdeep":"768:328WG2D8OYs7G2A57Y1Uc743iKFJcni2OUX+v7V6PPxx/t2pu1TQg7rBZ:m8WG2gvN2oBc743iGAObJ6PP//t2ETQ8","tlshash":"04e2f1d03b2a3554a8943f1e78996dc88c31159c3a48b8aeff87957a3cb38c87f46115","first_seen":"2025-09-20T07:51:22.634939Z","last_seen":"2025-12-25T07:11:19.476947Z","times_seen":7,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/register_bg.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:48.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/register_bg.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nCookie: _ga_HLQ807QTXG=GS2.1.s1766646648$o1$g0$t1766646648$j60$l0$h0; _ga=GA1.1.1883756816.1766646648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 287022\r\nlast-modified: Wed, 30 Jul 2025 12:39:58 GMT\r\npriority: u=4,i=?0\r\netag: \"688a129e-4612e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x5n7auw1YWxcz0WfEj8PyYDpJkexl0ghCRfc3Qd0sOQ%2BsR7Or31VHqtL35o48WfhG2aFZWx%2FiD7bKtgDkM3axFDnDiYl%2FeN5kbLx7ss%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3685501f36120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":287022,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 690 x 512, 8-bit/color RGBA, non-interlaced","md5":"fd44735020c12486dfa478f349972368","sha1":"a5e9f1071a87508bf0e093e35f182c220bead3fd","sha256":"5666ed96d141d225631eddbf1fc98847294b407f9b893ef526e4c2a71ace2068","sha512":"3694eece933ba1d25e197e667cb492a637eb4873f0a35ace381addf84a0592c90e768c5f41e4705397733fbf2e6347c9da97ab064059d51db582dd0517daffc6","ssdeep":"6144:d01qcY2/1eyHvWSS92l19CqmLfax7s2u7lxu9US/Ng3cx0:CYETPW7S19CqmLaxyvlH3E0","tlshash":"32542340a336bbd235e5e4b742d9a74538eb06afcce2bd4e4fb64baf1f095445443890","first_seen":"2025-09-20T07:51:22.62298Z","last_seen":"2025-12-25T07:11:19.478034Z","times_seen":7,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-25T07:10:46.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 07:10:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nSFUOSdXJ7giTOWVrPcbXoPt0WdQMBBfrZrQW%2BEqG0%2Fz0TDI4WhDdGClArLC3e9IlumvYrdpCqn6372lFO6JEm3BFMdEF2kSaXPr\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b368544dea60b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery UI:1.12.1","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap:5","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"p5.js","description":"p5.js is a JavaScript library for creative coding, with a focus on making coding accessible and inclusive for artists, designers, educators, beginners, and anyone else.","website":"https://p5js.org","common_platform_enumeration":"","icon":"p5.js.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":104462,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"1ffc099f681293f6a926eca952bde90a","sha1":"25811ab763cdc4a1c2958e09c2699845361845c8","sha256":"370bbae83c060f45b6a418dd9b520ec43bffbc91b1d1ad7aea1db59587593ebf","sha512":"8c4fef8e7f453c4b2bbe8142483828af812240a0dd026fae59ff331973fd21c3295c704526d9f8a92c07ee66783797095f299160a61ed8cff0b89038c0a81bc4","ssdeep":"1536:F+Pi+0ce5opNElGPOZeapIlIb//Vm7/jC8j:F+Pi+0N5opN5PVGbILC8j","tlshash":"eaa3725badf310176853a0b82ffb67597a75c003d20acc687e9c3794cf86ad58963788","first_seen":"2025-10-08T08:38:19.739541Z","last_seen":"2025-12-25T07:11:19.478977Z","times_seen":5,"resource_available":true,"data":null}},"time_used":483,"timings":{"blocked":53,"dns":36,"connect":1,"send":0,"wait":375,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/icon-telegram.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/icon-telegram.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 10219\r\nlast-modified: Wed, 30 Jul 2025 10:14:14 GMT\r\npriority: u=4,i=?0\r\netag: \"6889f076-27eb\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5IrFAn5YjyohwZHrf69lCbh91YpZOrq9kF8Bg5FRl72WxF32%2B12Sxlu%2BghDTfhJPfwEPOq2esf76ql8QeG4UnmsuU5%2FfyD9nYhl8yeM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548eecc120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10219,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 84, 8-bit/color RGBA, non-interlaced","md5":"cc2241fa51bdaf284af6f835e2724962","sha1":"f543042c1e47926ee78663605bd43ad02e831085","sha256":"29b35e740c6e6260244a25fa7a2d009e7071e0d23606b77800535fc050d8c80d","sha512":"83fe515530d20118c3223cb6a67a8c47982712856b1efeccf50c7529a62f03521eb2b5cb395b443c1ad1b9513b667073337e2bcb9b80a793e65f020fb7a60a0b","ssdeep":"192:pS7qYElUFaoganJdOa2sZv5kZcj7i4KukuyOyjGt2NoJG2HIt4JlI:Q7TEmYOdOa2sfPS45kuXyj4lG2o6Je","tlshash":"3b22a07c900cdef1d9b2daeead164a98b15d3df24f4e18aef96b190c9108b71c031e19","first_seen":"2025-09-20T07:51:22.605186Z","last_seen":"2025-12-25T07:11:19.48006Z","times_seen":7,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/Aviator.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/Aviator.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 38446\r\nlast-modified: Wed, 30 Jul 2025 09:28:58 GMT\r\npriority: u=4,i=?0\r\netag: \"6889e5da-962e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YsUxkGr23b1tw38qRJI9WUhQGNP%2BmEfjweo%2BmZG0Ntg3psAGOP46M6FzxCtVnb0TbZxeuagq%2BV5oI46LygeLq4XLJAXpsGbK5h0L3yA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3685490ee0120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38446,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 109 x 149, 8-bit/color RGBA, non-interlaced","md5":"84a250d37d0cf20e28d3d2cd506a6c06","sha1":"b22b398e7a46ef3eb731222de045c62a0efdd155","sha256":"a5c0b1876cbcbfa3d36d63a464d17fb231116e5be25f2651018652e78534e283","sha512":"9b7c40b111909c2a1bf8d1d50ae7038ab39d38c2a76cc2d9eac0e25ae3c4cbb3e67196f5cd19b3a5e12495d491f8e68bb8fbc91ca6a3e509c6561b2fce2d5cfd","ssdeep":"768:gDOxhxMT9Gtj6swAxrwb/JrC0SVygSGrNnqQOPcIwGSXt1IaU35+:FhxyK9ryxrCoGCb5+U8","tlshash":"7903014d40294bea5bbae8f73739fd744113d68207999a1b4d2c25f5bce06be05ef808","first_seen":"2025-09-20T07:51:22.635913Z","last_seen":"2025-12-25T07:11:19.480955Z","times_seen":7,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WFMT2WMG","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtm.js?id=GTM-WFMT2WMG HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\nexpires: Thu, 25 Dec 2025 07:10:47 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 25 Dec 2025 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 107215\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":314944,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5950)","md5":"6467bc6ed40c2b641f0349539b0ed01e","sha1":"ba2489216fbc883aba1eae7057ec0c2e5a7830e0","sha256":"795e8b596faa1910f1e3da144d368168df59f3d7a787ef5b2b0d3cc55dd463d8","sha512":"2c384f9107eb96a8029804c5e1fcad4104367da5339e164ce6f43aa9207391fb69498f304c5aa8521377d9632f78bcac2e3270e7d381f0b87a16dcf976bb838c","ssdeep":"6144:oIeJq2bulKYv9VHDmHYmyBFz0nsywWCxRnc:pSbu7llAns3WCxO","tlshash":"526418cdb3c6742683a3a474503f118ba17b7992e84cd895f186ccd42e74aaa4237f7d","first_seen":"2025-12-25T07:11:19.481851Z","last_seen":"2025-12-25T07:11:19.481851Z","times_seen":1,"resource_available":true,"data":null}},"time_used":584,"timings":{"blocked":193,"dns":110,"connect":20,"send":0,"wait":39,"receive":49,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/or_line.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/or_line.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 1167\r\nlast-modified: Mon, 11 Aug 2025 13:40:20 GMT\r\npriority: u=4,i=?0\r\netag: \"6899f2c4-48f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3P0bjs3FG%2F8PIL1oYyMSztmrvd7VvqA5oRKaj%2BtbeAJKZxizZNzwVDVDbOlbbwdyYQzSyjKbeOp7pU1sreEPUYlgnFL6OtvgsfHNjAs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548fed1120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1167,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 333 x 16, 8-bit/color RGBA, non-interlaced","md5":"6db143d6246e11ff297f16ffb8570962","sha1":"d2b2899ebcdde2d2590bc3c9cba53f7abecff1c2","sha256":"7ace8323941a9de17c1a62ca4cc0d07cb9afd7d0989f0e5058c314443adfbee1","sha512":"8745720ee99d06dc3397007e4e71ff88c116dc9934b5ab6cde9bfba4426eae25677b3bd79934b799ef7f8a2cd8d3c4583107dcd964cdd30caeccf38ecc6806b9","ssdeep":"","tlshash":"f221d7c68e75959b054b6f2c920a43aace0270d80201940dfa963dd2c63b0de6e88e85","first_seen":"2025-09-20T07:51:22.606264Z","last_seen":"2025-12-25T07:11:19.482908Z","times_seen":7,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HLQ807QTXG\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-HLQ807QTXG\u0026cx=c\u0026gtm=4e5ca1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\nexpires: Thu, 25 Dec 2025 07:10:47 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143204\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":433667,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"3e49de7531d76b06f2c020b2b0b136e7","sha1":"dcafff74e0a75db8e08d853bcc10990c73608031","sha256":"2447b9844bc4c95b13b546f9475f00f315869c8e0fe8add72374f22fa304352c","sha512":"18492f0de13b17dc9bd7bf2eac989dab33dd33fc742cf660f6b355d2d9c9a3d65f28c3a46bedb63c6481fd16959413338843f0540087d20b5a4f3feebb5a6913","ssdeep":"6144:zT2Ie7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:zbC8bu7/1mbrnsy39WbMpb","tlshash":"0f941ace73c674269396e078503f118ba57b29e2b45cc896f189cce42d74a9a4237f7c","first_seen":"2025-12-25T07:11:19.483689Z","last_seen":"2025-12-25T07:11:19.483689Z","times_seen":1,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apirvp4.traskiprik.info/sw/collect?aff_id=hay.win","fqdn":"apirvp4.traskiprik.info","domain":"traskiprik.info","tld":"info"},"ip":{"addr":"104.21.36.196","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:48.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"traskiprik.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 07:28:54 GMT","end":"Thu, 29 Jan 2026 08:27:24 GMT"},"fingerprint":{"sha1":"85:83:3E:38:57:1E:05:83:B2:D6:F5:D1:74:8C:11:11:91:49:94:94","sha256":"FF:67:AC:22:09:84:68:44:0B:C8:83:A2:C8:14:76:B3:44:8F:CF:D6:47:63:9E:2F:5A:77:1E:5B:12:A9:A8:F3"}}},"request":{"raw":"GET /sw/collect?aff_id=hay.win HTTP/1.1\r\nHost: apirvp4.traskiprik.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://haywinclub.me\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 07:10:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-execution-time: 2.998 ms\r\nx-trace-id: 7fd97ae7-a229-4d00-b2c4-8d71a4b6ff85\r\nx-request-id: 02d400b1-1b9a-441a-9b87-9723e3ce2f72\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EM7xUK%2FmDmGw%2BbDGOEwUXn5TcX8%2BXO%2BLRPN5vA%2By%2BYiCE8fDdXo6mmIPlqewq%2F5O38p%2BFlhBSYoHLoGUtFKQhVPiqVA8i%2FkxKUnh1yq%2B0%2BIPTk20OLr8\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b368551aefd76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"549bda7ed4b9dfd4769d53d4255c9825","sha1":"cb70fa7df6d9ba98f0a317e85883eb2a44c041a3","sha256":"d4dbe546440a6713a139c454b4c3c38c00197f190edf34e4b2d89da84064a956","sha512":"ff7120cab46e1b123fd4ca34a5f3f226abe8556a7b1da54e87a23814dc1d78ae07dd6221ae1cc2360665ceb9ff4806c23ee47ab6e9a09198959582ca49b93bb6","ssdeep":"","tlshash":"30b014111cc07cf45dc30147d557751517fc1555c71500455c5d4f35d71457477c3511","first_seen":"2025-09-20T07:51:22.607957Z","last_seen":"2025-12-25T07:11:19.441221Z","times_seen":7,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":46,"dns":22,"connect":1,"send":0,"wait":274,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jqueryui/1.12.1/jquery-ui.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Nov 2025 20:49:06 GMT","end":"Fri, 13 Feb 2026 21:49:04 GMT"},"fingerprint":{"sha1":"9A:71:C8:6F:E2:4B:9A:91:7D:C8:4A:1D:79:98:2F:97:C1:85:D8:79","sha256":"4E:C5:BB:7A:81:A0:D9:00:73:8D:D5:57:59:3D:A0:C3:D3:BE:62:18:4E:6F:6D:98:DA:F0:90:94:5E:E0:0B:63"}}},"request":{"raw":"GET /ajax/libs/jqueryui/1.12.1/jquery-ui.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 57137\r\ncf-ray: 9b3685490fff49c5-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec4-3dee5\"\r\nlast-modified: Mon, 04 May 2020 16:11:48 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 518564\r\nexpires: Tue, 15 Dec 2026 07:10:47 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3PpPbZJJvrGLK%2BBfGFhzsf%2Bw%2FdJWl2pOdSHP066CqhF6Z5gzy%2F7yY%2Fd5VSdBtv8kElZpOV6RBIYafnJF%2F3qiuU77IbgYztdKr0DbqtH0KKgXUzcdIPc9nJuhu4Kf4meyHciPQFdy\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253669,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32074)","md5":"c15b1008dec3c8967ea657a7bb4baaec","sha1":"78489e580adaef931e6e5b131dab556c397e4a1a","sha256":"28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3","sha512":"bada3d9a5433aece7d57020b70b89161e2ca3cf6d2fdb4fbd5d6bf38405813071d35493c8d8232f83d7be91628a29d436be7fd9af918ae68f93022d9584b50b8","ssdeep":"3072:FkHOJD1g7SV7opRBbDrtnAcKYvFJi/5PLO1aG0qF2/nwOW16j:q9/KvjOVlFYQ16j","tlshash":"1f44f74d72003a2296dbe2a5103b2a0fa237515da605805cb53dcedf9e7de4431bbfb9","first_seen":"2023-03-07T01:19:34Z","last_seen":"2026-04-03T16:21:00.453087Z","times_seen":16442,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":9,"receive":3,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/volume_on.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/volume_on.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 7113\r\nlast-modified: Fri, 01 Aug 2025 07:48:16 GMT\r\npriority: u=4,i=?0\r\netag: \"688c7140-1bc9\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pPkxwGWJeoMNCH4U%2BRTTuiRQFj3goknDHka5dNonK0qX%2FnUwu1nZI8Ab6NYO6Yek8q8%2FvY2R1Wz8XOSmguK2HARSCXd7X2fxQluDCwE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548fecd120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7113,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 84, 8-bit/color RGBA, non-interlaced","md5":"456c1a80e083c05bd53d3c9186b8b83f","sha1":"e771c7bc807b960e11d57fcf0ef2f75ba71c1761","sha256":"449b0a6698ade03a3e0d9939e3f0925ba5971fd521ef2800da09f448d13b7a57","sha512":"c895a3bf1f2e21fad4e7e2cda51977c298301c2b66694968f7b733605ad2d0aec4d5b2a5ef8b740a803337edda6dffb4eec8ccf842fd6061d6ac88e415665d64","ssdeep":"192:OlkEu03gJVbg97SQlUvGf6NOPIs0tCbWos4lfY:8kI3awuQivQCHcbWos4S","tlshash":"c6e1bfe9ad7d0c1f6206c093555c4ac299b7cfb0ce6e6352692e9084b0cf78975b099d","first_seen":"2025-09-20T07:51:22.620943Z","last_seen":"2025-12-25T07:11:19.485158Z","times_seen":7,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/Bau_Cua_nomal.webp","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/Bau_Cua_nomal.webp HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17694\r\nlast-modified: Fri, 01 Aug 2025 01:27:56 GMT\r\npriority: u=4,i=?0\r\netag: \"688c181c-451e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=on%2B87Os9T9alWrSfl67ys3O1IW679OGq%2FeCuaXjnQArpm7olzOSggWlGw3Rae%2B8izWV99iRQZmOz%2FBCTAQjjUWJk8Sm4G5auAqB0Wo0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548feda120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17694,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e91efdf2217d31f8bf289bac1a57de02","sha1":"8223f3b2a0dc5157efb0e6050ec6543a0d73d420","sha256":"a39bb6143fe0f3ab611e2251d5d00fc5f77e1d9d0b6719f44c3f0eb540af4c21","sha512":"7b71d482c5e0ed3f8a661c4ed02a0c73d806610ac164e396865440c461cbffb267400a890cf8416fc33a0f77e6f6a2e76e7ef36be674ba9b6b6245a719ac5c17","ssdeep":"384:iTWiwiseN7WHN0tP9rgCHoyCruGgihG+H/6G7Tm9YvFAf:iTAijNiHNqP9BIwGAAFlWf","tlshash":"1f82d0c66d0b4916f4311294e91daa86b360b09fdcbc1a06d9bb5f0b8707104da2fb06","first_seen":"2025-09-20T07:51:22.632943Z","last_seen":"2026-03-25T06:59:32.363564Z","times_seen":8,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.dmca.com/Badges/DMCABadgeHelper.min.js","fqdn":"images.dmca.com","domain":"dmca.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.dmca.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Nov 2025 14:11:36 GMT","end":"Wed, 11 Feb 2026 14:11:35 GMT"},"fingerprint":{"sha1":"D0:D0:E7:F6:3C:34:21:08:97:86:15:92:7E:27:AD:71:88:4B:1C:96","sha256":"A0:C3:10:7A:20:67:69:7B:94:55:B9:7E:E2:D8:42:66:5A:99:27:3F:C8:89:E6:B3:05:1A:72:55:75:49:0D:A6"}}},"request":{"raw":"GET /Badges/DMCABadgeHelper.min.js HTTP/1.1\r\nHost: images.dmca.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1574055\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\netag: \"26b181f16d28d51:0\"\r\nlast-modified: Fri, 21 Jun 2019 20:14:34 GMT\r\nx-powered-by: ASP.NET\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:29:10\r\ncdn-edgestorageid: 830\r\nlink: \u003chttps://dmca-images.azurewebsites.net/Badges/DMCABadgeHelper.min.js\u003e; rel=\"canonical\"\r\ncdn-requestid: 1f3f74bffe7dda5a489de30f64e002b2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":465,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bac6fb686027b93b6565e1b1e5e8e213","sha1":"e585bdd95488444f0ce2888d8281dbdaf73ca2ea","sha256":"e8021f1a9dad409f7e699457ac334653bf800464df69900237c4de1c29e275d0","sha512":"adee788b03089ef933d40b72a9ffe69742f4873788de6f20ebed6b2abc07895ff8f4b176a6bbfaee231ad27f479bad94e269b14cefdc569ece7e3d8dd9be8500","ssdeep":"","tlshash":"21f0aba88be2043e1d43f470593da74128b6406b300ecc01fd0cd6984f84b7913be9ed","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-04-03T19:18:30.912138Z","times_seen":12380,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":12,"connect":1,"send":0,"wait":1,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/logo.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 51735\r\nlast-modified: Wed, 30 Jul 2025 06:04:38 GMT\r\npriority: u=4,i=?0\r\netag: \"6889b5f6-ca17\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QtiBNnxNy1gArkWuC0dTOY4cT0MrBo%2FtFh65aq%2BIEr8hYEnfu4yMSOsKOtoIaFqceaeMobZ8Nhxy4HiP2M6dZCwom4Kb3dY6hMXj%2Fmg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548eec9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51735,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 202 x 141, 8-bit/color RGBA, non-interlaced","md5":"b40e863b5231fef01edbcafd85166b52","sha1":"3e6d59b7f8ac05d81471fb626e9e24258069aa0a","sha256":"8781426439adc2a857f868c3d26b9a40c88916569d29299f8cd3807689a96af3","sha512":"32a83c8bf49f513a9d02072b6801e7930a44d567335d0dd69c9bc2fb581cea6ff798e5f6ce7d725c574b45d7021ddcccd04c3d6d2262cb462c5fcade2ed9ad9d","ssdeep":"1536:ryKi+k9uL9GmAupr2boPftSUkT/g7vVrDXroCadn:ryKi+wyGmAupr2cHKLghrLroRdn","tlshash":"e83302bc28af6c598e42207a33524097832f1fb1cd3ad91894bd1e0ab97d6df7196871","first_seen":"2025-09-20T07:51:22.639443Z","last_seen":"2026-03-31T18:57:17.559922Z","times_seen":35,"resource_available":false,"data":null}},"time_used":701,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":346,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/group_line.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/group_line.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 1300\r\nlast-modified: Wed, 30 Jul 2025 10:01:18 GMT\r\npriority: u=4,i=?0\r\netag: \"6889ed6e-514\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tppZbE1QdHKM2Unk5otewwkItgZn8FnXx5MSz15ssALinHEGB0NJaGKh5X6USuDaZT3Z8Qk0f2WPhlj97MOLodVL9kjus993EcLTVfQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b368548fed3120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1300,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1171 x 3, 8-bit colormap, non-interlaced","md5":"6864ef9380283cf1eabe567dcbcbb2cd","sha1":"265f0d827e981e489b294e48f9da4ff24a548a37","sha256":"adf53158ea4915dc7ddf9e820cef01daf3c59e9d29722758ace83e7e6e81f3ef","sha512":"1042abcd2321807c24d839be09f73c3c06493c03d314fa252c495da4d1403e52faed0a22d2fd6ed4f4ec405ada45463611b636776aa1a2e1adc7a807ac093afb","ssdeep":"","tlshash":"812140cd8b20c929ca941d64ec062d44f8c0ddf8d1dcde8bdbc4bc84293366b35a898b","first_seen":"2025-09-20T07:51:22.611195Z","last_seen":"2025-12-25T07:11:19.487671Z","times_seen":7,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"haywinclub.me/img/dmca_logo.png","fqdn":"haywinclub.me","domain":"haywinclub.me","tld":"me"},"ip":{"addr":"104.21.96.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite","date":"2025-12-25T07:10:47.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"haywinclub.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Dec 2025 14:58:50 GMT","end":"Sun, 08 Mar 2026 15:56:21 GMT"},"fingerprint":{"sha1":"44:D2:A5:46:6C:41:B4:D2:FE:80:49:68:71:FA:6C:A4:50:18:39:56","sha256":"9C:3B:CF:0E:B3:96:28:6B:76:39:17:F0:4F:8D:69:DB:57:AE:B5:B6:73:E4:24:2C:78:93:D8:59:8B:50:A1:C7"}}},"request":{"raw":"GET /img/dmca_logo.png HTTP/1.1\r\nHost: haywinclub.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://haywinclub.me/?a=32188b41ed6c0f8077fa8d8226388486\u0026utm_campaign=anw\u0026utm_source=clickadu\u0026utm_medium=popunder\u0026utm_term={zoneid}\u0026utm_content=mainsite\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 25 Dec 2025 07:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 7684\r\nlast-modified: Wed, 17 Sep 2025 07:46:20 GMT\r\npriority: u=4,i=?0\r\netag: \"68ca674c-1e04\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NKYurv9Se%2F3Myg77NNOxAb1ioF0QoL4a6GabB6A6o7tBieXbY3wac8JdqGRRlPKKBdv2xkovw7PN6b05NqFIxZjBn7r7jLzVWgeLSR0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b3685490ee1120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7684,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 398 x 127, 8-bit colormap, non-interlaced","md5":"756d7548bd53d86d8ad6a7ec4336c79f","sha1":"339bf28ae4c05b73f4b4a505141214650e42e2ae","sha256":"3a8163f994d4be980f75f75a96df104abb16838bb8065b42cd44227e527ccb03","sha512":"bf5a22e2b908e272d7a40dcc8140602e1371d7eb028e11054bff92c43db86a0d63067ce63c82687398e981f6b9c277ce22df01ef2228567bef87ddf987d18f76","ssdeep":"192:YSmfZcJZsSFBfViQcbzG6nuQPWUzRq1MWtbP4kA1Ro:fmfZcttiQIXnuQXqWQ5As","tlshash":"cff19fc9c27ecf6269052397f0f145ba537d3cfd2c0a729e13adb964adb32c5609a090","first_seen":"2025-09-20T07:51:22.633934Z","last_seen":"2025-12-25T07:11:19.488552Z","times_seen":7,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}