{"report_id":"2fd97d01-7948-46dc-9901-ab6a4e98cff5","version":0,"status":"done","tags":[],"date":"2026-10-06T21:58:30Z","url":{"schema":"http","addr":"ww38.ladrake.bet","fqdn":"ww38.ladrake.bet","domain":"ladrake.bet","tld":"bet"},"ip":{"addr":"185.53.179.200","port":0,"asn":206834,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"ww38.ladrake.bet/","fqdn":"ww38.ladrake.bet","domain":"ladrake.bet","tld":"bet"},"title":"ladrake.bet","dom":{"size":40773,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16142)","md5":"9b9b8bf750eb88d1f338515802db3d9e","sha1":"bbd5e7f2fb86ec190dd9a2628d70b35951db06b7","sha256":"9b2bd62866f18022c0365b13e7a531a0f610e87c3ef3924bdcd62f8511319f82","sha512":"2de8e08332a4301db18c9058179df3ec8f15afbecb356c42bafa4379baf520685c6f0f8c2d53a7fc26e41dd3df441b94cd7f9b43ad50b1d3e2e79f29d56ef594","ssdeep":"768:75/ko5XssDxpcuch9hYE2OF1lkAcx3ZbMSvllZNNNPvRfjD3Qqv:1/xiucvh5Lcx3ZbMSvllZNNNPvRfjD3N","tlshash":"37033b3172f1267d925b412f32b9a75cb178a670d94e4874e0fcd81c6a49ba20772fb8","dom_hash":"domhash3e784947cdacc7405617f4aa6b9e1e9c","first_seen":"2026-10-06T21:58:41.583893Z","last_seen":"2026-10-06T21:58:41.583893Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ww38.ladrake.bet","fqdn":"ww38.ladrake.bet","domain":"ladrake.bet","tld":"bet"},"ip":{"addr":"185.53.179.200","port":0,"asn":206834,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-10T21:58:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"ww38.ladrake.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"realtimesearchresults.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"realtimesearchresults.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"euob.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"yfdpco5.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"d.delivery.consentmanager.net","ip":{"addr":"94.237.93.104","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"domain_registered":"2018-05-02","domain_rank":210318,"first_seen":"2021-07-25T16:27:48Z","last_seen":"2026-10-06T06:05:17.949568Z","alert_count":0,"request_count":6,"received_data":15448,"sent_data":5149,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}]},{"fqdn":"obseu.northwavepoint.com","ip":{"addr":"52.48.54.225","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-04-16T09:06:21.210986Z","last_seen":"2026-10-06T15:11:55.510083Z","alert_count":7,"request_count":7,"received_data":7360,"sent_data":6258,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.consentmanager.net","ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"domain_registered":"2018-05-02","domain_rank":76668,"first_seen":"2021-02-08T22:33:57Z","last_seen":"2026-10-01T17:47:59.506061Z","alert_count":0,"request_count":3,"received_data":731711,"sent_data":1582,"comment":"","tags":null,"fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}]},{"fqdn":"yfdpco5.com","ip":{"addr":"208.91.196.46","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"domain_registered":"2025-03-20","domain_rank":0,"first_seen":"2026-06-06T10:05:34.567086Z","last_seen":"2026-10-01T12:51:07.333007Z","alert_count":1,"request_count":1,"received_data":27628,"sent_data":789,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"l.cdn-fileserver.com","ip":{"addr":"172.67.181.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-08","domain_rank":962880,"first_seen":"2025-04-11T15:28:22.753596Z","last_seen":"2026-10-05T21:41:05.044345Z","alert_count":3,"request_count":3,"received_data":2714,"sent_data":8243,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"s.cdn-fileserver.com","ip":{"addr":"172.67.181.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-08","domain_rank":1473336,"first_seen":"2025-04-11T18:11:28.393379Z","last_seen":"2026-10-05T22:47:07.764572Z","alert_count":3,"request_count":3,"received_data":38990,"sent_data":1735,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"realtimesearchresults.com","ip":{"addr":"104.21.11.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-14","domain_rank":464056,"first_seen":"2025-03-28T05:14:07.92032Z","last_seen":"2026-10-06T15:11:55.563055Z","alert_count":2,"request_count":1,"received_data":72490,"sent_data":1487,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"euob.northwavepoint.com","ip":{"addr":"13.249.8.22","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-04-16T09:06:21.216693Z","last_seen":"2026-10-06T15:11:55.804466Z","alert_count":1,"request_count":1,"received_data":142039,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"ww38.ladrake.bet","ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"domain_registered":"2025-03-06","domain_rank":0,"first_seen":"2026-10-06T21:58:35.57673Z","last_seen":"2026-10-06T21:58:35.57673Z","alert_count":4,"request_count":4,"received_data":40635,"sent_data":2762,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=949\u0026%21CU=T1NtYII~O~NiTO5tItONtahOT5aza~505XN1\u0026%21Eh~=%21D1\u0026%2A%2AEU=%7B%22%2A%2AXX%22%3A%22%298%22%2C%22%2A%2AXB3%22%3A%22p3%2A1D%22%2C%22%2A%2ACM%22%3A%22%22%2C%22%2A%2A%2AX%22%3A%220T%22%2C%22%2A%2AbCM%22%3A%22%22%7D\u0026%2ACb1=iit5WaNI\u0026%2AX=0T\u0026%2AYUJvU=\u00261XJCU=\u00263MEM=\u00263U%2AMJ=\u00263YDRXXR1WM=\u0026B%2AX1=ji0g5\u0026C%2ACU=T\u0026CDBXE=NA9Zsgt9F%3AeS9%7CO1N9%3A~IHrCyryCPr7P%7CO%29N9%3AyCdrP7ryyHrI%7C8AN9%3AyCdrP7ryyHryd~\u0026DBl=\u0026Dp1JJ=i\u0026EzB3M1=Up%21Eh\u0026J1nyJE=_BBM%3A%2F%2FEhUJhw1rY1B\u0026MCU=N.8fig%28AN\u0026U1Xppp=\u0026UpJ~=i\u0026XBMCU=\u0026XCU=NQSaTg064\u0026XJCU=N5NtitTIa\u0026XUl=80g5a\u0026XX=%298\u0026X_Dp0=I.8itGI5g\u0026X_Dpz=%21%2Al5RCDBX\u0026Y1=T\u0026YCU=\u0026YCUlz=\u0026YUJvU=\u0026Yh1=\u0026ZYCU=\u0026_BBM%2A=i\u0026hMQy=\u0026hU%21phCD=\u0026hUBi=\u0026hUBz=\u0026hUl=\u0026hXB=.KvK~25D2b%2F~W%2FhWK~byK5D%2F05J2%29%2F~20WK\u0026hY~EqCU=lz\u0026htmlsrc=1\u0026kkdd=nW%7C%21%7Ch3un%2AW9AH\u0026lC=igIi0z0NgziTI5NiTTg\u0026p%2AMh=T\u0026q%2A_M=T\u0026qE%2ABM=T\u0026tpid=\u0026wU=\u0026wqJ~=\u0026xUMJ=i\u0026xUMJXD%2AB=\u0026y%2AM1D~=T\u0026yxU=5\u0026~%2A=\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001791323872898032757816326589\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153886947282703404%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=8y_3XBAJ3IcS87_IpjSex2s4IrBLRwZQHx_oWc8Rhhwr4kDI87fMPMhhwUl7KD4TQTZ-LCoQWc6633yWLiLt44ViTvlkHHYmJyqA2btBKX_gUhdY0Z6rTaGUdyy9KKVoz-EqSDVoP_s4ahI71YMdkyCG3uC_vwRE_VIrBagSRc04SWEFea-6V6ur-5bJHCA4fDQJ1YtjYPA%3D\u0026tchkpts=%7B%22prel2%22%3A1791323873068%7D\u0026stime=1791323873068\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528%252528xi%253D%25257B%252522%252528%252528GG%252522%25253A%252522qm%252522%25252C%252522%252528%252528GOB%252522%25253A%252522vB%252528bc%252522%25252C%252522%252528%252528Yz%252522%25253A%252522%252522%25252C%252522%252528%252528%252528G%252522%25253A%252522JN%252522%25252C%252522%252528%252528uYz%252522%25253A%252522%252522%25257D%2526%252528G%253DJN%2526%252528Yub%253D33.PKX2H%2526%252528_iIDi%253D%2526%25252AQIy%253D%2526%25252Ai%253D%2526-_Yi%253D%25265GO%253DEMDMy9Pc9u%25252FyK%25252F5KMyutMPc%25252FJPI9q%25252Fy9JKM%25265_yxQYi%253Dah%25265iO3%253D%25265iOh%253D%25265ia%253D%25265ijv5Yc%253D%25265zTt%253D%2526B_cSGGSbKz%253D%2526Bi%252528zI%253D%2526Bzxz%253D%2526GG%253Dqm%2526GIYi%253D2P2.3.NHX%2526GOzYi%253D%2526GUcvJ%253DHEm3.fHPk%2526GUcvh%253Dj%252528aPSYcOG%2526GYi%253D2TpXNkJ4F%2526Gia%253DmJkPX%2526IbetIx%253DUOOz%25253A%25252F%25252Fx5iI5%25252Abo_bO%2526O%252528Gb%253DW3JkP%2526Q%252528Uz%253DN%2526Qx%252528Oz%253DN%2526UOOz%252528%253D3%2526Y%252528Yi%253DN%2526YcOGx%253D2R1-%252521k.1l%25253Arp1%25257C6b21%25253AyHnoYtotYVodV%25257C6q21%25253AtY~oVdottnoH%25257CmR21%25253AtY~oVdottnot~y%2526_5b%253D%2526_Yi%253D%2526_Yiah%253D%2526_b%253DN%2526_iIDi%253D%2526aY%253D3kH3JhJ2kh3NHP23NNk%2526bGIYi%253D%2526cOa%253D%2526cvbII%253D3%2526htmlsrc%253D1%2526ibGvvv%253D%2526ivIy%253D3%2526jYi%253DNb2._HHy6y23N6P.H.62.X56NPXhXyPJPG2b%2526jx5y%253Djcb%2526kkdd%253Duu%25257Cu%25257C9%25252A3nHA%2526t%252528zbcy%253DN%2526tpid%253D%2526twi%253DP%2526v%252528z5%253DN%2526wizI%253D3%2526wizIGc%252528O%253D%2526xhOBzb%253Divjx5%2526y%252528%253D%2526zYi%253D2Emg3k0R2%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"104.21.11.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe43622b86a9293f7d94436142bdfdc6","sha1":"01ef22d8f3292bea2b0cfa63e49be5ee758899eb","sha256":"f06061820c8cc9e6d88231bddef898d9ce4a8326f6e00e30e0aca3f924ad3dd4","sha512":"a8cf2feaa0a396472300a52b5d37f123be2249d274c947da255ba4f99a644139d92e010b65461b9575a4e63cddb1e717a085282c435d182186b0e51885f654d5","ssdeep":"","tlshash":"3e70008880202a0000e0080c030323b0238080a88cc28000822ea0033080e030288a8a","size":24,"data":"","first_seen":"2025-03-08T00:25:13.703666Z","last_seen":"2026-10-08T00:39:03.684653Z","times_seen":223520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=949\u0026%21CU=T1NtYII~O~NiTO5tItONtahOT5aza~505XN1\u0026%21Eh~=%21D1\u0026%2A%2AEU=%7B%22%2A%2AXX%22%3A%22%298%22%2C%22%2A%2AXB3%22%3A%22p3%2A1D%22%2C%22%2A%2ACM%22%3A%22%22%2C%22%2A%2A%2AX%22%3A%220T%22%2C%22%2A%2AbCM%22%3A%22%22%7D\u0026%2ACb1=iit5WaNI\u0026%2AX=0T\u0026%2AYUJvU=\u00261XJCU=\u00263MEM=\u00263U%2AMJ=\u00263YDRXXR1WM=\u0026B%2AX1=ji0g5\u0026C%2ACU=T\u0026CDBXE=NA9Zsgt9F%3AeS9%7CO1N9%3A~IHrCyryCPr7P%7CO%29N9%3AyCdrP7ryyHrI%7C8AN9%3AyCdrP7ryyHryd~\u0026DBl=\u0026Dp1JJ=i\u0026EzB3M1=Up%21Eh\u0026J1nyJE=_BBM%3A%2F%2FEhUJhw1rY1B\u0026MCU=N.8fig%28AN\u0026U1Xppp=\u0026UpJ~=i\u0026XBMCU=\u0026XCU=NQSaTg064\u0026XJCU=N5NtitTIa\u0026XUl=80g5a\u0026XX=%298\u0026X_Dp0=I.8itGI5g\u0026X_Dpz=%21%2Al5RCDBX\u0026Y1=T\u0026YCU=\u0026YCUlz=\u0026YUJvU=\u0026Yh1=\u0026ZYCU=\u0026_BBM%2A=i\u0026hMQy=\u0026hU%21phCD=\u0026hUBi=\u0026hUBz=\u0026hUl=\u0026hXB=.KvK~25D2b%2F~W%2FhWK~byK5D%2F05J2%29%2F~20WK\u0026hY~EqCU=lz\u0026htmlsrc=1\u0026kkdd=nW%7C%21%7Ch3un%2AW9AH\u0026lC=igIi0z0NgziTI5NiTTg\u0026p%2AMh=T\u0026q%2A_M=T\u0026qE%2ABM=T\u0026tpid=\u0026wU=\u0026wqJ~=\u0026xUMJ=i\u0026xUMJXD%2AB=\u0026y%2AM1D~=T\u0026yxU=5\u0026~%2A=\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001791323872898032757816326589\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153886947282703404%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=8y_3XBAJ3IcS87_IpjSex2s4IrBLRwZQHx_oWc8Rhhwr4kDI87fMPMhhwUl7KD4TQTZ-LCoQWc6633yWLiLt44ViTvlkHHYmJyqA2btBKX_gUhdY0Z6rTaGUdyy9KKVoz-EqSDVoP_s4ahI71YMdkyCG3uC_vwRE_VIrBagSRc04SWEFea-6V6ur-5bJHCA4fDQJ1YtjYPA%3D\u0026tchkpts=%7B%22prel2%22%3A1791323873068%7D\u0026stime=1791323873068\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528%252528xi%253D%25257B%252522%252528%252528GG%252522%25253A%252522qm%252522%25252C%252522%252528%252528GOB%252522%25253A%252522vB%252528bc%252522%25252C%252522%252528%252528Yz%252522%25253A%252522%252522%25252C%252522%252528%252528%252528G%252522%25253A%252522JN%252522%25252C%252522%252528%252528uYz%252522%25253A%252522%252522%25257D%2526%252528G%253DJN%2526%252528Yub%253D33.PKX2H%2526%252528_iIDi%253D%2526%25252AQIy%253D%2526%25252Ai%253D%2526-_Yi%253D%25265GO%253DEMDMy9Pc9u%25252FyK%25252F5KMyutMPc%25252FJPI9q%25252Fy9JKM%25265_yxQYi%253Dah%25265iO3%253D%25265iOh%253D%25265ia%253D%25265ijv5Yc%253D%25265zTt%253D%2526B_cSGGSbKz%253D%2526Bi%252528zI%253D%2526Bzxz%253D%2526GG%253Dqm%2526GIYi%253D2P2.3.NHX%2526GOzYi%253D%2526GUcvJ%253DHEm3.fHPk%2526GUcvh%253Dj%252528aPSYcOG%2526GYi%253D2TpXNkJ4F%2526Gia%253DmJkPX%2526IbetIx%253DUOOz%25253A%25252F%25252Fx5iI5%25252Abo_bO%2526O%252528Gb%253DW3JkP%2526Q%252528Uz%253DN%2526Qx%252528Oz%253DN%2526UOOz%252528%253D3%2526Y%252528Yi%253DN%2526YcOGx%253D2R1-%252521k.1l%25253Arp1%25257C6b21%25253AyHnoYtotYVodV%25257C6q21%25253AtY~oVdottnoH%25257CmR21%25253AtY~oVdottnot~y%2526_5b%253D%2526_Yi%253D%2526_Yiah%253D%2526_b%253DN%2526_iIDi%253D%2526aY%253D3kH3JhJ2kh3NHP23NNk%2526bGIYi%253D%2526cOa%253D%2526cvbII%253D3%2526htmlsrc%253D1%2526ibGvvv%253D%2526ivIy%253D3%2526jYi%253DNb2._HHy6y23N6P.H.62.X56NPXhXyPJPG2b%2526jx5y%253Djcb%2526kkdd%253Duu%25257Cu%25257C9%25252A3nHA%2526t%252528zbcy%253DN%2526tpid%253D%2526twi%253DP%2526v%252528z5%253DN%2526wizI%253D3%2526wizIGc%252528O%253D%2526xhOBzb%253Divjx5%2526y%252528%253D%2526zYi%253D2Emg3k0R2%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"104.21.11.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0d57039fe1d5bb3459a1adcbb0904a1","sha1":"6a0c998f9548bcd70f1650c73cf341d6c5450cf9","sha256":"5ff505753c285b08fe46b4d12fee594193d21ef816f3a0c0b8158e4da9ccedb0","sha512":"e5def8a7c43c11bfd49d7d836a73bd6a4b85e159a031ef139f10331fc79978de7b1912a9ee73c8e1cfc9219917ef000a314cfb880c87533a6561631a08e8a153","ssdeep":"192:32yPcepvbkdn1Kvv6owwnkMXTSH3MMriSFQ9Dfe2v6MLhRPUm11128fxW9Vi:Gy/MSuskMXTSH3MMriSFQ9Dfe2v6Iw/K","tlshash":"90e1714984b5cee1016d3485bc3c2c9d68d93d4ef9cc356edb86ee94ac1f8bada01018","size":6802,"data":"","first_seen":"2026-10-06T21:58:41.650896Z","last_seen":"2026-10-06T21:58:41.650896Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=949\u0026%21CU=T1NtYII~O~NiTO5tItONtahOT5aza~505XN1\u0026%21Eh~=%21D1\u0026%2A%2AEU=%7B%22%2A%2AXX%22%3A%22%298%22%2C%22%2A%2AXB3%22%3A%22p3%2A1D%22%2C%22%2A%2ACM%22%3A%22%22%2C%22%2A%2A%2AX%22%3A%220T%22%2C%22%2A%2AbCM%22%3A%22%22%7D\u0026%2ACb1=iit5WaNI\u0026%2AX=0T\u0026%2AYUJvU=\u00261XJCU=\u00263MEM=\u00263U%2AMJ=\u00263YDRXXR1WM=\u0026B%2AX1=ji0g5\u0026C%2ACU=T\u0026CDBXE=NA9Zsgt9F%3AeS9%7CO1N9%3A~IHrCyryCPr7P%7CO%29N9%3AyCdrP7ryyHrI%7C8AN9%3AyCdrP7ryyHryd~\u0026DBl=\u0026Dp1JJ=i\u0026EzB3M1=Up%21Eh\u0026J1nyJE=_BBM%3A%2F%2FEhUJhw1rY1B\u0026MCU=N.8fig%28AN\u0026U1Xppp=\u0026UpJ~=i\u0026XBMCU=\u0026XCU=NQSaTg064\u0026XJCU=N5NtitTIa\u0026XUl=80g5a\u0026XX=%298\u0026X_Dp0=I.8itGI5g\u0026X_Dpz=%21%2Al5RCDBX\u0026Y1=T\u0026YCU=\u0026YCUlz=\u0026YUJvU=\u0026Yh1=\u0026ZYCU=\u0026_BBM%2A=i\u0026hMQy=\u0026hU%21phCD=\u0026hUBi=\u0026hUBz=\u0026hUl=\u0026hXB=.KvK~25D2b%2F~W%2FhWK~byK5D%2F05J2%29%2F~20WK\u0026hY~EqCU=lz\u0026htmlsrc=1\u0026kkdd=nW%7C%21%7Ch3un%2AW9AH\u0026lC=igIi0z0NgziTI5NiTTg\u0026p%2AMh=T\u0026q%2A_M=T\u0026qE%2ABM=T\u0026tpid=\u0026wU=\u0026wqJ~=\u0026xUMJ=i\u0026xUMJXD%2AB=\u0026y%2AM1D~=T\u0026yxU=5\u0026~%2A=\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001791323872898032757816326589\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153886947282703404%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=8y_3XBAJ3IcS87_IpjSex2s4IrBLRwZQHx_oWc8Rhhwr4kDI87fMPMhhwUl7KD4TQTZ-LCoQWc6633yWLiLt44ViTvlkHHYmJyqA2btBKX_gUhdY0Z6rTaGUdyy9KKVoz-EqSDVoP_s4ahI71YMdkyCG3uC_vwRE_VIrBagSRc04SWEFea-6V6ur-5bJHCA4fDQJ1YtjYPA%3D\u0026tchkpts=%7B%22prel2%22%3A1791323873068%7D\u0026stime=1791323873068\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528%252528xi%253D%25257B%252522%252528%252528GG%252522%25253A%252522qm%252522%25252C%252522%252528%252528GOB%252522%25253A%252522vB%252528bc%252522%25252C%252522%252528%252528Yz%252522%25253A%252522%252522%25252C%252522%252528%252528%252528G%252522%25253A%252522JN%252522%25252C%252522%252528%252528uYz%252522%25253A%252522%252522%25257D%2526%252528G%253DJN%2526%252528Yub%253D33.PKX2H%2526%252528_iIDi%253D%2526%25252AQIy%253D%2526%25252Ai%253D%2526-_Yi%253D%25265GO%253DEMDMy9Pc9u%25252FyK%25252F5KMyutMPc%25252FJPI9q%25252Fy9JKM%25265_yxQYi%253Dah%25265iO3%253D%25265iOh%253D%25265ia%253D%25265ijv5Yc%253D%25265zTt%253D%2526B_cSGGSbKz%253D%2526Bi%252528zI%253D%2526Bzxz%253D%2526GG%253Dqm%2526GIYi%253D2P2.3.NHX%2526GOzYi%253D%2526GUcvJ%253DHEm3.fHPk%2526GUcvh%253Dj%252528aPSYcOG%2526GYi%253D2TpXNkJ4F%2526Gia%253DmJkPX%2526IbetIx%253DUOOz%25253A%25252F%25252Fx5iI5%25252Abo_bO%2526O%252528Gb%253DW3JkP%2526Q%252528Uz%253DN%2526Qx%252528Oz%253DN%2526UOOz%252528%253D3%2526Y%252528Yi%253DN%2526YcOGx%253D2R1-%252521k.1l%25253Arp1%25257C6b21%25253AyHnoYtotYVodV%25257C6q21%25253AtY~oVdottnoH%25257CmR21%25253AtY~oVdottnot~y%2526_5b%253D%2526_Yi%253D%2526_Yiah%253D%2526_b%253DN%2526_iIDi%253D%2526aY%253D3kH3JhJ2kh3NHP23NNk%2526bGIYi%253D%2526cOa%253D%2526cvbII%253D3%2526htmlsrc%253D1%2526ibGvvv%253D%2526ivIy%253D3%2526jYi%253DNb2._HHy6y23N6P.H.62.X56NPXhXyPJPG2b%2526jx5y%253Djcb%2526kkdd%253Duu%25257Cu%25257C9%25252A3nHA%2526t%252528zbcy%253DN%2526tpid%253D%2526twi%253DP%2526v%252528z5%253DN%2526wizI%253D3%2526wizIGc%252528O%253D%2526xhOBzb%253Divjx5%2526y%252528%253D%2526zYi%253D2Emg3k0R2%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"104.21.11.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"184a5966c53dac914fe0a7905db8e2b1","sha1":"9e29f47e73c3e096b46b2084a7fb6511feabcf6a","sha256":"77cfbe19fb94aa17aa0decdea8b1dddc2b7d83a8e0f8d5da7a011b177e88b0ff","sha512":"9300fd4e9cc3d3dd91dafaaf957e5c7c26d5f989ba805db0d09393623fe9fa5909f73c89790ba53ebdbe72259f310cfc84d129958cd4cc6200b62ce9726e39c1","ssdeep":"","tlshash":"76f0556c8fe7146025a1911e325af3c0b498e09b32e3c40af5ec82040f42e1ea77a2bc","size":462,"data":"","first_seen":"2026-10-06T21:58:41.654835Z","last_seen":"2026-10-06T21:58:41.654835Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=949\u0026%21CU=T1NtYII~O~NiTO5tItONtahOT5aza~505XN1\u0026%21Eh~=%21D1\u0026%2A%2AEU=%7B%22%2A%2AXX%22%3A%22%298%22%2C%22%2A%2AXB3%22%3A%22p3%2A1D%22%2C%22%2A%2ACM%22%3A%22%22%2C%22%2A%2A%2AX%22%3A%220T%22%2C%22%2A%2AbCM%22%3A%22%22%7D\u0026%2ACb1=iit5WaNI\u0026%2AX=0T\u0026%2AYUJvU=\u00261XJCU=\u00263MEM=\u00263U%2AMJ=\u00263YDRXXR1WM=\u0026B%2AX1=ji0g5\u0026C%2ACU=T\u0026CDBXE=NA9Zsgt9F%3AeS9%7CO1N9%3A~IHrCyryCPr7P%7CO%29N9%3AyCdrP7ryyHrI%7C8AN9%3AyCdrP7ryyHryd~\u0026DBl=\u0026Dp1JJ=i\u0026EzB3M1=Up%21Eh\u0026J1nyJE=_BBM%3A%2F%2FEhUJhw1rY1B\u0026MCU=N.8fig%28AN\u0026U1Xppp=\u0026UpJ~=i\u0026XBMCU=\u0026XCU=NQSaTg064\u0026XJCU=N5NtitTIa\u0026XUl=80g5a\u0026XX=%298\u0026X_Dp0=I.8itGI5g\u0026X_Dpz=%21%2Al5RCDBX\u0026Y1=T\u0026YCU=\u0026YCUlz=\u0026YUJvU=\u0026Yh1=\u0026ZYCU=\u0026_BBM%2A=i\u0026hMQy=\u0026hU%21phCD=\u0026hUBi=\u0026hUBz=\u0026hUl=\u0026hXB=.KvK~25D2b%2F~W%2FhWK~byK5D%2F05J2%29%2F~20WK\u0026hY~EqCU=lz\u0026htmlsrc=1\u0026kkdd=nW%7C%21%7Ch3un%2AW9AH\u0026lC=igIi0z0NgziTI5NiTTg\u0026p%2AMh=T\u0026q%2A_M=T\u0026qE%2ABM=T\u0026tpid=\u0026wU=\u0026wqJ~=\u0026xUMJ=i\u0026xUMJXD%2AB=\u0026y%2AM1D~=T\u0026yxU=5\u0026~%2A=\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001791323872898032757816326589\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153886947282703404%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=8y_3XBAJ3IcS87_IpjSex2s4IrBLRwZQHx_oWc8Rhhwr4kDI87fMPMhhwUl7KD4TQTZ-LCoQWc6633yWLiLt44ViTvlkHHYmJyqA2btBKX_gUhdY0Z6rTaGUdyy9KKVoz-EqSDVoP_s4ahI71YMdkyCG3uC_vwRE_VIrBagSRc04SWEFea-6V6ur-5bJHCA4fDQJ1YtjYPA%3D\u0026tchkpts=%7B%22prel2%22%3A1791323873068%7D\u0026stime=1791323873068\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528%252528xi%253D%25257B%252522%252528%252528GG%252522%25253A%252522qm%252522%25252C%252522%252528%252528GOB%252522%25253A%252522vB%252528bc%252522%25252C%252522%252528%252528Yz%252522%25253A%252522%252522%25252C%252522%252528%252528%252528G%252522%25253A%252522JN%252522%25252C%252522%252528%252528uYz%252522%25253A%252522%252522%25257D%2526%252528G%253DJN%2526%252528Yub%253D33.PKX2H%2526%252528_iIDi%253D%2526%25252AQIy%253D%2526%25252Ai%253D%2526-_Yi%253D%25265GO%253DEMDMy9Pc9u%25252FyK%25252F5KMyutMPc%25252FJPI9q%25252Fy9JKM%25265_yxQYi%253Dah%25265iO3%253D%25265iOh%253D%25265ia%253D%25265ijv5Yc%253D%25265zTt%253D%2526B_cSGGSbKz%253D%2526Bi%252528zI%253D%2526Bzxz%253D%2526GG%253Dqm%2526GIYi%253D2P2.3.NHX%2526GOzYi%253D%2526GUcvJ%253DHEm3.fHPk%2526GUcvh%253Dj%252528aPSYcOG%2526GYi%253D2TpXNkJ4F%2526Gia%253DmJkPX%2526IbetIx%253DUOOz%25253A%25252F%25252Fx5iI5%25252Abo_bO%2526O%252528Gb%253DW3JkP%2526Q%252528Uz%253DN%2526Qx%252528Oz%253DN%2526UOOz%252528%253D3%2526Y%252528Yi%253DN%2526YcOGx%253D2R1-%252521k.1l%25253Arp1%25257C6b21%25253AyHnoYtotYVodV%25257C6q21%25253AtY~oVdottnoH%25257CmR21%25253AtY~oVdottnot~y%2526_5b%253D%2526_Yi%253D%2526_Yiah%253D%2526_b%253DN%2526_iIDi%253D%2526aY%253D3kH3JhJ2kh3NHP23NNk%2526bGIYi%253D%2526cOa%253D%2526cvbII%253D3%2526htmlsrc%253D1%2526ibGvvv%253D%2526ivIy%253D3%2526jYi%253DNb2._HHy6y23N6P.H.62.X56NPXhXyPJPG2b%2526jx5y%253Djcb%2526kkdd%253Duu%25257Cu%25257C9%25252A3nHA%2526t%252528zbcy%253DN%2526tpid%253D%2526twi%253DP%2526v%252528z5%253DN%2526wizI%253D3%2526wizIGc%252528O%253D%2526xhOBzb%253Divjx5%2526y%252528%253D%2526zYi%253D2Emg3k0R2%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"104.21.11.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"813b88e0c4f8b7c1c862d057bf961a5a","sha1":"7b6f8e37cc2b07bb3c1a9985b98a819d6e5c3342","sha256":"c31494a937569b0227a6916d5636d7946d5a43bbe4c4ca66d777879ae153dfac","sha512":"d3610e8dec228a1b91465c610e55cc6d6056ab1bc50afc4a4880acca2fbb2a12da8cdfffc805b320c908322c7b9a59e6faf33f85c055ad5c2f530e182760be2e","ssdeep":"768:df+753dI6PRxGGZ+v4rxRX8XZuWzJXzLo+8l7tLeDaNTk9i4h0gRSYk+84m2UsCD:Y75m6PBZbrxWJu0WtLeDE6p7UsCD","tlshash":"062307dd34c2745617a730a5413f2d0bf17b1a543a4e8c40e9b9eaa67c3ca5f8623e4e","size":49995,"data":"","first_seen":"2026-10-06T13:45:53.092213Z","last_seen":"2026-10-08T00:39:03.692131Z","times_seen":280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=949\u0026%21CU=T1NtYII~O~NiTO5tItONtahOT5aza~505XN1\u0026%21Eh~=%21D1\u0026%2A%2AEU=%7B%22%2A%2AXX%22%3A%22%298%22%2C%22%2A%2AXB3%22%3A%22p3%2A1D%22%2C%22%2A%2ACM%22%3A%22%22%2C%22%2A%2A%2AX%22%3A%220T%22%2C%22%2A%2AbCM%22%3A%22%22%7D\u0026%2ACb1=iit5WaNI\u0026%2AX=0T\u0026%2AYUJvU=\u00261XJCU=\u00263MEM=\u00263U%2AMJ=\u00263YDRXXR1WM=\u0026B%2AX1=ji0g5\u0026C%2ACU=T\u0026CDBXE=NA9Zsgt9F%3AeS9%7CO1N9%3A~IHrCyryCPr7P%7CO%29N9%3AyCdrP7ryyHrI%7C8AN9%3AyCdrP7ryyHryd~\u0026DBl=\u0026Dp1JJ=i\u0026EzB3M1=Up%21Eh\u0026J1nyJE=_BBM%3A%2F%2FEhUJhw1rY1B\u0026MCU=N.8fig%28AN\u0026U1Xppp=\u0026UpJ~=i\u0026XBMCU=\u0026XCU=NQSaTg064\u0026XJCU=N5NtitTIa\u0026XUl=80g5a\u0026XX=%298\u0026X_Dp0=I.8itGI5g\u0026X_Dpz=%21%2Al5RCDBX\u0026Y1=T\u0026YCU=\u0026YCUlz=\u0026YUJvU=\u0026Yh1=\u0026ZYCU=\u0026_BBM%2A=i\u0026hMQy=\u0026hU%21phCD=\u0026hUBi=\u0026hUBz=\u0026hUl=\u0026hXB=.KvK~25D2b%2F~W%2FhWK~byK5D%2F05J2%29%2F~20WK\u0026hY~EqCU=lz\u0026htmlsrc=1\u0026kkdd=nW%7C%21%7Ch3un%2AW9AH\u0026lC=igIi0z0NgziTI5NiTTg\u0026p%2AMh=T\u0026q%2A_M=T\u0026qE%2ABM=T\u0026tpid=\u0026wU=\u0026wqJ~=\u0026xUMJ=i\u0026xUMJXD%2AB=\u0026y%2AM1D~=T\u0026yxU=5\u0026~%2A=\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001791323872898032757816326589\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153886947282703404%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=8y_3XBAJ3IcS87_IpjSex2s4IrBLRwZQHx_oWc8Rhhwr4kDI87fMPMhhwUl7KD4TQTZ-LCoQWc6633yWLiLt44ViTvlkHHYmJyqA2btBKX_gUhdY0Z6rTaGUdyy9KKVoz-EqSDVoP_s4ahI71YMdkyCG3uC_vwRE_VIrBagSRc04SWEFea-6V6ur-5bJHCA4fDQJ1YtjYPA%3D\u0026tchkpts=%7B%22prel2%22%3A1791323873068%7D\u0026stime=1791323873068\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528%252528xi%253D%25257B%252522%252528%252528GG%252522%25253A%252522qm%252522%25252C%252522%252528%252528GOB%252522%25253A%252522vB%252528bc%252522%25252C%252522%252528%252528Yz%252522%25253A%252522%252522%25252C%252522%252528%252528%252528G%252522%25253A%252522JN%252522%25252C%252522%252528%252528uYz%252522%25253A%252522%252522%25257D%2526%252528G%253DJN%2526%252528Yub%253D33.PKX2H%2526%252528_iIDi%253D%2526%25252AQIy%253D%2526%25252Ai%253D%2526-_Yi%253D%25265GO%253DEMDMy9Pc9u%25252FyK%25252F5KMyutMPc%25252FJPI9q%25252Fy9JKM%25265_yxQYi%253Dah%25265iO3%253D%25265iOh%253D%25265ia%253D%25265ijv5Yc%253D%25265zTt%253D%2526B_cSGGSbKz%253D%2526Bi%252528zI%253D%2526Bzxz%253D%2526GG%253Dqm%2526GIYi%253D2P2.3.NHX%2526GOzYi%253D%2526GUcvJ%253DHEm3.fHPk%2526GUcvh%253Dj%252528aPSYcOG%2526GYi%253D2TpXNkJ4F%2526Gia%253DmJkPX%2526IbetIx%253DUOOz%25253A%25252F%25252Fx5iI5%25252Abo_bO%2526O%252528Gb%253DW3JkP%2526Q%252528Uz%253DN%2526Qx%252528Oz%253DN%2526UOOz%252528%253D3%2526Y%252528Yi%253DN%2526YcOGx%253D2R1-%252521k.1l%25253Arp1%25257C6b21%25253AyHnoYtotYVodV%25257C6q21%25253AtY~oVdottnoH%25257CmR21%25253AtY~oVdottnot~y%2526_5b%253D%2526_Yi%253D%2526_Yiah%253D%2526_b%253DN%2526_iIDi%253D%2526aY%253D3kH3JhJ2kh3NHP23NNk%2526bGIYi%253D%2526cOa%253D%2526cvbII%253D3%2526htmlsrc%253D1%2526ibGvvv%253D%2526ivIy%253D3%2526jYi%253DNb2._HHy6y23N6P.H.62.X56NPXhXyPJPG2b%2526jx5y%253Djcb%2526kkdd%253Duu%25257Cu%25257C9%25252A3nHA%2526t%252528zbcy%253DN%2526tpid%253D%2526twi%253DP%2526v%252528z5%253DN%2526wizI%253D3%2526wizIGc%252528O%253D%2526xhOBzb%253Divjx5%2526y%252528%253D%2526zYi%253D2Emg3k0R2%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"104.21.11.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2d741a6d067d4a2836938896c055fece","sha1":"4b2f00c29584cc27399e305de82edd11fc57450a","sha256":"2621410136b4ef49dc3f48de1a7a5a7e0bb6ea1042bfafc4dbfa2e4c3c5b45ba","sha512":"788731c6c22699aa70bc3a4098beaebcde094e0bb5342a86cfcac3688f20cc0c5075cda2df5725272a23c9926c847bd7d3cf9406118086f0234b3a81416a8a55","ssdeep":"","tlshash":"20f0e5b694b3c8285b0f264273ffd684145043e45c05764df1ede49a03e1d4cc0d9ea6","size":475,"data":"","first_seen":"2026-05-25T14:47:36.054758Z","last_seen":"2026-10-08T00:39:03.692681Z","times_seen":32888,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=949\u0026%21CU=T1NtYII~O~NiTO5tItONtahOT5aza~505XN1\u0026%21Eh~=%21D1\u0026%2A%2AEU=%7B%22%2A%2AXX%22%3A%22%298%22%2C%22%2A%2AXB3%22%3A%22p3%2A1D%22%2C%22%2A%2ACM%22%3A%22%22%2C%22%2A%2A%2AX%22%3A%220T%22%2C%22%2A%2AbCM%22%3A%22%22%7D\u0026%2ACb1=iit5WaNI\u0026%2AX=0T\u0026%2AYUJvU=\u00261XJCU=\u00263MEM=\u00263U%2AMJ=\u00263YDRXXR1WM=\u0026B%2AX1=ji0g5\u0026C%2ACU=T\u0026CDBXE=NA9Zsgt9F%3AeS9%7CO1N9%3A~IHrCyryCPr7P%7CO%29N9%3AyCdrP7ryyHrI%7C8AN9%3AyCdrP7ryyHryd~\u0026DBl=\u0026Dp1JJ=i\u0026EzB3M1=Up%21Eh\u0026J1nyJE=_BBM%3A%2F%2FEhUJhw1rY1B\u0026MCU=N.8fig%28AN\u0026U1Xppp=\u0026UpJ~=i\u0026XBMCU=\u0026XCU=NQSaTg064\u0026XJCU=N5NtitTIa\u0026XUl=80g5a\u0026XX=%298\u0026X_Dp0=I.8itGI5g\u0026X_Dpz=%21%2Al5RCDBX\u0026Y1=T\u0026YCU=\u0026YCUlz=\u0026YUJvU=\u0026Yh1=\u0026ZYCU=\u0026_BBM%2A=i\u0026hMQy=\u0026hU%21phCD=\u0026hUBi=\u0026hUBz=\u0026hUl=\u0026hXB=.KvK~25D2b%2F~W%2FhWK~byK5D%2F05J2%29%2F~20WK\u0026hY~EqCU=lz\u0026htmlsrc=1\u0026kkdd=nW%7C%21%7Ch3un%2AW9AH\u0026lC=igIi0z0NgziTI5NiTTg\u0026p%2AMh=T\u0026q%2A_M=T\u0026qE%2ABM=T\u0026tpid=\u0026wU=\u0026wqJ~=\u0026xUMJ=i\u0026xUMJXD%2AB=\u0026y%2AM1D~=T\u0026yxU=5\u0026~%2A=\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001791323872898032757816326589\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153886947282703404%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=8y_3XBAJ3IcS87_IpjSex2s4IrBLRwZQHx_oWc8Rhhwr4kDI87fMPMhhwUl7KD4TQTZ-LCoQWc6633yWLiLt44ViTvlkHHYmJyqA2btBKX_gUhdY0Z6rTaGUdyy9KKVoz-EqSDVoP_s4ahI71YMdkyCG3uC_vwRE_VIrBagSRc04SWEFea-6V6ur-5bJHCA4fDQJ1YtjYPA%3D\u0026tchkpts=%7B%22prel2%22%3A1791323873068%7D\u0026stime=1791323873068\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528%252528xi%253D%25257B%252522%252528%252528GG%252522%25253A%252522qm%252522%25252C%252522%252528%252528GOB%252522%25253A%252522vB%252528bc%252522%25252C%252522%252528%252528Yz%252522%25253A%252522%252522%25252C%252522%252528%252528%252528G%252522%25253A%252522JN%252522%25252C%252522%252528%252528uYz%252522%25253A%252522%252522%25257D%2526%252528G%253DJN%2526%252528Yub%253D33.PKX2H%2526%252528_iIDi%253D%2526%25252AQIy%253D%2526%25252Ai%253D%2526-_Yi%253D%25265GO%253DEMDMy9Pc9u%25252FyK%25252F5KMyutMPc%25252FJPI9q%25252Fy9JKM%25265_yxQYi%253Dah%25265iO3%253D%25265iOh%253D%25265ia%253D%25265ijv5Yc%253D%25265zTt%253D%2526B_cSGGSbKz%253D%2526Bi%252528zI%253D%2526Bzxz%253D%2526GG%253Dqm%2526GIYi%253D2P2.3.NHX%2526GOzYi%253D%2526GUcvJ%253DHEm3.fHPk%2526GUcvh%253Dj%252528aPSYcOG%2526GYi%253D2TpXNkJ4F%2526Gia%253DmJkPX%2526IbetIx%253DUOOz%25253A%25252F%25252Fx5iI5%25252Abo_bO%2526O%252528Gb%253DW3JkP%2526Q%252528Uz%253DN%2526Qx%252528Oz%253DN%2526UOOz%252528%253D3%2526Y%252528Yi%253DN%2526YcOGx%253D2R1-%252521k.1l%25253Arp1%25257C6b21%25253AyHnoYtotYVodV%25257C6q21%25253AtY~oVdottnoH%25257CmR21%25253AtY~oVdottnot~y%2526_5b%253D%2526_Yi%253D%2526_Yiah%253D%2526_b%253DN%2526_iIDi%253D%2526aY%253D3kH3JhJ2kh3NHP23NNk%2526bGIYi%253D%2526cOa%253D%2526cvbII%253D3%2526htmlsrc%253D1%2526ibGvvv%253D%2526ivIy%253D3%2526jYi%253DNb2._HHy6y23N6P.H.62.X56NPXhXyPJPG2b%2526jx5y%253Djcb%2526kkdd%253Duu%25257Cu%25257C9%25252A3nHA%2526t%252528zbcy%253DN%2526tpid%253D%2526twi%253DP%2526v%252528z5%253DN%2526wizI%253D3%2526wizIGc%252528O%253D%2526xhOBzb%253Divjx5%2526y%252528%253D%2526zYi%253D2Emg3k0R2%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"104.21.11.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2512b66a870043d21f052fab38983705","sha1":"1d0d87b571bdc394f9860dacac9122e1882bdac4","sha256":"b7812b25aff276969170564e47866cb3715e710e03684130422e1f7ff5f1d3b5","sha512":"d92b976bf673cd4717ce172333c1459b2b3b2597bf51322f377e978e18571441d37e4a8f511c15aa1281a2ead4cf629ce5b396a3670a0f650716d9e9c0ab39a3","ssdeep":"","tlshash":"bcb02b107d301042007b0043c874c4190532d8f3330085d45b013ded904e444204e74c","size":123,"data":"","first_seen":"2026-06-09T14:21:01.557679Z","last_seen":"2026-10-08T00:39:03.693458Z","times_seen":31417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.consentmanager.net/delivery/js/cmp_en.min.js","fqdn":"cdn.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f4c46eb33a5c4dfa6852550be352652","sha1":"4451328db0f4a5741691717b4b01aa18c44ff008","sha256":"d2cf708ecc92e934f50bc5ba2eeeeb9ca37ffbbeb43cde8366edb46267e859ec","sha512":"d9a2a554b858f7fe922d49d2e18d15b2d4f6861dcf71b55915045528bcdbdda8d99e88219736136ecd6b7b99df82f072ea662c2b7294aad740320943611582c7","ssdeep":"6144:bdsrLpvioTTHBsjT2zzq4vmaYE97BDL/Q4dlQhdvi0Baa+4gwfPhezIvw9Vuk4Vu:O99DL/Q4dmhdPBaSYvD","tlshash":"51a42856309321b41eeb49b4223f2b0579296b68680c509cfe70d4e47b96e8b7c77bf4","size":492915,"data":"","first_seen":"2026-10-01T15:18:08.554116Z","last_seen":"2026-10-08T00:39:03.676692Z","times_seen":2737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yfdpco5.com/sk-park.php?pid=9PO15V947\u0026dn=ladrake.bet\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.ladrake.bet%2F\u0026al=en-US%2Cen%3Bq%3D0.9","fqdn":"yfdpco5.com","domain":"yfdpco5.com","tld":"com"},"ip":{"addr":"208.91.196.46","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"introduction_type":"scriptElement","is_inline":true,"md5":"7474ccd76cf79979671d84ac94b8b0ce","sha1":"9a380b04551e25290de1a17ccdcfecd25de9852c","sha256":"24c7d316ef0ff9b682bd6aea6e1d8793c48f3d0c4bdd73f6325f55f028570d21","sha512":"114badbe7718cec32d5f7b45f9f987e1c9bf22d90b0691a57b5d3a4ff77fb1f58555582d99a83d4dbac026a0448f7fa4d8d3d53e89802221fcdc61d1c25d7391","ssdeep":"384:CjArYiGhmZSww0qTfBAOVgmAyhtbgtl+u/cj1IO/5/9SLT:5ZBsjBjrAyhtbgt4MiIO/5/9SLT","tlshash":"9262be1886f214265513703456bf620477764763568ced00bd8caa90ffaadb38efbbe4","size":14558,"data":"","first_seen":"2026-08-24T11:45:34.350286Z","last_seen":"2026-10-08T00:39:03.694999Z","times_seen":3058,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yfdpco5.com/sk-park.php?pid=9PO15V947\u0026dn=ladrake.bet\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.ladrake.bet%2F\u0026al=en-US%2Cen%3Bq%3D0.9","fqdn":"yfdpco5.com","domain":"yfdpco5.com","tld":"com"},"ip":{"addr":"208.91.196.46","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"introduction_type":"scriptElement","is_inline":true,"md5":"9880e887e567034fa0576535634b33b9","sha1":"e634fb47582ef9c5e63ec19eea97e6d10e2cfc55","sha256":"5d31852f98b45551771efeaeef2135baeee26b114ae8887273dea8c7857f2122","sha512":"1e6f807c2a489e887004cad5cdca71973e63eca8597bc09d3b9ed477e280090c0a1d2c888601c736307dd3616e667e68949841a5788ccf567b9f158824cb4383","ssdeep":"192:NTPXnQG01/BY0GkC9MR2/iZ1LGAvdTPXnQG01/BY0GkC9MR2/iZ2yIhIQBrvtw40:NKttGYbyAvdKttGYky0IULs","tlshash":"1622f8e51276ad14a8de1152debd7fdb7aae1c2b7c6ca40c8ac88cc0256dd770d009e7","size":10518,"data":"","first_seen":"2026-10-06T21:58:41.680516Z","last_seen":"2026-10-06T21:58:41.680516Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yfdpco5.com/sk-park.php?pid=9PO15V947\u0026dn=ladrake.bet\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.ladrake.bet%2F\u0026al=en-US%2Cen%3Bq%3D0.9","fqdn":"yfdpco5.com","domain":"yfdpco5.com","tld":"com"},"ip":{"addr":"208.91.196.46","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb7759eb69822cb6ed1516007c86ea25","sha1":"05b0ca90c5c7a92b51a12d51ebe992b4e681434c","sha256":"bf5138daafe2dd2f7bd11258a31c28eb93835962f1bbe9b624fae4923fef03d9","sha512":"138523d88633dad59fbac13f24d0b52d71d04c092bc7aa05d120cb18a6192b04f52a6414f05e55755b6e39db81e4bdf502cbd35914720b94081cb59a17155095","ssdeep":"","tlshash":"b411af9963754133012bb57bef8a43c4b071d08f3517ea05bf6c82649f5783d6e19e90","size":886,"data":"","first_seen":"2026-06-08T14:44:06.80999Z","last_seen":"2026-10-08T00:39:03.697114Z","times_seen":13651,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.cdn-fileserver.com/bql.php?vgd_len=5205\u0026\u0026vgd_l2type=dmola\u0026fp=4MIcPO7NGqkcg6rwweV9dVI_6RYU5tWPoSFODYVHVhg_UcSrAY3JR02gLZaldehB_iVVLJ-Tg2bKTA8yQDFDk1UdKMqTGDeS4mUle25-1NzWsjavwJy0fNcU2Eo0ds1W7hvxne3maHY%3D\u0026cme=YQ59PP0dv3v3Uvsm8VZRdqopQ-QMZAWfIMF3B29Z4gM26OL_wJ5VGYd6q9rQ4qQhQxzaGZKRi3tGT4ucEqU2nwriSHMKhgjDRGTImWfYxJ4p24pBSqOxjkcQbyQlGob7QY3EyKglrzzSGe8aUc6Jby_OIGp1PHV7xy60tPihqZARpu49qdcfJaO4x13gP1igM8jLRxnFi_Q1c2OYn7Wn-YjljaUXU1bXKAG4z8qx2alvx-M16soHeMR-NU4v2NSzugAjtG9ihPk%3D%7C%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7CWtJPvijWHRsfBv4nOZN-Vs0s0qvvEfG0%7CxDcVMoSqRIR4EymPIl-6nsSVTiX17pQEipxAYimR0cE%3D%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7C\u0026ctst=Default\u0026ksu=360\u0026fdkt=658\u0026vgde_kbbh=fuoyxQBuGUBO\u0026kwd[]=Betting+Games\u0026kwt[]=658\u0026kbc[]=05a96b35a2bb8841f14dc96131f13d7f.d2s\u0026kwp[]=1\u0026kid[]=3523812\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D8986%7Cclid_serp%3D7105%7Cakp%3D9%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.2036%7C23%3D1.2086%7C30%3D0.0001%7C7%3D0.0120%7C8%3D100614%7C13%3D0.0252%7C14%3D100618%7Ckus%3D5.0000%7Ckucs%3D0.6278%7Ckcucs%3D5.0000%7Ckcucs2%3D0.6775%7Ckssks%3D5.0000%7Crcid%3D189420%7Cclpr%3D0.851200%7Ccllvl%3D5%7Cm_p%3D74.1481%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.997%7Cps_id%3D0\u0026ktd[]=79363637763927153775265321216\u0026kwd[]=New+Online+Bookmakers\u0026kwt[]=658\u0026kbc[]=05a96b35a2bb8841f14dc96131f13d7f.d2s\u0026kwp[]=2\u0026kid[]=394460738\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D28922%7Cclid_serp%3D29984%7Cakp%3D2%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.2036%7C23%3D0.8971%7C30%3D0.0001%7C7%3D0.0106%7C8%3D100614%7C13%3D0.0245%7C14%3D100618%7Ckus%3D5.0000%7Ckucs%3D0.4259%7Ckcucs%3D5.0000%7Ckcucs2%3D0.6313%7Ckssks%3D5.0000%7Crcid%3D210375%7Cclpr%3D0.804900%7Ccllvl%3D5%7Cm_p%3D78.7336%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.997%7Cps_id%3D0\u0026ktd[]=79228162514268841193188495616\u0026kwd[]=Online+Sports+Betting\u0026kwt[]=658\u0026kbc[]=05a96b35a2bb8841f14dc96131f13d7f.d2s\u0026kwp[]=3\u0026kid[]=21263614\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D28922%7Cclid_serp%3D29984%7Cakp%3D1%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.2036%7C23%3D1.7524%7C30%3D0.0001%7C7%3D0.0069%7C8%3D100614%7C13%3D0.0282%7C14%3D100618%7Ckus%3D5.0000%7Ckucs%3D0.5145%7Ckcucs%3D5.0000%7Ckcucs2%3D0.6313%7Ckssks%3D5.0000%7Crcid%3D127668%7Cclpr%3D0.861900%7Ccllvl%3D5%7Cm_p%3D84.1700%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.997%7Cps_id%3D0\u0026ktd[]=79228162514264337593577902336\u0026kwd[]=Jack+The+Lad\u0026kwt[]=362\u0026kbc[]=lad\u0026kwp[]=4\u0026kid[]=15586278\u0026kbc2[]=akp%3D4%7C%7Cfp%3Dna%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7Cclid_fz%3D-2%7Cclid_serp%3D-2%7C24%3D0%7C25%3D0%7C22%3D9.2036%7C23%3D2.6882%7C30%3D0.0001%7C7%3D0.0137%7C8%3D100614%7C13%3D0.0141%7C14%3D100618%7Ckus%3D5.0000%7Ckucs%3D0.3269%7Ckcucs%3D5.0000%7Ckcucs2%3D0.6087%7Ckssks%3D5.0000%7Crcid%3D73787%7Cclpr%3D0.736600%7Ccllvl%3D5%7Cm_p%3D50.7849%7Cokt%3D362%7Cbdkt%3D362%7Cps%3D0.974%7Cps_id%3D0\u0026ktd[]=79228162514268841193188098304\u0026kwd[]=Betting+Systems\u0026kwt[]=658\u0026kbc[]=05a96b35a2bb8841f14dc96131f13d7f.d2s\u0026kwp[]=5\u0026kid[]=3524329\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D28922%7Cclid_serp%3D-1%7Cakp%3D3%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.2036%7C23%3D1.4607%7C30%3D0.0001%7C7%3D0.0073%7C8%3D100614%7C13%3D0.0205%7C14%3D100618%7Ckus%3D5.0000%7Ckucs%3D0.5260%7Ckcucs%3D5.0000%7Ckcucs2%3D0.6313%7Ckssks%3D5.0000%7Crcid%3D191283%7Cclpr%3D0.837600%7Ccllvl%3D5%7Cm_p%3D87.5887%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.997%7Cps_id%3D0\u0026ktd[]=79228162514264337593561125120\u0026v=1\u0026gdpr=1\u0026geo=59.56%7C11.4\u0026lper=100\u0026vgde_sa_ijp=%7B%227E8O%22%3A9%2C%22L77%22%3Ak1jQJ%2C%22E-jM8zd%22%3Ak1jQJ%7D\u0026lpid=\u0026tsid=1005\u0026hint=\u0026cc=NO\u0026wsip=170764106\u0026bca=0\u0026ugd=4\u0026vgde_setid=Nfu\u0026vgde_chost=LJ1j78YJQJ1LNwLJQxj7Q.NmY\u0026cid=8CU6073RK\u0026vi=1791323872109481007\u0026vsid=DefVid\u0026tdAdd[]=asnum%3D50304\u0026vgde_test_data_struct=%7B%22EO7E8O%22%3Au%7D\u0026vgd_adprefflag=00\u0026vgd_adpref_diff=1010\u0026vgd_fm_lang=EN\u0026vgd_implt=3\u0026vgd_cage=0\u0026vgd_tsce=L1374-S1374\u0026vgd_l3_sc=30\u0026vgd_pdtid=1\u0026vgd_oscar=1\u0026vgd_ctrlid=O_SERP\u0026vgd_nrrv=93776\u0026vgd_nrrmf=8301000480a\u0026vgd_nrrsf=scrr\u0026vgd_cty=mysen\u0026vgd_csovr=0\u0026vgd_intc_log=%7B%22dmip%22%3A%22195.64.118.152%22%2C%22impl_type%22%3A%22skp%22%2C%22xcip%22%3A%22195.64.118.0%22%2C%22xvip%22%3A%22208.91.196.46%22%7D\u0026vgda_kbpdl=%5B%22%22%2C%22%22%2C%22%22%2C%22%22%2C%22%22%5D\u0026vgd_ifrmode=14\u0026vgd_cmp_inj_fl=true\u0026sbdrId=\u0026verid=\u0026mprpslog=8y_3XBAJ3IcS87_IpjSex2s4IrBLRwZQHx_oWc8Rhhwr4kDI87fMPMhhwUl7KD4TQTZ-LCoQWc6633yWLiLt44ViTvlkHHYmJyqA2btBKX_gUhdY0Z6rTaGUdyy9KKVoz-EqSDVoP_s4ahI71YMdkyCG3uC_vwRE_VIrBagSRc04SWEFea-6V6ur-5bJHCA4fDQJ1YtjYPA\u0026kbbq=%26asn%3D50304\u0026vgd_ppvi=2153886947282703404\u0026vgd_wlstp=0\u0026vgd_vstrid=DefVid\u0026vgd_scsver=3768\u0026vgd_himglg=K0P0-O0K0-S0\u0026vgd_cache_metadata=%7B%22kbb%22%3Afalse%7D\u0026vgd_cfud=251031\u0026vgd_optout=0\u0026vgd_l2shld=1\u0026vgd_akcip=195.64.118.0\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026vgd_och=0\u0026vgd_rensize=1280_926\u0026vgd_scr_h=1024\u0026vgd_scr_w=1280\u0026vgd_col_sch=l\u0026vgd_be=0\u0026vgd_nmerr=1\u0026tdAdd[]=uiparams%3D%3Brend_w%3A1280%3Brend_h%3A926\u0026vgd_sc=30\u0026hvsid=00001791323872898032757816326589\u0026rc=0\u0026rand=1791323873601\u0026acid=undefined\u0026matm=1791323873601\u0026vgde_ltimesrc=u\u0026vgde_ltime=XXu\u0026vgde_rtime=XHX\u0026vgde_etm=u9\u0026vgde_timeObj=%7B%22juJ-JN%22%3Azxjj%2C%22jfjm1O%22%3AHfW%2C%22QNLLQ71L7%22%3Au9X%2C%22QNLLLJzOJL%22%3Auf%2C%22QNLLJ-JN%22%3AuW%7D\u0026vgd_lhl=2355\u0026vgd_sbSup=1\u0026vgd_nrrs=93776\u0026vgde_cdeplbl=1E8Mzm7M1e18j1GjJ\u0026vgd_end=1","fqdn":"l.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"172.67.181.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ba5e95642c652c708881ad3c9d8443f","sha1":"5bfcc33bb9cc897546c600206b03d1307bd63a94","sha256":"c787e9dd6dc8ea3c935f5f0f30e3b9e4a3e066b4619bb244f569883f8e318a24","sha512":"8c157fc41fd03bbd47633269b18effb652644e58284f8f85465b0ffba9b5a06544a03ed0655706c96edfa09a64f4f164f6bbc573ac5045000cae03c8b36d046f","ssdeep":"","tlshash":"7e600000000cc030030f0c00c3000300303000c000000c33000f30cc000000c00fc303","size":15,"data":"","first_seen":"2025-03-08T00:25:13.560069Z","last_seen":"2026-10-08T00:39:03.663847Z","times_seen":225630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.ladrake.bet/","fqdn":"ww38.ladrake.bet","domain":"ladrake.bet","tld":"bet"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"56c9f8b74365c4f14c2e677fc97c78bc","sha1":"28ba0e6c7cd9a12b9a80e5b6b1610836f09f7c95","sha256":"3c660eb2c20f0a44f6cad24c8d7f756057fb7f16c53ae3891b0957f9e0a58bf5","sha512":"5587c54d0a14306822e0ad737ac0641261763b5a58a24da8dc0d43761a61a7ede4c05ac2854f826751eb94e535aff5533f1f726838bfa1e7d198a115ce063aff","ssdeep":"384:sYNcN3PaeezSUDw8QOrPHBoF1lcfSYkczDLArYx3ZEyPESvllZNNNPvRfJ9D3QqC:sYE2OF1lkAcx3ZbMSvllZNNNPvRfjD34","tlshash":"21a2a37572ba297983de001f71bed750f2b8567099190424e0eced2e3624e5297b3fb8","size":21523,"data":"","first_seen":"2026-10-05T11:26:24.079068Z","last_seen":"2026-10-08T00:39:03.699993Z","times_seen":407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.ladrake.bet/","fqdn":"ww38.ladrake.bet","domain":"ladrake.bet","tld":"bet"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-10-08T00:39:03.694188Z","times_seen":437930,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.ladrake.bet/","fqdn":"ww38.ladrake.bet","domain":"ladrake.bet","tld":"bet"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"889ca9e2c79a3ce7aaadbcdfd0ce4ef5","sha1":"b05c2c051bae71f80cb8c289e5a42d4f96d323fa","sha256":"6477acf082d26199b6ce8346b93149b1b999233d9fe76b0340ebf43317cf98f8","sha512":"122a494d50a5e8077cdda40e8d6edb442bb9d89fff078852aad7f84fe24f1c58fe693f0388ca6c9453d1b33036da0b9c4e9fb394a18268e254d306ffc2ca57a3","ssdeep":"","tlshash":"46a002d4b4ed8125564583390104d91cf936c934c0d5701873f0466ca6e700a53610b2","size":62,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-10-08T00:39:03.700854Z","times_seen":403568,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.ladrake.bet/","fqdn":"ww38.ladrake.bet","domain":"ladrake.bet","tld":"bet"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"6559111e4eae643ce013ce0821e91a02","sha1":"fa1086c9aa2cb2d14f5c13bceefe21511bcdae5a","sha256":"d72255f7e5ea4dfdf9821df800356367d0bc7df07ecd103bb660018cb1e4f400","sha512":"a6e3e096076dc152b69e95709dad8925c9c2799c23ad226b9ce7b6ee78936bea7300b66c92821ea0728ce7433d4f53787f27f5e7101f97e4d882be0a461fc051","ssdeep":"","tlshash":"407000000380020020c80233a200882af228003c00030200c008888800a808002080c2","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-10-08T00:39:03.703395Z","times_seen":403522,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.delivery.consentmanager.net/delivery/cmp.php?\u0026cdid=40679ccc92462\u0026h=https%3A%2F%2Fyfdpco5.com%2Fsk-park.php%3Fpid%3D9PO15V947%26dn%3Dladrake.bet%26ua%3DMozilla%252F5.0%2B%2528Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%2529%2BGecko%252F20100101%2BFirefox%252F134.0%26ip%3D195.64.118.0%26xfip%3D195.64.118.0%26requrl%3Dhttp%253A%252F%252Fww38.ladrake.bet%252F%26al%3Den-US%252Cen%253Bq%253D0.9\u0026\u0026l=en\u0026o=1791323873062","fqdn":"d.delivery.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"94.237.93.104","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"f958d9132f66f7d48b59774f009d4241","sha1":"c47cdb87072decd51965da969db17eae2c2048c1","sha256":"23fffd6b9b1619180c57a10effd4fdb9f75dca05621fb09f8331f983e3257805","sha512":"2c59ef5072ff83bad8ce2b70418e2b1a81deac3433d37369b53914d7c164e96fce850e56c786f990bf979077227ceca8fc07c00358814de8b143aaad5ec9c270","ssdeep":"","tlshash":"aa21fc349e502d50e22609c9b57eb36cb677263368c5e164684fa884de04e1bccdb9e0","size":1330,"data":"","first_seen":"2026-10-06T21:58:41.612266Z","last_seen":"2026-10-06T21:58:41.612266Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=2\u0026__cmpfcc=1\u0026id=175795\u0026o=1791323873\u0026h=https%3A%2F%2Fyfdpco5.com%2Fsk-park.php%3Fpid%3D9PO15V947%26dn%3Dladrake.bet%26ua%3DMozilla%252F5.0%2B%2528Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%2529%2BGecko%252F20100101%2BFirefox%252F134.0%26ip%3D195.64.118.0%26xfip%3D195.64.118.0%26requrl%3Dhttp%253A%252F%252Fww38.ladrake.bet%252F%26al%3Den-US%252Cen%253Bq%253D0.9\u0026\u0026l=en\u0026odw=0\u0026dlt=1\u0026l=en","fqdn":"d.delivery.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"94.237.93.104","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"f496329db58979542fc91da4ea7f47e4","sha1":"1c73a638cfd0dbf384abbe28425c3c7baf1a23b9","sha256":"9b704d1fe860fc35eafdf20e2b993c026181651b87dec683fb8277bb4143a903","sha512":"b37ded2912438beac37883e613f371c749e15f479585df2564357ffba0688db1a9f37c44307019918134c044bb2996df589deac6f074974576e41bac89759405","ssdeep":"192:wnjUGGAoAUCvSKzdv93bzDD1CISbjWW7guf96zzcydlga:ijTrUmzhNYI0g2Zkga","tlshash":"6412c789efe4d47857d61ab5263f5216b9a8031f0ccc81c0c7855d0c166abbb7f83e9a","size":9902,"data":"","first_seen":"2026-10-06T21:32:04.231614Z","last_seen":"2026-10-06T21:58:41.619974Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.ladrake.bet/","fqdn":"ww38.ladrake.bet","domain":"ladrake.bet","tld":"bet"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"eval","is_inline":false,"md5":"e5d8c139688b25ef77b263d88ea99150","sha1":"7abc9c61c4966543f66d150c0155bfac575f86a7","sha256":"53e5f34ac520035c7f124076d1e68c70a85c83cf68a339fa713b872b54126148","sha512":"1cd4eb192d987ea1b21f3b553eea3881c807f8bf4a5299982675d57314a0eaa084db1722c38d02eb73178660ecb1ca3667a795a512527f843f2526dc0a99dc20","ssdeep":"","tlshash":"7440000000003000033c0000000000c0000c00000000000000000c00030000000c0000","size":7,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-10-08T00:39:03.701797Z","times_seen":403578,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.ladrake.bet/26db01bb-ec0b-4a4c-ba25-f81d0d597364","fqdn":"ww38.ladrake.bet","domain":"ladrake.bet","tld":"bet"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"introduction_type":"","is_inline":false,"md5":"dd86810e985c1c9259af4fbf2d9cf8e9","sha1":"cebe803cfd62aec4418dbbbb1dcb436d83207944","sha256":"2bb1e1d8cf78040d4bc1912773630a76f17f92956a6d579295329486489fd4c1","sha512":"4bece5471d86ed984d563a2c4bbc13474db683217f22870ac8f11db9a81c35c1838b282e29677c5ac9d2c0ed73906dc3a35434784a42bcf35f3c2348ba1c7cdb","ssdeep":"","tlshash":"6c017008fa3c1b9443ab192739cff508f03b4608bd8b60b8546a84884eb9dc350237f9","size":779,"data":"","first_seen":"2026-10-06T21:58:41.700346Z","last_seen":"2026-10-06T21:58:41.700346Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1\u0026id=175795\u0026o=1791323873\u0026h=https%3A%2F%2Fyfdpco5.com%2Fsk-park.php%3Fpid%3D9PO15V947%26dn%3Dladrake.bet%26ua%3DMozilla%252F5.0%2B%2528Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%2529%2BGecko%252F20100101%2BFirefox%252F134.0%26ip%3D195.64.118.0%26xfip%3D195.64.118.0%26requrl%3Dhttp%253A%252F%252Fww38.ladrake.bet%252F%26al%3Den-US%252Cen%253Bq%253D0.9\u0026\u0026l=en\u0026odw=0\u0026dlt=1\u0026l=en","fqdn":"d.delivery.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"94.237.93.104","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"a73d16628f8c78f235c5d1eebaab8cbe","sha1":"285603d0066107bfdc0817dea095f3752c183c8c","sha256":"391a8be0cb2ddc9f4c1d9e4e06b95b69cad9bbc2a34ef09ec5228ae4470befd0","sha512":"d4eece5b1ef8dfce6ccc081c8677d7df40858cc8a800b70eaf34f2ea9e82e52a72926ec3bbcedadab648f5aca756f76a1105ae55c1263fe891f83fe4e53bd879","ssdeep":"","tlshash":"fe21fc349e502d50e2260989b57eb36cb677263368c5e164684fa884de04e1bccdb9e0","size":1330,"data":"","first_seen":"2026-10-06T21:58:41.606336Z","last_seen":"2026-10-06T21:58:41.606336Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.consentmanager.net/delivery/customdata/bV8xLndfMTc1Nzk1LnJfR0RQUi5sX2VuLmRfMzM2OTkueF82NC52LnAudF8zMzY5OS54dF8xMjMx.js","fqdn":"cdn.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c71274f2fa711a1066e63095e25e19fb","sha1":"bacc26c3bca4b7a196c962d69028c49b05d613c9","sha256":"3c6565efac9417ace15e7b69f5edc5f968f0eed0bca0f39fafd8903b6b29722b","sha512":"5af1d5cea43a0ca2eea3e65f9a282812d43d038835098b443f7cce691478fd14ebe78549ddd266a983dd03b660c949268cae31d982a77e16ad396b566fead0e9","ssdeep":"1536:hsQ3sQxUKrn/SrdfZtwdRBdaF2QI3HPuez+tabAWax0RdCuiHBTVaqv:hsksiLdRBvQI3H23taUW40LCuiD","tlshash":"ce340024c9a2791b42db08cdc987847e27dc72a1b5dcd5a674d24d2faab53883336337","size":234804,"data":"","first_seen":"2026-10-02T09:17:40.587845Z","last_seen":"2026-10-08T00:39:03.678712Z","times_seen":2462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euob.northwavepoint.com/sxp/i/636f8b858f681acb7bfa6f583a96630a.js","fqdn":"euob.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"13.249.8.22","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bda5ec6c751ff6f44386a0cd8cd0587","sha1":"8a9370f6c1926b552b1cc9d57ad8ec196fcc7641","sha256":"593bbf19646928b96ba6b4182f5274732511aaa0c3c1500b54daf49252515957","sha512":"a04e4d06072d631a84b6e236ca1e0954a4bfba4b70e0316212bf393ac66669ab1625cb91c5b9323d61240baab04f28d368a4e06ec64ab1fcf701aa1113b33a7b","ssdeep":"1536:bE78CWmr0XA6QOZEKNrm8ux8OgCMGxwdwcaYt7alywnSGVjne0XzLonh0RKXPV0G:Q7Vr0wSNWxYCMLdwktGVYXYbOpbZ","tlshash":"3ad3c69db2e27035039334a5057f450ae27b1e553c4b8290d1bae9d4ac7ce8e857bfac","size":141515,"data":"","first_seen":"2026-10-04T15:34:53.26207Z","last_seen":"2026-10-08T00:39:03.679267Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ww38.ladrake.bet/","fqdn":"ww38.ladrake.bet","domain":"ladrake.bet","tld":"bet"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-06T21:57:50.631Z","timestamp":1791323870631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww38.ladrake.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 18:02:56 GMT","end":"Sun, 03 Jan 2027 18:02:55 GMT"},"fingerprint":{"sha1":"5F:1E:C5:32:F9:E9:DE:5E:C5:F1:5A:A3:DF:06:FD:BA:14:4B:97:94","sha256":"61:D2:C3:11:0C:0A:74:89:06:80:4B:3F:1D:1F:41:5F:76:CA:A0:31:D6:F0:2F:D4:46:18:25:E1:C6:85:81:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ww38.ladrake.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":8443\"; ma=2592000\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 06 Oct 2026 21:57:51 GMT\r\nserver: Caddy\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":39771,"size_decoded":39947,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16142)","md5":"8589b4efd9f3df38c4fb5075688dab4f","sha1":"244d8d2488e3075d7c3ede81d99adbbd63bb552d","sha256":"8dde1aa80480ea72c57f1354a19068a40472bb9aa1627ad88eabfc0105b0db97","sha512":"9efd3a6537226721670406bffc12b7adcc45dd4ecbcdf06a6e483f1b0c5b1eb7bdc676f32fabd43437dc9554f33278fcb0796146d878fcbd301ffba581ad1633","ssdeep":"768:F5/ko5XssD+cuch9hYE2OF1lkAcx3ZbMSvllZNNNPvRfjD3QqI:b/5ucvh5Lcx3ZbMSvllZNNNPvRfjD3BI","tlshash":"77032b3172f1267d925b412f32f9a75cb178a670da4e4864e0fcd81c7a45ba20772fb8","first_seen":"2026-10-06T21:58:41.586931Z","last_seen":"2026-10-06T21:58:41.586931Z","times_seen":1,"resource_available":true,"data":null}},"time_used":882,"timings":{"blocked":-1,"dns":352,"connect":101,"send":0,"wait":116,"receive":0,"ssl":313},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"ww38.ladrake.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"l.cdn-fileserver.com/bping.php?ssld=%7B%22QQNN%22%3A%22Ia%22%2C%22QQN75%22%3A%22Y5QJz%22%2C%22QQ8E%22%3A%22%22%2C%22QQQN%22%3A%22A9%22%2C%22QQl8E%22%3A%22%22%7D\u0026prid=8PR11258V\u0026cid=8CU6073RK\u0026ugd=4\u0026lf=6\u0026cc=NO\u0026sc=30\u0026wsip=170762916\u0026crid=848515096\u0026lper=100\u0026vgd_rpth=%2Fola\u0026gdpr=1\u0026mspa=0\u0026vgd_cage=5\u0026vgd_setup=c21\u0026requrl=http%3A%2F%2Fladrake.bet\u0026vgd_asn=50304\u0026vi=1791323872109481007\u0026wshp=0\u0026r=1791323872900\u0026vgd_tsce=L1374\u0026vgd_l2type=dmola\u0026vgd_oreqf=one\u0026hvsid=00001791323872898032757816326589\u0026vgd_cdv=O3746\u0026vgd_oresf=one\u0026vgd_wlstp=0\u0026vgd_len=551\u0026vgd_end=1","fqdn":"l.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"172.67.181.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yfdpco5.com/sk-park.php?pid=9PO15V947\u0026dn=ladrake.bet\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.ladrake.bet%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-10-06T21:57:53.055Z","timestamp":1791323873055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 21:20:12 GMT","end":"Sun, 20 Dec 2026 22:20:07 GMT"},"fingerprint":{"sha1":"98:B1:3F:26:3D:00:6E:C0:49:6B:E0:9A:B3:7F:FA:65:57:D1:F6:66","sha256":"DF:7E:14:D6:11:75:6F:58:61:9F:1D:F8:34:5D:DF:EC:E0:72:07:A4:D8:EB:C3:70:2B:52:6E:C4:5A:C7:77:91"}}},"request":{"raw":"GET /bping.php?ssld=%7B%22QQNN%22%3A%22Ia%22%2C%22QQN75%22%3A%22Y5QJz%22%2C%22QQ8E%22%3A%22%22%2C%22QQQN%22%3A%22A9%22%2C%22QQl8E%22%3A%22%22%7D\u0026prid=8PR11258V\u0026cid=8CU6073RK\u0026ugd=4\u0026lf=6\u0026cc=NO\u0026sc=30\u0026wsip=170762916\u0026crid=848515096\u0026lper=100\u0026vgd_rpth=%2Fola\u0026gdpr=1\u0026mspa=0\u0026vgd_cage=5\u0026vgd_setup=c21\u0026requrl=http%3A%2F%2Fladrake.bet\u0026vgd_asn=50304\u0026vi=1791323872109481007\u0026wshp=0\u0026r=1791323872900\u0026vgd_tsce=L1374\u0026vgd_l2type=dmola\u0026vgd_oreqf=one\u0026hvsid=00001791323872898032757816326589\u0026vgd_cdv=O3746\u0026vgd_oresf=one\u0026vgd_wlstp=0\u0026vgd_len=551\u0026vgd_end=1 HTTP/1.1\r\nHost: l.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco5.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=0, no-cache, no-store\r\ncontent-type: image/gif\r\nexpires: Mon, 05 Oct 2026 21:57:53 GMT\r\npragma: no-cache\r\ndate: Tue, 06 Oct 2026 21:57:53 GMT\r\nserver-timing: cfExtPri\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BFsFT5cBBUgawLRtHv4zCKLxp9PeJrRZFwJrcvActzXpzSEO3fVoZltdqZVLJur%2Bnj66A03rzh5cmDZEfHvkEeQ73pJxCVte4MVouqnVW0LsYCRvvUqvVMl27VxH2XSE%2Fs9x36BC7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a467ec9ebfc1a0f0-OSL\r\ncontent-length: 43\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":909,"mime_type":"image/gif","magic":"GIF image data, version 87a, 1 x 1","md5":"6f1d74c7168076c7666246504a8c03f2","sha1":"00656377deb1a4393e0cf0055385b08b2b81b46c","sha256":"8ac1703c1c34b2be426deda409d39258f82fae17f13e645f377f337a954aedde","sha512":"e502484faa0dc2a1f23c7f715879db654f29d0af1d6f616467d3d1fc578c2d16fccaacd76c4a5ecae8451dc912323473559d29edbd322fe85b8f1e83a7cdf2f3","ssdeep":"","tlshash":"53900447f1401103d135403007075340070c5030145403050071507ddc1d7553d07410","first_seen":"2025-03-07T21:51:05.009549Z","last_seen":"2026-10-08T00:39:03.670659Z","times_seen":227333,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":4,"connect":14,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.cdn-fileserver.com/__media__/fonts/montserrat_regular/montserrat_regular.woff2","fqdn":"s.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"172.67.181.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=949\u0026%21CU=T1NtYII~O~NiTO5tItONtahOT5aza~505XN1\u0026%21Eh~=%21D1\u0026%2A%2AEU=%7B%22%2A%2AXX%22%3A%22%298%22%2C%22%2A%2AXB3%22%3A%22p3%2A1D%22%2C%22%2A%2ACM%22%3A%22%22%2C%22%2A%2A%2AX%22%3A%220T%22%2C%22%2A%2AbCM%22%3A%22%22%7D\u0026%2ACb1=iit5WaNI\u0026%2AX=0T\u0026%2AYUJvU=\u00261XJCU=\u00263MEM=\u00263U%2AMJ=\u00263YDRXXR1WM=\u0026B%2AX1=ji0g5\u0026C%2ACU=T\u0026CDBXE=NA9Zsgt9F%3AeS9%7CO1N9%3A~IHrCyryCPr7P%7CO%29N9%3AyCdrP7ryyHrI%7C8AN9%3AyCdrP7ryyHryd~\u0026DBl=\u0026Dp1JJ=i\u0026EzB3M1=Up%21Eh\u0026J1nyJE=_BBM%3A%2F%2FEhUJhw1rY1B\u0026MCU=N.8fig%28AN\u0026U1Xppp=\u0026UpJ~=i\u0026XBMCU=\u0026XCU=NQSaTg064\u0026XJCU=N5NtitTIa\u0026XUl=80g5a\u0026XX=%298\u0026X_Dp0=I.8itGI5g\u0026X_Dpz=%21%2Al5RCDBX\u0026Y1=T\u0026YCU=\u0026YCUlz=\u0026YUJvU=\u0026Yh1=\u0026ZYCU=\u0026_BBM%2A=i\u0026hMQy=\u0026hU%21phCD=\u0026hUBi=\u0026hUBz=\u0026hUl=\u0026hXB=.KvK~25D2b%2F~W%2FhWK~byK5D%2F05J2%29%2F~20WK\u0026hY~EqCU=lz\u0026htmlsrc=1\u0026kkdd=nW%7C%21%7Ch3un%2AW9AH\u0026lC=igIi0z0NgziTI5NiTTg\u0026p%2AMh=T\u0026q%2A_M=T\u0026qE%2ABM=T\u0026tpid=\u0026wU=\u0026wqJ~=\u0026xUMJ=i\u0026xUMJXD%2AB=\u0026y%2AM1D~=T\u0026yxU=5\u0026~%2A=\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001791323872898032757816326589\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153886947282703404%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=8y_3XBAJ3IcS87_IpjSex2s4IrBLRwZQHx_oWc8Rhhwr4kDI87fMPMhhwUl7KD4TQTZ-LCoQWc6633yWLiLt44ViTvlkHHYmJyqA2btBKX_gUhdY0Z6rTaGUdyy9KKVoz-EqSDVoP_s4ahI71YMdkyCG3uC_vwRE_VIrBagSRc04SWEFea-6V6ur-5bJHCA4fDQJ1YtjYPA%3D\u0026tchkpts=%7B%22prel2%22%3A1791323873068%7D\u0026stime=1791323873068\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528%252528xi%253D%25257B%252522%252528%252528GG%252522%25253A%252522qm%252522%25252C%252522%252528%252528GOB%252522%25253A%252522vB%252528bc%252522%25252C%252522%252528%252528Yz%252522%25253A%252522%252522%25252C%252522%252528%252528%252528G%252522%25253A%252522JN%252522%25252C%252522%252528%252528uYz%252522%25253A%252522%252522%25257D%2526%252528G%253DJN%2526%252528Yub%253D33.PKX2H%2526%252528_iIDi%253D%2526%25252AQIy%253D%2526%25252Ai%253D%2526-_Yi%253D%25265GO%253DEMDMy9Pc9u%25252FyK%25252F5KMyutMPc%25252FJPI9q%25252Fy9JKM%25265_yxQYi%253Dah%25265iO3%253D%25265iOh%253D%25265ia%253D%25265ijv5Yc%253D%25265zTt%253D%2526B_cSGGSbKz%253D%2526Bi%252528zI%253D%2526Bzxz%253D%2526GG%253Dqm%2526GIYi%253D2P2.3.NHX%2526GOzYi%253D%2526GUcvJ%253DHEm3.fHPk%2526GUcvh%253Dj%252528aPSYcOG%2526GYi%253D2TpXNkJ4F%2526Gia%253DmJkPX%2526IbetIx%253DUOOz%25253A%25252F%25252Fx5iI5%25252Abo_bO%2526O%252528Gb%253DW3JkP%2526Q%252528Uz%253DN%2526Qx%252528Oz%253DN%2526UOOz%252528%253D3%2526Y%252528Yi%253DN%2526YcOGx%253D2R1-%252521k.1l%25253Arp1%25257C6b21%25253AyHnoYtotYVodV%25257C6q21%25253AtY~oVdottnoH%25257CmR21%25253AtY~oVdottnot~y%2526_5b%253D%2526_Yi%253D%2526_Yiah%253D%2526_b%253DN%2526_iIDi%253D%2526aY%253D3kH3JhJ2kh3NHP23NNk%2526bGIYi%253D%2526cOa%253D%2526cvbII%253D3%2526htmlsrc%253D1%2526ibGvvv%253D%2526ivIy%253D3%2526jYi%253DNb2._HHy6y23N6P.H.62.X56NPXhXyPJPG2b%2526jx5y%253Djcb%2526kkdd%253Duu%25257Cu%25257C9%25252A3nHA%2526t%252528zbcy%253DN%2526tpid%253D%2526twi%253DP%2526v%252528z5%253DN%2526wizI%253D3%2526wizIGc%252528O%253D%2526xhOBzb%253Divjx5%2526y%252528%253D%2526zYi%253D2Emg3k0R2%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","date":"2026-10-06T21:57:53.524Z","timestamp":1791323873524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 21:20:12 GMT","end":"Sun, 20 Dec 2026 22:20:07 GMT"},"fingerprint":{"sha1":"98:B1:3F:26:3D:00:6E:C0:49:6B:E0:9A:B3:7F:FA:65:57:D1:F6:66","sha256":"DF:7E:14:D6:11:75:6F:58:61:9F:1D:F8:34:5D:DF:EC:E0:72:07:A4:D8:EB:C3:70:2B:52:6E:C4:5A:C7:77:91"}}},"request":{"raw":"GET /__media__/fonts/montserrat_regular/montserrat_regular.woff2 HTTP/1.1\r\nHost: s.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://realtimesearchresults.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://realtimesearchresults.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\nedge-control: downstream-ttl=1d\r\nvia: 1.1 google\r\ndate: Tue, 06 Oct 2026 21:57:53 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 28 Jul 2026 12:57:37 GMT\r\netag: \"47bc-657ab6223bdbd\"\r\ncontent-type: font/woff2\r\nage: 115822\r\nx-cache-status: hit\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xgtlbk%2BaWT6MuBWzFyQYzVmoRlZqhSOuWugVHVl25uz9gT6vqeZoIg5BcPLwbVdsxnQliUGEk%2FHupucuuHL08Dp2amabsexRRqiLGHtMq2D0nd4mls%2F7nKmzVLly2yZT6JwA0IrqIw%3D%3D\"}]}\r\ncf-ray: a467eca188fda0f0-OSL\r\ncontent-length: 18364\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":18364,"size_decoded":19196,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18364, version 2.66","md5":"eab53b254ec83ac26c6d8a63004d288a","sha1":"24c5d739638fbc993e5e094d47bf3c988972ffc9","sha256":"4172940dbc974b614385675cfa3ab182fb3a14ac1874cf2f5604aa4a44e8c83c","sha512":"477b4d1d7e207a6968041d2f7b171200d947ab01f35e470668c06def96989ea796aa32fe36b302d29649ea960b947e5ea3afb9ba5550cfd117b4cef89012afbd","ssdeep":"384:dATEcETU5IYcyEjBMvb1ftDXW4z3FN0lkLhZ/E3lyVs210i:dKLcjYcpjBMNVMkLhNE3ly510i","tlshash":"5582d06729c62617d8e30161a1d85748c4cb6579d3e979874fe2f180edeab414309ece","first_seen":"2026-08-17T13:38:05.415773Z","last_seen":"2026-10-08T00:44:16.012594Z","times_seen":7584,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"l.cdn-fileserver.com/bqi.php?vgd_len=986\u0026\u0026vgd_aref=0\u0026vgd_tsce=L1374-S1374\u0026vgd_l2type=dmola\u0026vgd_ydspr=0\u0026vgd_cdv=O3746\u0026vgd_cage=0\u0026vgd_pgids=0\u0026vgd_pdtid=1\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026lf=3\u0026prid=8PR11258V\u0026cid=8CU6073RK\u0026crid=848515096\u0026requrl=http%3A%2F%2Fladrake.bet\u0026vi=1791323872109481007\u0026ugd=4\u0026cc=NO\u0026sc=30\u0026gdpr=1\u0026vgd_acid=undefined\u0026hvsid=00001791323872898032757816326589\u0026vgd_vimpt=30\u0026vgd_vimpd=1000\u0026cme=YQ59PP0dv3v3Uvsm8VZRdqopQ-QMZAWfIMF3B29Z4gM26OL_wJ5VGYd6q9rQ4qQhQxzaGZKRi3tGT4ucEqU2nwriSHMKhgjDRGTImWfYxJ4p24pBSqOxjkcQbyQlGob7QY3EyKglrzzSGe8aUc6Jby_OIGp1PHV7xy60tPihqZARpu49qdcfJaO4x13gP1igM8jLRxnFi_Q1c2OYn7Wn-YjljaUXU1bXKAG4z8qx2alvx-M16soHeMR-NU4v2NSzugAjtG9ihPk%3D%7C%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7CWtJPvijWHRsfBv4nOZN-Vs0s0qvvEfG0%7CxDcVMoSqRIR4EymPIl-6nsSVTiX17pQEipxAYimR0cE%3D%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7C\u0026fp=4MIcPO7NGqkcg6rwweV9dVI_6RYU5tWPoSFODYVHVhg_UcSrAY3JR02gLZaldehB_iVVLJ-Tg2bKTA8yQDFDk1UdKMqTGDeS4mUle25-1NzWsjavwJy0fNcU2Eo0ds1W7hvxne3maHY%3D\u0026vgd_rensize=1280_926\u0026vgd_end=1","fqdn":"l.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"172.67.181.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=949\u0026%21CU=T1NtYII~O~NiTO5tItONtahOT5aza~505XN1\u0026%21Eh~=%21D1\u0026%2A%2AEU=%7B%22%2A%2AXX%22%3A%22%298%22%2C%22%2A%2AXB3%22%3A%22p3%2A1D%22%2C%22%2A%2ACM%22%3A%22%22%2C%22%2A%2A%2AX%22%3A%220T%22%2C%22%2A%2AbCM%22%3A%22%22%7D\u0026%2ACb1=iit5WaNI\u0026%2AX=0T\u0026%2AYUJvU=\u00261XJCU=\u00263MEM=\u00263U%2AMJ=\u00263YDRXXR1WM=\u0026B%2AX1=ji0g5\u0026C%2ACU=T\u0026CDBXE=NA9Zsgt9F%3AeS9%7CO1N9%3A~IHrCyryCPr7P%7CO%29N9%3AyCdrP7ryyHrI%7C8AN9%3AyCdrP7ryyHryd~\u0026DBl=\u0026Dp1JJ=i\u0026EzB3M1=Up%21Eh\u0026J1nyJE=_BBM%3A%2F%2FEhUJhw1rY1B\u0026MCU=N.8fig%28AN\u0026U1Xppp=\u0026UpJ~=i\u0026XBMCU=\u0026XCU=NQSaTg064\u0026XJCU=N5NtitTIa\u0026XUl=80g5a\u0026XX=%298\u0026X_Dp0=I.8itGI5g\u0026X_Dpz=%21%2Al5RCDBX\u0026Y1=T\u0026YCU=\u0026YCUlz=\u0026YUJvU=\u0026Yh1=\u0026ZYCU=\u0026_BBM%2A=i\u0026hMQy=\u0026hU%21phCD=\u0026hUBi=\u0026hUBz=\u0026hUl=\u0026hXB=.KvK~25D2b%2F~W%2FhWK~byK5D%2F05J2%29%2F~20WK\u0026hY~EqCU=lz\u0026htmlsrc=1\u0026kkdd=nW%7C%21%7Ch3un%2AW9AH\u0026lC=igIi0z0NgziTI5NiTTg\u0026p%2AMh=T\u0026q%2A_M=T\u0026qE%2ABM=T\u0026tpid=\u0026wU=\u0026wqJ~=\u0026xUMJ=i\u0026xUMJXD%2AB=\u0026y%2AM1D~=T\u0026yxU=5\u0026~%2A=\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001791323872898032757816326589\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153886947282703404%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=8y_3XBAJ3IcS87_IpjSex2s4IrBLRwZQHx_oWc8Rhhwr4kDI87fMPMhhwUl7KD4TQTZ-LCoQWc6633yWLiLt44ViTvlkHHYmJyqA2btBKX_gUhdY0Z6rTaGUdyy9KKVoz-EqSDVoP_s4ahI71YMdkyCG3uC_vwRE_VIrBagSRc04SWEFea-6V6ur-5bJHCA4fDQJ1YtjYPA%3D\u0026tchkpts=%7B%22prel2%22%3A1791323873068%7D\u0026stime=1791323873068\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528%252528xi%253D%25257B%252522%252528%252528GG%252522%25253A%252522qm%252522%25252C%252522%252528%252528GOB%252522%25253A%252522vB%252528bc%252522%25252C%252522%252528%252528Yz%252522%25253A%252522%252522%25252C%252522%252528%252528%252528G%252522%25253A%252522JN%252522%25252C%252522%252528%252528uYz%252522%25253A%252522%252522%25257D%2526%252528G%253DJN%2526%252528Yub%253D33.PKX2H%2526%252528_iIDi%253D%2526%25252AQIy%253D%2526%25252Ai%253D%2526-_Yi%253D%25265GO%253DEMDMy9Pc9u%25252FyK%25252F5KMyutMPc%25252FJPI9q%25252Fy9JKM%25265_yxQYi%253Dah%25265iO3%253D%25265iOh%253D%25265ia%253D%25265ijv5Yc%253D%25265zTt%253D%2526B_cSGGSbKz%253D%2526Bi%252528zI%253D%2526Bzxz%253D%2526GG%253Dqm%2526GIYi%253D2P2.3.NHX%2526GOzYi%253D%2526GUcvJ%253DHEm3.fHPk%2526GUcvh%253Dj%252528aPSYcOG%2526GYi%253D2TpXNkJ4F%2526Gia%253DmJkPX%2526IbetIx%253DUOOz%25253A%25252F%25252Fx5iI5%25252Abo_bO%2526O%252528Gb%253DW3JkP%2526Q%252528Uz%253DN%2526Qx%252528Oz%253DN%2526UOOz%252528%253D3%2526Y%252528Yi%253DN%2526YcOGx%253D2R1-%252521k.1l%25253Arp1%25257C6b21%25253AyHnoYtotYVodV%25257C6q21%25253AtY~oVdottnoH%25257CmR21%25253AtY~oVdottnot~y%2526_5b%253D%2526_Yi%253D%2526_Yiah%253D%2526_b%253DN%2526_iIDi%253D%2526aY%253D3kH3JhJ2kh3NHP23NNk%2526bGIYi%253D%2526cOa%253D%2526cvbII%253D3%2526htmlsrc%253D1%2526ibGvvv%253D%2526ivIy%253D3%2526jYi%253DNb2._HHy6y23N6P.H.62.X56NPXhXyPJPG2b%2526jx5y%253Djcb%2526kkdd%253Duu%25257Cu%25257C9%25252A3nHA%2526t%252528zbcy%253DN%2526tpid%253D%2526twi%253DP%2526v%252528z5%253DN%2526wizI%253D3%2526wizIGc%252528O%253D%2526xhOBzb%253Divjx5%2526y%252528%253D%2526zYi%253D2Emg3k0R2%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","date":"2026-10-06T21:57:54.626Z","timestamp":1791323874626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 21:20:12 GMT","end":"Sun, 20 Dec 2026 22:20:07 GMT"},"fingerprint":{"sha1":"98:B1:3F:26:3D:00:6E:C0:49:6B:E0:9A:B3:7F:FA:65:57:D1:F6:66","sha256":"DF:7E:14:D6:11:75:6F:58:61:9F:1D:F8:34:5D:DF:EC:E0:72:07:A4:D8:EB:C3:70:2B:52:6E:C4:5A:C7:77:91"}}},"request":{"raw":"GET /bqi.php?vgd_len=986\u0026\u0026vgd_aref=0\u0026vgd_tsce=L1374-S1374\u0026vgd_l2type=dmola\u0026vgd_ydspr=0\u0026vgd_cdv=O3746\u0026vgd_cage=0\u0026vgd_pgids=0\u0026vgd_pdtid=1\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026lf=3\u0026prid=8PR11258V\u0026cid=8CU6073RK\u0026crid=848515096\u0026requrl=http%3A%2F%2Fladrake.bet\u0026vi=1791323872109481007\u0026ugd=4\u0026cc=NO\u0026sc=30\u0026gdpr=1\u0026vgd_acid=undefined\u0026hvsid=00001791323872898032757816326589\u0026vgd_vimpt=30\u0026vgd_vimpd=1000\u0026cme=YQ59PP0dv3v3Uvsm8VZRdqopQ-QMZAWfIMF3B29Z4gM26OL_wJ5VGYd6q9rQ4qQhQxzaGZKRi3tGT4ucEqU2nwriSHMKhgjDRGTImWfYxJ4p24pBSqOxjkcQbyQlGob7QY3EyKglrzzSGe8aUc6Jby_OIGp1PHV7xy60tPihqZARpu49qdcfJaO4x13gP1igM8jLRxnFi_Q1c2OYn7Wn-YjljaUXU1bXKAG4z8qx2alvx-M16soHeMR-NU4v2NSzugAjtG9ihPk%3D%7C%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7CWtJPvijWHRsfBv4nOZN-Vs0s0qvvEfG0%7CxDcVMoSqRIR4EymPIl-6nsSVTiX17pQEipxAYimR0cE%3D%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7C\u0026fp=4MIcPO7NGqkcg6rwweV9dVI_6RYU5tWPoSFODYVHVhg_UcSrAY3JR02gLZaldehB_iVVLJ-Tg2bKTA8yQDFDk1UdKMqTGDeS4mUle25-1NzWsjavwJy0fNcU2Eo0ds1W7hvxne3maHY%3D\u0026vgd_rensize=1280_926\u0026vgd_end=1 HTTP/1.1\r\nHost: l.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://realtimesearchresults.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=0, no-cache, no-store\r\ncontent-type: text/javascript\r\nexpires: Mon, 05 Oct 2026 21:57:54 GMT\r\npragma: no-cache\r\ndate: Tue, 06 Oct 2026 21:57:54 GMT\r\nserver-timing: cfExtPri\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sashmTfdhMuauu%2B9bJkys3tDJqVPSbqKwROaEhMHBsTvKOCCzSbRbQ6koHk2hVBJxOWQV2wtAPrK%2F2%2BvnkCIsHfUzFXk8X962Ai%2BCpo4iLRBqV26PLpSVcpgOnLFJjPEu1COhRnyHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a467eca86ae4a0f0-OSL\r\ncontent-length: 15\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":15,"size_decoded":891,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"2ba5e95642c652c708881ad3c9d8443f","sha1":"5bfcc33bb9cc897546c600206b03d1307bd63a94","sha256":"c787e9dd6dc8ea3c935f5f0f30e3b9e4a3e066b4619bb244f569883f8e318a24","sha512":"8c157fc41fd03bbd47633269b18effb652644e58284f8f85465b0ffba9b5a06544a03ed0655706c96edfa09a64f4f164f6bbc573ac5045000cae03c8b36d046f","ssdeep":"","tlshash":"7e600000000cc030030f0c00c3000300303000c000000c33000f30cc000000c00fc303","first_seen":"2025-03-08T00:25:13.560069Z","last_seen":"2026-10-08T00:39:03.663847Z","times_seen":225630,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d.delivery.consentmanager.net/delivery/consent.php?id=175795\u0026p=3\u0026v=2\u0026ccc=aCQrtlUPgAAAAAA\u0026c=CQrqkQAQrqkQAAfcDCENCzFgAAAAAAAAAAigAAAZOgLAA4AGaAZ8BHgCVQHbAQUAjSBIgCUYEyQKpAVgArmBXwC1YFvAL2AYCAxABjADJwAA.IM7NR_G__bXlv-bb36btkeYxf9_hr7sQxBgbIsm4FzLvW7JwG32EbJEyatiIKmRIAu3DBIQNtHBjURUChKIAVrzDsaE2U4TtKJ-BkiHMZYytQCExvm4tjeQCZ4ur_90d0mR-t6dr-2dzy27hnn3K9fuS1UJydKYetHfv-ZhOS-_IU9_x-_4v4_MbpEm0eSVv9tUst4zc64vv6dpuxt-Tyff6f__f73fS7X__e__33_8qX3_r76-___3__v___ff_________9__-___________A\u0026l=EN\u0026lv=97099\u0026d=2\u0026ct=0\u0026e=\u0026h=https%3A%2F%2Fyfdpco5.com%2Fsk-park.php\u0026e2=\u0026e3=\u0026i=\u0026sv=1231\u0026dv=64\u0026cookieallowed=1\u0026reg=1\u0026rk=GDPR\u0026usps=1---","fqdn":"d.delivery.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"94.237.93.104","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yfdpco5.com/sk-park.php?pid=9PO15V947\u0026dn=ladrake.bet\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.ladrake.bet%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-10-06T21:57:59.986Z","timestamp":1791323879986,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.delivery.consentmanager.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FD:3D:5F:67:04:BA:73:77:A7:4B:D6:EB:58:C2:FC:D4:01:EE:58:64","sha256":"95:14:00:DA:64:95:A5:B3:BD:95:40:8F:E7:45:6C:68:21:88:41:0E:BA:77:8C:C4:50:5C:15:69:2E:02:AB:ED"}}},"request":{"raw":"GET /delivery/consent.php?id=175795\u0026p=3\u0026v=2\u0026ccc=aCQrtlUPgAAAAAA\u0026c=CQrqkQAQrqkQAAfcDCENCzFgAAAAAAAAAAigAAAZOgLAA4AGaAZ8BHgCVQHbAQUAjSBIgCUYEyQKpAVgArmBXwC1YFvAL2AYCAxABjADJwAA.IM7NR_G__bXlv-bb36btkeYxf9_hr7sQxBgbIsm4FzLvW7JwG32EbJEyatiIKmRIAu3DBIQNtHBjURUChKIAVrzDsaE2U4TtKJ-BkiHMZYytQCExvm4tjeQCZ4ur_90d0mR-t6dr-2dzy27hnn3K9fuS1UJydKYetHfv-ZhOS-_IU9_x-_4v4_MbpEm0eSVv9tUst4zc64vv6dpuxt-Tyff6f__f73fS7X__e__33_8qX3_r76-___3__v___ff_________9__-___________A\u0026l=EN\u0026lv=97099\u0026d=2\u0026ct=0\u0026e=\u0026h=https%3A%2F%2Fyfdpco5.com%2Fsk-park.php\u0026e2=\u0026e3=\u0026i=\u0026sv=1231\u0026dv=64\u0026cookieallowed=1\u0026reg=1\u0026rk=GDPR\u0026usps=1--- HTTP/1.1\r\nHost: d.delivery.consentmanager.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco5.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Tue, 06 Oct 2026 21:58:00 GMT\r\nserver: Apache/2.4.68 (Debian)\r\ncache-control: no-store, no-cache, must-revalidate\r\nedge-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 01 Dec 1994 16:00:00 GMT\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-cf: 0\r\nx-ct: 3\r\nx-r: GDPR\r\nlast-modified: Tue, 06 Oct 2026 21:58:00 GMT\r\ntransfer-encoding: chunked\r\ncontent-type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]}],"data":{"size":43,"size_decoded":496,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"6f81c41597d3f5a336f458822cc0c32a","sha1":"8cd77a54b38f1fb376b45af2eaab8f5982523b8d","sha256":"5704a2e9f2f7ce43a79f9b407f1aedcfd50223cbe8bd2f71ff8c5c819e469cbc","sha512":"edb4841fa021f06b664c4f09378f6572177ceb8518b976c0b1571e2346fa116097d4979d31bd9ab7e841b68795922a07d451583620a2f31e3e54a867f91d7c95","ssdeep":"","tlshash":"b7900023ea888023c2a2c0300a0803003b88b8300238032e80bc30a8ec3a3a20c02000","first_seen":"2023-04-06T20:54:09Z","last_seen":"2026-10-08T00:39:03.673732Z","times_seen":62189,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.ladrake.bet/a9bb3415-faf9-416d-8248-0c968699ba55/eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.KYmHf80ERwjrsrYk6uchQqL0aLJvqHGf_TAiqKllHkcMBcN2ZlY9Ow.yl4_mQw77V4qTOG760gPOw.TgpjiJNmJfQv3zZLi1hgTk7LKSsAj_dHLpuVGidTlBbe-LX2wBRcEg4--wI-A2Q9rE1OiCeOafRsx7UKudSHzTMjBdB4I4KM1F13tVWKDKsBsclzvjNVj1EM4Z2gkjQp8d8LeGR1OWc2b1jdkOcuG8hNfD6PipqsFwrUMhI-2acwKf8tyx-3Dg6pKVBeyHuXyD1NMeZU-xGDtXZ3XMvG8MJ7arzOWmAjTsosCH9B1MmVIPftQV6zKw5JI39SNylOjRZkdaFr6nVxtSVtPw8xPmc_S1KFhJcu5qLmY0AYU5Bu5Q7zzM0v4Bn19665P9vQjrUpK7MX7LCLi0vfkK-XBQ.5gKnYU3F-ZDtke-gskQajQ","fqdn":"ww38.ladrake.bet","domain":"ladrake.bet","tld":"bet"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ww38.ladrake.bet/","date":"2026-10-06T21:57:51.977Z","timestamp":1791323871977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww38.ladrake.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 18:02:56 GMT","end":"Sun, 03 Jan 2027 18:02:55 GMT"},"fingerprint":{"sha1":"5F:1E:C5:32:F9:E9:DE:5E:C5:F1:5A:A3:DF:06:FD:BA:14:4B:97:94","sha256":"61:D2:C3:11:0C:0A:74:89:06:80:4B:3F:1D:1F:41:5F:76:CA:A0:31:D6:F0:2F:D4:46:18:25:E1:C6:85:81:31"}}},"request":{"raw":"GET /a9bb3415-faf9-416d-8248-0c968699ba55/eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.KYmHf80ERwjrsrYk6uchQqL0aLJvqHGf_TAiqKllHkcMBcN2ZlY9Ow.yl4_mQw77V4qTOG760gPOw.TgpjiJNmJfQv3zZLi1hgTk7LKSsAj_dHLpuVGidTlBbe-LX2wBRcEg4--wI-A2Q9rE1OiCeOafRsx7UKudSHzTMjBdB4I4KM1F13tVWKDKsBsclzvjNVj1EM4Z2gkjQp8d8LeGR1OWc2b1jdkOcuG8hNfD6PipqsFwrUMhI-2acwKf8tyx-3Dg6pKVBeyHuXyD1NMeZU-xGDtXZ3XMvG8MJ7arzOWmAjTsosCH9B1MmVIPftQV6zKw5JI39SNylOjRZkdaFr6nVxtSVtPw8xPmc_S1KFhJcu5qLmY0AYU5Bu5Q7zzM0v4Bn19665P9vQjrUpK7MX7LCLi0vfkK-XBQ.5gKnYU3F-ZDtke-gskQajQ HTTP/1.1\r\nHost: ww38.ladrake.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ww38.ladrake.bet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 \r\nalt-svc: h3=\":8443\"; ma=2592000\r\ndate: Tue, 06 Oct 2026 21:57:52 GMT\r\nserver: Caddy\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":136,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T00:41:02.911988Z","times_seen":18927714,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"ww38.ladrake.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww38.ladrake.bet/favicon.ico","fqdn":"ww38.ladrake.bet","domain":"ladrake.bet","tld":"bet"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww38.ladrake.bet/","date":"2026-10-06T21:57:52.116Z","timestamp":1791323872116,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww38.ladrake.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 18:02:56 GMT","end":"Sun, 03 Jan 2027 18:02:55 GMT"},"fingerprint":{"sha1":"5F:1E:C5:32:F9:E9:DE:5E:C5:F1:5A:A3:DF:06:FD:BA:14:4B:97:94","sha256":"61:D2:C3:11:0C:0A:74:89:06:80:4B:3F:1D:1F:41:5F:76:CA:A0:31:D6:F0:2F:D4:46:18:25:E1:C6:85:81:31"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ww38.ladrake.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.ladrake.bet/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":8443\"; ma=2592000\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Tue, 06 Oct 2026 21:57:52 GMT\r\netag: \"dfu820j7awxu0\"\r\nlast-modified: Wed, 21 Jan 2026 11:14:12 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":309,"mime_type":"image/vnd.microsoft.icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T00:41:02.911988Z","times_seen":18927714,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"ww38.ladrake.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/ct","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"52.48.54.225","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww38.ladrake.bet/","date":"2026-10-06T21:57:52.246Z","timestamp":1791323872246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 17 Aug 2026 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EE:E8:EA:46:19:BB:CD:06:47:CD:BE:A5:CB:4D:D5:B1:10:DA:04:FB","sha256":"6F:F7:26:C1:10:8F:08:8A:9A:3F:1B:1D:C0:B2:22:FA:92:87:E8:8E:0B:BF:4D:70:D3:63:B0:64:7C:53:C5:9D"}}},"request":{"raw":"POST /ct HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 4515\r\nOrigin: https://ww38.ladrake.bet\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.ladrake.bet/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4515,"data":"id=92098\u0026url=https%3A%2F%2Fww38.ladrake.bet%2F\u0026sf=0\u0026tpi=\u0026ch=AdsDeli%20-%20iFrame\u0026uvid=e1217d0f9076e623a466573bd0b97a9c6da89370\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1791323872241\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=1357828677767251825591267922611721012101999579227995622217120100291010012971224701902280020060812\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=linux%20x86_64\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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%3D%3D\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=3BG4IbtmIm\u0026pto=1638\u0026ver=66\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1791323872.ttax7culbdXc48wX\u0026suid=1.1791323872.nR8d8qh2zBZFg27y\u0026tuid=1.1791323872.CShfBUQylN3UNFl6\u0026sid=1.1791323872242.py3CUhepSvvAKAvr\u0026fbc=-\u0026gtm=-\u0026it=6%2C1077%2C336\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA2Oi15fzZz"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://ww38.ladrake.bet\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Tue, 06 Oct 2026 21:57:52 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: cg_uuid=fdb99b5d2a259d3a249d86f32bbef602; Max-Age=29030400; Path=/; Expires=Tue, 07 Sep 2027 21:57:52 GMT; HttpOnly; Secure; SameSite=None\r\ntiming-allow-origin: https://ww38.ladrake.bet\r\ncontent-length: 2125\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"cg_uuid","value":"fdb99b5d2a259d3a249d86f32bbef602","quoted":false,"path":"/","expires":"2027-09-07T21:57:52Z","raw_expires":"Tue, 07 Sep 2027 21:57:52 GMT","max_age":29030400,"secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"cg_uuid=fdb99b5d2a259d3a249d86f32bbef602; Max-Age=29030400; Path=/; Expires=Tue, 07 Sep 2027 21:57:52 GMT; HttpOnly; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5074,"size_decoded":2741,"mime_type":"application/json","magic":"JSON text data","md5":"e09bf3f71b822d79236cf1c95a97001f","sha1":"7de48599adabda9b59cce2ec567d94e0703e30a3","sha256":"7f76954d7217c2564a2f12bf2a040667a14a7ef5ddf5bcaa261e8c0161c6cb8e","sha512":"de6459f122f7ce899b74ee7f42d2dc3cbbb2ed0e879db1e5fe3bed1536f9361ac95f58739ed84ae3ab0df1d496d340328e6656a3676118bb14c75f1db90cf164","ssdeep":"96:J/iuaJmVTikzbQcQserF5WrR8l/ixaJmVTikzbQcQserF5WrR8cQdm5Jds:J/VTikzbHQ1r3WrKl/QTikzbHQ1r3Wr8","tlshash":"c3a12cbc941e877431abac389e0b7d8ec3e0af3654c7748ed0591bea15eb7049b56411","first_seen":"2026-10-06T21:58:41.603421Z","last_seen":"2026-10-06T21:58:41.603421Z","times_seen":1,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":2,"connect":32,"send":0,"wait":50,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1\u0026id=175795\u0026o=1791323873\u0026h=https%3A%2F%2Fyfdpco5.com%2Fsk-park.php%3Fpid%3D9PO15V947%26dn%3Dladrake.bet%26ua%3DMozilla%252F5.0%2B%2528Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%2529%2BGecko%252F20100101%2BFirefox%252F134.0%26ip%3D195.64.118.0%26xfip%3D195.64.118.0%26requrl%3Dhttp%253A%252F%252Fww38.ladrake.bet%252F%26al%3Den-US%252Cen%253Bq%253D0.9\u0026\u0026l=en\u0026odw=0\u0026dlt=1\u0026l=en","fqdn":"d.delivery.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"94.237.93.104","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yfdpco5.com/sk-park.php?pid=9PO15V947\u0026dn=ladrake.bet\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.ladrake.bet%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-10-06T21:57:53.236Z","timestamp":1791323873236,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.delivery.consentmanager.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FD:3D:5F:67:04:BA:73:77:A7:4B:D6:EB:58:C2:FC:D4:01:EE:58:64","sha256":"95:14:00:DA:64:95:A5:B3:BD:95:40:8F:E7:45:6C:68:21:88:41:0E:BA:77:8C:C4:50:5C:15:69:2E:02:AB:ED"}}},"request":{"raw":"GET /delivery/cmp.php?__cmpcc=1\u0026id=175795\u0026o=1791323873\u0026h=https%3A%2F%2Fyfdpco5.com%2Fsk-park.php%3Fpid%3D9PO15V947%26dn%3Dladrake.bet%26ua%3DMozilla%252F5.0%2B%2528Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%2529%2BGecko%252F20100101%2BFirefox%252F134.0%26ip%3D195.64.118.0%26xfip%3D195.64.118.0%26requrl%3Dhttp%253A%252F%252Fww38.ladrake.bet%252F%26al%3Den-US%252Cen%253Bq%253D0.9\u0026\u0026l=en\u0026odw=0\u0026dlt=1\u0026l=en HTTP/1.1\r\nHost: d.delivery.consentmanager.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco5.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Tue, 06 Oct 2026 21:57:53 GMT\r\nserver: Apache/2.4.68 (Debian)\r\ncache-control: no-store, no-cache, must-revalidate\r\nedge-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 01 Dec 1994 16:00:00 GMT\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 06 Oct 2026 21:57:53 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 769\r\ncontent-type: text/javascript; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1330,"size_decoded":1254,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (561)","md5":"a73d16628f8c78f235c5d1eebaab8cbe","sha1":"285603d0066107bfdc0817dea095f3752c183c8c","sha256":"391a8be0cb2ddc9f4c1d9e4e06b95b69cad9bbc2a34ef09ec5228ae4470befd0","sha512":"d4eece5b1ef8dfce6ccc081c8677d7df40858cc8a800b70eaf34f2ea9e82e52a72926ec3bbcedadab648f5aca756f76a1105ae55c1263fe891f83fe4e53bd879","ssdeep":"","tlshash":"fe21fc349e502d50e2260989b57eb36cb677263368c5e164684fa884de04e1bccdb9e0","first_seen":"2026-10-06T21:58:41.606336Z","last_seen":"2026-10-06T21:58:41.606336Z","times_seen":1,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"52.48.54.225","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww38.ladrake.bet/","date":"2026-10-06T21:57:53.480Z","timestamp":1791323873480,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 17 Aug 2026 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EE:E8:EA:46:19:BB:CD:06:47:CD:BE:A5:CB:4D:D5:B1:10:DA:04:FB","sha256":"6F:F7:26:C1:10:8F:08:8A:9A:3F:1B:1D:C0:B2:22:FA:92:87:E8:8E:0B:BF:4D:70:D3:63:B0:64:7C:53:C5:9D"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 3918\r\nOrigin: https://ww38.ladrake.bet\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.ladrake.bet/\r\nCookie: cg_uuid=fdb99b5d2a259d3a249d86f32bbef602\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"cg_uuid","value":"fdb99b5d2a259d3a249d86f32bbef602"}],"method":"POST","post_data":{"size":3918,"data":"e=37dfbd8ee84e001263efc437e94f8d9f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d57138d642f17070100b1eabfd72e30d69183042b3e18f6646541c2628b70cd166651719a5b525a61060ec4bb621b66f336e66c8d41f6c538f2003df95b2b7a13c84ffe1fbe85ddcd3cb82d19f97adea954659005344163588b934131b723f8b388a75f45af34d0fd60b47d8b74c14e851538c9745bad4b01473cb52d3ea7dfa2f46cff1ab458da17f85e3975bddc273b7d70588661979d00e07360abc8ee3d4f7a23d6862f208a902a476811275843b88f2f646307b6e65b3bd9eae72482b15e241c7faaa1f3929b75bdd88f0be303cf5f3965c4bcc9e6f53194dcb763912112c3a79c3e1215f0606ca08c0621ac84e97e9d5ebb02f2c712dd508c887ccc2669c7cd65893ec5ccbaa6cbf0f10538a27aa4b1fb354376e98220cfea50b9464702cb4f0997dac3e4ecbccb70c86a88cefbc86fed3c2362ca383b9390965e37d7f833f341a7dd0d977def25026852dd10b803d785e13db3a328c413e0cf929b6b8d4d4f68fe481f5e72092687a023fa05d1cfa62aae9969ebbb2a9adaa9b13dc1f0e35f477083ee5252f0b1490242bbacac74e66688e037ece12dae7da0319553c815d7a83ecf0626e4ae9166233e600329094016aae18f6ace03b7454d4b35f9b44fdb9f040fe2a5d6babd6cdef0edfc87f9b3ec424f3df95b9bbf596f805f7812d762596d71ff7bae7305dfe2c1628c7cca2c8baa2bd1a50c9b73133c230a7b0f81c3e2df2066529b195988d4d8bfacd755059fdda16fc28a2a2fcad8003d77f896d05722b5248d589d04a77bca5adc9b56a4e8668ac88cdadf2f70f3f27826db22b487a2aa089d6b3d1706966b4b57b3bd01ede440c2d8c3ca1ebfedf1640c300eac21b941ef0ce6936384335d2046337c7ce3598686314bca0c98f18750b88611f27716d167202a8df4c3481ab863ffe57dc615734413ae312c9ebd83398f0642c5d642e58682a1e2178d040a7c07f8753940c8c54e4eb03fe6fddd3fcf8ebd1c577dbe786055518d055ae598ed0403d03f33c19d875ddb8bf99c0830b031a71535159f1b616ddfd3054297c4bc95b1f001eb3aba7c8c73949d08c5f1ea7a74fd8c45c29dbeb6d8e194896d049eec7b10c7638e18c50df3ee39a0ddd1c723f1df82eaf10d69cba294bc1c8617dd100468000f93ce6d699b269c0497df60f25f3afe7f199b62e4d26d7eb73b2c5718dcad987899cb01606904758d8681ebd075c356eabe2e2cced3545c4c102b6c4cbc7de0be3915abf9838cf6acb4a4ae8234f0b6d9447f6f4d63693822009804560ffcb2eef674e5ca68468b9401\u0026cri=3BG4IbtmIm\u0026sf=0\u0026dc=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%3D%3D\u0026cp=1\u0026gtm=-\u0026gac=-\u0026uvid=e1217d0f9076e623a466573bd0b97a9c6da89370\u0026tb=1%7C7%2C55\u0026gi=17%2C1914\u0026ich=1\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=55\u0026ti=1015\u0026mo=0\u0026pn=2873\u0026spn=1858\u0026sck=38611571cec14d5d339ebeb20dd03a8e.ELp3aSj4xN7bb%2BOh%3AaOAtBLdCtpfZuFKOsuufC%2F12dba4XKn%2BYGoxfCgpZ0pqdw9zGmdQox%2Bp%2BFRbb5ll%2BUsEgKmYo9ulFbuLLebEq3xApV8hFi%2Fh3TGRyjZFu9lw%2FxSPGHzNvjXSO6UKAb9eKe7g0K2r%2BPk3lvJX8LHqavWpbdEWiT6h8PBvPJJi1WSFUb%2FhFEwu9C%2FzJSCxvo%2B2s1AenrVratpHsK2tJfs97PX5CPfmRrBXSFaWLm%2BKmHBOx9ap5LYtRkNQOWY%2FGLpmRwyG25WFhJ7HNAENKzEHD276Z2U6wb0Qh06VwgcNsdR1JmS%2B1uupi7uzu1FKCH%2Bgpw3ufqiPKO%2BDlp3FHh2ydJ3TDUIzwVORSa0TUzpTkwuE01Tsu%2BdBNI7QFHOsOt0%2B%2FwNae%2BgzB%2B%2FTQj52me%2BqSyscdvB3R3KYZ3ArhB40u%2Bk30fipPu5UtlY255vH3UH5FFq5XH5k4aTyM2RrD3EPNH74MwB%2F%2FZVtFKcYID1j5Y%2FMs3usqMULT4rHNXvtE04u2S%2F9MlJh%2FvXyXiWBmuK%2FlCKqOKDVg9Qlz4V1dex2FmuQRhf%2Ba5nbL%2BKfJ9jyB3Rk941l3lJqYh0THWyaw8NqJze8DWFRGAC%2B526I8xRyDleexzlSMM%2FDyczzd96zOC9QI9NPPIB94CTWqd0359KD4v0plpTuQ7ZLqyY3zI4ZKwCQ2yg%3D%3ADhKCii9229f0h4QlGw13rA%3D%3D\u0026fp=1248\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://ww38.ladrake.bet\r\ncontent-type: application/json\r\ndate: Tue, 06 Oct 2026 21:57:53 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":4809,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T00:41:02.911988Z","times_seen":18927714,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"52.48.54.225","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww38.ladrake.bet/","date":"2026-10-06T21:58:02.513Z","timestamp":1791323882513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 17 Aug 2026 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EE:E8:EA:46:19:BB:CD:06:47:CD:BE:A5:CB:4D:D5:B1:10:DA:04:FB","sha256":"6F:F7:26:C1:10:8F:08:8A:9A:3F:1B:1D:C0:B2:22:FA:92:87:E8:8E:0B:BF:4D:70:D3:63:B0:64:7C:53:C5:9D"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 3039\r\nOrigin: https://ww38.ladrake.bet\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.ladrake.bet/\r\nCookie: cg_uuid=fdb99b5d2a259d3a249d86f32bbef602\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"cg_uuid","value":"fdb99b5d2a259d3a249d86f32bbef602"}],"method":"POST","post_data":{"size":3039,"data":"e=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\u0026cri=3BG4IbtmIm\u0026sf=0\u0026dc=\u0026cp=10\u0026gtm=-\u0026gac=-\u0026uvid=e1217d0f9076e623a466573bd0b97a9c6da89370\u0026tb=1%7C7%2C55\u0026gi=17%2C1914\u0026ich=0\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=55\u0026ti=10047\u0026mo=0\u0026pn=11905\u0026spn=1858\u0026sck=38611571cec14d5d339ebeb20dd03a8e.ELp3aSj4xN7bb%2BOh%3AaOAtBLdCtpfZuFKOsuufC%2F12dba4XKn%2BYGoxfCgpZ0pqdw9zGmdQox%2Bp%2BFRbb5ll%2BUsEgKmYo9ulFbuLLebEq3xApV8hFi%2Fh3TGRyjZFu9lw%2FxSPGHzNvjXSO6UKAb9eKe7g0K2r%2BPk3lvJX8LHqavWpbdEWiT6h8PBvPJJi1WSFUb%2FhFEwu9C%2FzJSCxvo%2B2s1AenrVratpHsK2tJfs97PX5CPfmRrBXSFaWLm%2BKmHBOx9ap5LYtRkNQOWY%2FGLpmRwyG25WFhJ7HNAENKzEHD276Z2U6wb0Qh06VwgcNsdR1JmS%2B1uupi7uzu1FKCH%2Bgpw3ufqiPKO%2BDlp3FHh2ydJ3TDUIzwVORSa0TUzpTkwuE01Tsu%2BdBNI7QFHOsOt0%2B%2FwNae%2BgzB%2B%2FTQj52me%2BqSyscdvB3R3KYZ3ArhB40u%2Bk30fipPu5UtlY255vH3UH5FFq5XH5k4aTyM2RrD3EPNH74MwB%2F%2FZVtFKcYID1j5Y%2FMs3usqMULT4rHNXvtE04u2S%2F9MlJh%2FvXyXiWBmuK%2FlCKqOKDVg9Qlz4V1dex2FmuQRhf%2Ba5nbL%2BKfJ9jyB3Rk941l3lJqYh0THWyaw8NqJze8DWFRGAC%2B526I8xRyDleexzlSMM%2FDyczzd96zOC9QI9NPPIB94CTWqd0359KD4v0plpTuQ7ZLqyY3zI4ZKwCQ2yg%3D%3ADhKCii9229f0h4QlGw13rA%3D%3D\u0026fp=1248\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0\u0026snt=1"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://ww38.ladrake.bet\r\ncontent-type: application/json\r\ndate: Tue, 06 Oct 2026 21:58:02 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":3930,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T00:41:02.911988Z","times_seen":18927714,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/tracker/tc_imp.gif?e=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\u0026cri=3BG4IbtmIm\u0026ts=230\u0026cb=1791323872471","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"52.48.54.225","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww38.ladrake.bet/","date":"2026-10-06T21:57:52.474Z","timestamp":1791323872474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 17 Aug 2026 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EE:E8:EA:46:19:BB:CD:06:47:CD:BE:A5:CB:4D:D5:B1:10:DA:04:FB","sha256":"6F:F7:26:C1:10:8F:08:8A:9A:3F:1B:1D:C0:B2:22:FA:92:87:E8:8E:0B:BF:4D:70:D3:63:B0:64:7C:53:C5:9D"}}},"request":{"raw":"GET /tracker/tc_imp.gif?e=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\u0026cri=3BG4IbtmIm\u0026ts=230\u0026cb=1791323872471 HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.ladrake.bet/\r\nCookie: cg_uuid=fdb99b5d2a259d3a249d86f32bbef602\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"cg_uuid","value":"fdb99b5d2a259d3a249d86f32bbef602"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ndate: Tue, 06 Oct 2026 21:57:52 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 43\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":270,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"db04c7b378cb2db912c3ba8a5a774ee3","sha1":"dee34bd86c3484d31002182aa2b7caa4699126b8","sha256":"98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a","sha512":"826225fc21717d8861a05b9d2f959539aad2d2b131b2afed75d88fbca535e1b0d5a0da8ac69713a0876a0d467848a37a0a7f926aeafad8cf28201382d16466ab","ssdeep":"","tlshash":"6490000bca888002caa2c0302b8883022b88b0320228832e80bc30a8ee3b3a20c02000","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-10-08T00:39:03.67003Z","times_seen":421177,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d.delivery.consentmanager.net/delivery/cmp.php?\u0026cdid=40679ccc92462\u0026h=https%3A%2F%2Fyfdpco5.com%2Fsk-park.php%3Fpid%3D9PO15V947%26dn%3Dladrake.bet%26ua%3DMozilla%252F5.0%2B%2528Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%2529%2BGecko%252F20100101%2BFirefox%252F134.0%26ip%3D195.64.118.0%26xfip%3D195.64.118.0%26requrl%3Dhttp%253A%252F%252Fww38.ladrake.bet%252F%26al%3Den-US%252Cen%253Bq%253D0.9\u0026\u0026l=en\u0026o=1791323873062","fqdn":"d.delivery.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"94.237.93.104","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yfdpco5.com/sk-park.php?pid=9PO15V947\u0026dn=ladrake.bet\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.ladrake.bet%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-10-06T21:57:53.065Z","timestamp":1791323873065,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.delivery.consentmanager.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FD:3D:5F:67:04:BA:73:77:A7:4B:D6:EB:58:C2:FC:D4:01:EE:58:64","sha256":"95:14:00:DA:64:95:A5:B3:BD:95:40:8F:E7:45:6C:68:21:88:41:0E:BA:77:8C:C4:50:5C:15:69:2E:02:AB:ED"}}},"request":{"raw":"GET /delivery/cmp.php?\u0026cdid=40679ccc92462\u0026h=https%3A%2F%2Fyfdpco5.com%2Fsk-park.php%3Fpid%3D9PO15V947%26dn%3Dladrake.bet%26ua%3DMozilla%252F5.0%2B%2528Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%2529%2BGecko%252F20100101%2BFirefox%252F134.0%26ip%3D195.64.118.0%26xfip%3D195.64.118.0%26requrl%3Dhttp%253A%252F%252Fww38.ladrake.bet%252F%26al%3Den-US%252Cen%253Bq%253D0.9\u0026\u0026l=en\u0026o=1791323873062 HTTP/1.1\r\nHost: d.delivery.consentmanager.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco5.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Tue, 06 Oct 2026 21:57:53 GMT\r\nserver: Apache/2.4.68 (Debian)\r\ncache-control: no-store, no-cache, must-revalidate\r\nedge-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 01 Dec 1994 16:00:00 GMT\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 06 Oct 2026 21:57:53 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 767\r\ncontent-type: text/javascript; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1330,"size_decoded":1252,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (561)","md5":"f958d9132f66f7d48b59774f009d4241","sha1":"c47cdb87072decd51965da969db17eae2c2048c1","sha256":"23fffd6b9b1619180c57a10effd4fdb9f75dca05621fb09f8331f983e3257805","sha512":"2c59ef5072ff83bad8ce2b70418e2b1a81deac3433d37369b53914d7c164e96fce850e56c786f990bf979077227ceca8fc07c00358814de8b143aaad5ec9c270","ssdeep":"","tlshash":"aa21fc349e502d50e22609c9b57eb36cb677263368c5e164684fa884de04e1bccdb9e0","first_seen":"2026-10-06T21:58:41.612266Z","last_seen":"2026-10-06T21:58:41.612266Z","times_seen":1,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":1,"dns":1,"connect":35,"send":0,"wait":40,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=949\u0026%21CU=T1NtYII~O~NiTO5tItONtahOT5aza~505XN1\u0026%21Eh~=%21D1\u0026%2A%2AEU=%7B%22%2A%2AXX%22%3A%22%298%22%2C%22%2A%2AXB3%22%3A%22p3%2A1D%22%2C%22%2A%2ACM%22%3A%22%22%2C%22%2A%2A%2AX%22%3A%220T%22%2C%22%2A%2AbCM%22%3A%22%22%7D\u0026%2ACb1=iit5WaNI\u0026%2AX=0T\u0026%2AYUJvU=\u00261XJCU=\u00263MEM=\u00263U%2AMJ=\u00263YDRXXR1WM=\u0026B%2AX1=ji0g5\u0026C%2ACU=T\u0026CDBXE=NA9Zsgt9F%3AeS9%7CO1N9%3A~IHrCyryCPr7P%7CO%29N9%3AyCdrP7ryyHrI%7C8AN9%3AyCdrP7ryyHryd~\u0026DBl=\u0026Dp1JJ=i\u0026EzB3M1=Up%21Eh\u0026J1nyJE=_BBM%3A%2F%2FEhUJhw1rY1B\u0026MCU=N.8fig%28AN\u0026U1Xppp=\u0026UpJ~=i\u0026XBMCU=\u0026XCU=NQSaTg064\u0026XJCU=N5NtitTIa\u0026XUl=80g5a\u0026XX=%298\u0026X_Dp0=I.8itGI5g\u0026X_Dpz=%21%2Al5RCDBX\u0026Y1=T\u0026YCU=\u0026YCUlz=\u0026YUJvU=\u0026Yh1=\u0026ZYCU=\u0026_BBM%2A=i\u0026hMQy=\u0026hU%21phCD=\u0026hUBi=\u0026hUBz=\u0026hUl=\u0026hXB=.KvK~25D2b%2F~W%2FhWK~byK5D%2F05J2%29%2F~20WK\u0026hY~EqCU=lz\u0026htmlsrc=1\u0026kkdd=nW%7C%21%7Ch3un%2AW9AH\u0026lC=igIi0z0NgziTI5NiTTg\u0026p%2AMh=T\u0026q%2A_M=T\u0026qE%2ABM=T\u0026tpid=\u0026wU=\u0026wqJ~=\u0026xUMJ=i\u0026xUMJXD%2AB=\u0026y%2AM1D~=T\u0026yxU=5\u0026~%2A=\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001791323872898032757816326589\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153886947282703404%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=8y_3XBAJ3IcS87_IpjSex2s4IrBLRwZQHx_oWc8Rhhwr4kDI87fMPMhhwUl7KD4TQTZ-LCoQWc6633yWLiLt44ViTvlkHHYmJyqA2btBKX_gUhdY0Z6rTaGUdyy9KKVoz-EqSDVoP_s4ahI71YMdkyCG3uC_vwRE_VIrBagSRc04SWEFea-6V6ur-5bJHCA4fDQJ1YtjYPA%3D\u0026tchkpts=%7B%22prel2%22%3A1791323873068%7D\u0026stime=1791323873068\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528%252528xi%253D%25257B%252522%252528%252528GG%252522%25253A%252522qm%252522%25252C%252522%252528%252528GOB%252522%25253A%252522vB%252528bc%252522%25252C%252522%252528%252528Yz%252522%25253A%252522%252522%25252C%252522%252528%252528%252528G%252522%25253A%252522JN%252522%25252C%252522%252528%252528uYz%252522%25253A%252522%252522%25257D%2526%252528G%253DJN%2526%252528Yub%253D33.PKX2H%2526%252528_iIDi%253D%2526%25252AQIy%253D%2526%25252Ai%253D%2526-_Yi%253D%25265GO%253DEMDMy9Pc9u%25252FyK%25252F5KMyutMPc%25252FJPI9q%25252Fy9JKM%25265_yxQYi%253Dah%25265iO3%253D%25265iOh%253D%25265ia%253D%25265ijv5Yc%253D%25265zTt%253D%2526B_cSGGSbKz%253D%2526Bi%252528zI%253D%2526Bzxz%253D%2526GG%253Dqm%2526GIYi%253D2P2.3.NHX%2526GOzYi%253D%2526GUcvJ%253DHEm3.fHPk%2526GUcvh%253Dj%252528aPSYcOG%2526GYi%253D2TpXNkJ4F%2526Gia%253DmJkPX%2526IbetIx%253DUOOz%25253A%25252F%25252Fx5iI5%25252Abo_bO%2526O%252528Gb%253DW3JkP%2526Q%252528Uz%253DN%2526Qx%252528Oz%253DN%2526UOOz%252528%253D3%2526Y%252528Yi%253DN%2526YcOGx%253D2R1-%252521k.1l%25253Arp1%25257C6b21%25253AyHnoYtotYVodV%25257C6q21%25253AtY~oVdottnoH%25257CmR21%25253AtY~oVdottnot~y%2526_5b%253D%2526_Yi%253D%2526_Yiah%253D%2526_b%253DN%2526_iIDi%253D%2526aY%253D3kH3JhJ2kh3NHP23NNk%2526bGIYi%253D%2526cOa%253D%2526cvbII%253D3%2526htmlsrc%253D1%2526ibGvvv%253D%2526ivIy%253D3%2526jYi%253DNb2._HHy6y23N6P.H.62.X56NPXhXyPJPG2b%2526jx5y%253Djcb%2526kkdd%253Duu%25257Cu%25257C9%25252A3nHA%2526t%252528zbcy%253DN%2526tpid%253D%2526twi%253DP%2526v%252528z5%253DN%2526wizI%253D3%2526wizIGc%252528O%253D%2526xhOBzb%253Divjx5%2526y%252528%253D%2526zYi%253D2Emg3k0R2%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"104.21.11.124","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://yfdpco5.com/sk-park.php?pid=9PO15V947\u0026dn=ladrake.bet\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.ladrake.bet%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-10-06T21:57:53.074Z","timestamp":1791323873074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"realtimesearchresults.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 01 Sep 2026 13:02:15 GMT","end":"Mon, 30 Nov 2026 13:02:14 GMT"},"fingerprint":{"sha1":"7F:DE:6A:DA:A3:AA:BB:E4:18:F8:BE:CF:AD:99:5D:CD:4A:30:D2:EA","sha256":"1D:53:F2:A7:93:03:A6:AC:20:D4:C5:D9:6A:A4:BC:5E:2A:E4:17:1A:07:5E:DD:8E:77:35:F8:1C:BC:67:CC:D9"}}},"request":{"raw":"GET /sr/754870121/SAFEFRAME.html?ule=949\u0026%21CU=T1NtYII~O~NiTO5tItONtahOT5aza~505XN1\u0026%21Eh~=%21D1\u0026%2A%2AEU=%7B%22%2A%2AXX%22%3A%22%298%22%2C%22%2A%2AXB3%22%3A%22p3%2A1D%22%2C%22%2A%2ACM%22%3A%22%22%2C%22%2A%2A%2AX%22%3A%220T%22%2C%22%2A%2AbCM%22%3A%22%22%7D\u0026%2ACb1=iit5WaNI\u0026%2AX=0T\u0026%2AYUJvU=\u00261XJCU=\u00263MEM=\u00263U%2AMJ=\u00263YDRXXR1WM=\u0026B%2AX1=ji0g5\u0026C%2ACU=T\u0026CDBXE=NA9Zsgt9F%3AeS9%7CO1N9%3A~IHrCyryCPr7P%7CO%29N9%3AyCdrP7ryyHrI%7C8AN9%3AyCdrP7ryyHryd~\u0026DBl=\u0026Dp1JJ=i\u0026EzB3M1=Up%21Eh\u0026J1nyJE=_BBM%3A%2F%2FEhUJhw1rY1B\u0026MCU=N.8fig%28AN\u0026U1Xppp=\u0026UpJ~=i\u0026XBMCU=\u0026XCU=NQSaTg064\u0026XJCU=N5NtitTIa\u0026XUl=80g5a\u0026XX=%298\u0026X_Dp0=I.8itGI5g\u0026X_Dpz=%21%2Al5RCDBX\u0026Y1=T\u0026YCU=\u0026YCUlz=\u0026YUJvU=\u0026Yh1=\u0026ZYCU=\u0026_BBM%2A=i\u0026hMQy=\u0026hU%21phCD=\u0026hUBi=\u0026hUBz=\u0026hUl=\u0026hXB=.KvK~25D2b%2F~W%2FhWK~byK5D%2F05J2%29%2F~20WK\u0026hY~EqCU=lz\u0026htmlsrc=1\u0026kkdd=nW%7C%21%7Ch3un%2AW9AH\u0026lC=igIi0z0NgziTI5NiTTg\u0026p%2AMh=T\u0026q%2A_M=T\u0026qE%2ABM=T\u0026tpid=\u0026wU=\u0026wqJ~=\u0026xUMJ=i\u0026xUMJXD%2AB=\u0026y%2AM1D~=T\u0026yxU=5\u0026~%2A=\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1 HTTP/1.1\r\nHost: realtimesearchresults.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco5.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 06 Oct 2026 21:57:53 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aYR7kl9z40Ce2kJ9QIWF4n5Aftoytid4ClY72o5NC%2Bunc2%2Bk28N2r0%2FyfgBGwiEjGI%2Fm0uQNgvGLyu64%2BT3zuga68hcJNDWyuk%2ByfyA4w66E0tsGJ2TSpPSUuUCJjGGlZmow2QL73hFAJ%2Fhc\"}]}\r\npriority: u=4,i=?0\r\ncache-control: no-store, max-age=0\r\nvary: accept-encoding\r\nlink: \u003chttps://scripts.clarity.ms/0.8.54/clarity.js\u003e; rel=prefetch, \u003chttps://msadsscale.microsoft.com/bingads/telemetryJS.js\u003e; rel=prefetch, \u003chttps://www.clarity.ms\u003e; rel=dns-prefetch, \u003chttps://s.yimg.com/ds/scripts/selectTier-p1.1.0.js\u003e; rel=prefetch\r\nx-sc-h: 21-vbkg\r\nvia: 1.1 google\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a467ec9edcc70b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":71551,"size_decoded":27277,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (44697), with CRLF, LF line terminators","md5":"9d735137a9b970fc01e86e602c88af6a","sha1":"e18861ca0da11252cc836f25fed532c52748c6ea","sha256":"535dda146e09db61678da8ad7f300a6b834fabbc52473144dd9672c39a69bf5f","sha512":"0b18d4cc7058ca583e32f4f87ff0e03eb9431f3f02104eb942ab60bda7117f5064580035b3066bc543462868529dac5a135cf991744cd81398877c70d19386b4","ssdeep":"1536:SE9uskMDSH3MMriSFQ9Dfe2v6IwUfxMn0PNhBgnQe75m6PBZbrxWJu0WtLeDE6pv:SEwskMDSH3MMriSFQ9Dfek6IwUfxMnm5","tlshash":"a16329cd34c27436177b20a1513f2d0ff2a62559794d8840e9f9eaa23d3da9f8a23d4d","first_seen":"2026-10-06T21:58:41.614009Z","last_seen":"2026-10-06T21:58:41.614009Z","times_seen":1,"resource_available":true,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":5,"connect":19,"send":0,"wait":342,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"realtimesearchresults.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"realtimesearchresults.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.cdn-fileserver.com/__media__/pics/9000/09/593//bg1.png","fqdn":"s.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"172.67.181.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=949\u0026%21CU=T1NtYII~O~NiTO5tItONtahOT5aza~505XN1\u0026%21Eh~=%21D1\u0026%2A%2AEU=%7B%22%2A%2AXX%22%3A%22%298%22%2C%22%2A%2AXB3%22%3A%22p3%2A1D%22%2C%22%2A%2ACM%22%3A%22%22%2C%22%2A%2A%2AX%22%3A%220T%22%2C%22%2A%2AbCM%22%3A%22%22%7D\u0026%2ACb1=iit5WaNI\u0026%2AX=0T\u0026%2AYUJvU=\u00261XJCU=\u00263MEM=\u00263U%2AMJ=\u00263YDRXXR1WM=\u0026B%2AX1=ji0g5\u0026C%2ACU=T\u0026CDBXE=NA9Zsgt9F%3AeS9%7CO1N9%3A~IHrCyryCPr7P%7CO%29N9%3AyCdrP7ryyHrI%7C8AN9%3AyCdrP7ryyHryd~\u0026DBl=\u0026Dp1JJ=i\u0026EzB3M1=Up%21Eh\u0026J1nyJE=_BBM%3A%2F%2FEhUJhw1rY1B\u0026MCU=N.8fig%28AN\u0026U1Xppp=\u0026UpJ~=i\u0026XBMCU=\u0026XCU=NQSaTg064\u0026XJCU=N5NtitTIa\u0026XUl=80g5a\u0026XX=%298\u0026X_Dp0=I.8itGI5g\u0026X_Dpz=%21%2Al5RCDBX\u0026Y1=T\u0026YCU=\u0026YCUlz=\u0026YUJvU=\u0026Yh1=\u0026ZYCU=\u0026_BBM%2A=i\u0026hMQy=\u0026hU%21phCD=\u0026hUBi=\u0026hUBz=\u0026hUl=\u0026hXB=.KvK~25D2b%2F~W%2FhWK~byK5D%2F05J2%29%2F~20WK\u0026hY~EqCU=lz\u0026htmlsrc=1\u0026kkdd=nW%7C%21%7Ch3un%2AW9AH\u0026lC=igIi0z0NgziTI5NiTTg\u0026p%2AMh=T\u0026q%2A_M=T\u0026qE%2ABM=T\u0026tpid=\u0026wU=\u0026wqJ~=\u0026xUMJ=i\u0026xUMJXD%2AB=\u0026y%2AM1D~=T\u0026yxU=5\u0026~%2A=\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001791323872898032757816326589\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153886947282703404%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=8y_3XBAJ3IcS87_IpjSex2s4IrBLRwZQHx_oWc8Rhhwr4kDI87fMPMhhwUl7KD4TQTZ-LCoQWc6633yWLiLt44ViTvlkHHYmJyqA2btBKX_gUhdY0Z6rTaGUdyy9KKVoz-EqSDVoP_s4ahI71YMdkyCG3uC_vwRE_VIrBagSRc04SWEFea-6V6ur-5bJHCA4fDQJ1YtjYPA%3D\u0026tchkpts=%7B%22prel2%22%3A1791323873068%7D\u0026stime=1791323873068\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528%252528xi%253D%25257B%252522%252528%252528GG%252522%25253A%252522qm%252522%25252C%252522%252528%252528GOB%252522%25253A%252522vB%252528bc%252522%25252C%252522%252528%252528Yz%252522%25253A%252522%252522%25252C%252522%252528%252528%252528G%252522%25253A%252522JN%252522%25252C%252522%252528%252528uYz%252522%25253A%252522%252522%25257D%2526%252528G%253DJN%2526%252528Yub%253D33.PKX2H%2526%252528_iIDi%253D%2526%25252AQIy%253D%2526%25252Ai%253D%2526-_Yi%253D%25265GO%253DEMDMy9Pc9u%25252FyK%25252F5KMyutMPc%25252FJPI9q%25252Fy9JKM%25265_yxQYi%253Dah%25265iO3%253D%25265iOh%253D%25265ia%253D%25265ijv5Yc%253D%25265zTt%253D%2526B_cSGGSbKz%253D%2526Bi%252528zI%253D%2526Bzxz%253D%2526GG%253Dqm%2526GIYi%253D2P2.3.NHX%2526GOzYi%253D%2526GUcvJ%253DHEm3.fHPk%2526GUcvh%253Dj%252528aPSYcOG%2526GYi%253D2TpXNkJ4F%2526Gia%253DmJkPX%2526IbetIx%253DUOOz%25253A%25252F%25252Fx5iI5%25252Abo_bO%2526O%252528Gb%253DW3JkP%2526Q%252528Uz%253DN%2526Qx%252528Oz%253DN%2526UOOz%252528%253D3%2526Y%252528Yi%253DN%2526YcOGx%253D2R1-%252521k.1l%25253Arp1%25257C6b21%25253AyHnoYtotYVodV%25257C6q21%25253AtY~oVdottnoH%25257CmR21%25253AtY~oVdottnot~y%2526_5b%253D%2526_Yi%253D%2526_Yiah%253D%2526_b%253DN%2526_iIDi%253D%2526aY%253D3kH3JhJ2kh3NHP23NNk%2526bGIYi%253D%2526cOa%253D%2526cvbII%253D3%2526htmlsrc%253D1%2526ibGvvv%253D%2526ivIy%253D3%2526jYi%253DNb2._HHy6y23N6P.H.62.X56NPXhXyPJPG2b%2526jx5y%253Djcb%2526kkdd%253Duu%25257Cu%25257C9%25252A3nHA%2526t%252528zbcy%253DN%2526tpid%253D%2526twi%253DP%2526v%252528z5%253DN%2526wizI%253D3%2526wizIGc%252528O%253D%2526xhOBzb%253Divjx5%2526y%252528%253D%2526zYi%253D2Emg3k0R2%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","date":"2026-10-06T21:57:53.504Z","timestamp":1791323873504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 21:20:12 GMT","end":"Sun, 20 Dec 2026 22:20:07 GMT"},"fingerprint":{"sha1":"98:B1:3F:26:3D:00:6E:C0:49:6B:E0:9A:B3:7F:FA:65:57:D1:F6:66","sha256":"DF:7E:14:D6:11:75:6F:58:61:9F:1D:F8:34:5D:DF:EC:E0:72:07:A4:D8:EB:C3:70:2B:52:6E:C4:5A:C7:77:91"}}},"request":{"raw":"GET /__media__/pics/9000/09/593//bg1.png HTTP/1.1\r\nHost: s.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://realtimesearchresults.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\nvia: 1.1 google\r\ndate: Tue, 06 Oct 2026 21:57:53 GMT\r\ncache-control: public, max-age=604800\r\nage: 545579\r\nlast-modified: Thu, 06 Mar 2025 12:55:21 GMT\r\netag: \"4642-62fac04c7759a\"\r\ncontent-type: image/png\r\nx-cache-status: hit\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QKljC27XgzUFGx0L8FH3xTm76Mhrflz3J9UmXLl1ptx2Zld7BLvC14I4gGqKHALOXMNpe5dDFxePepMyCPnN541eY19BN1ySAYkthQHwNaW6uWWxqTy6XLfUlzzBsjFbxeqM8oaqLQ%3D%3D\"}]}\r\ncf-ray: a467eca168f9a0f0-OSL\r\ncontent-length: 17986\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17986,"size_decoded":18743,"mime_type":"image/png","magic":"PNG image data, 1730 x 988, 4-bit colormap, non-interlaced","md5":"825ccd29ac102fcadaf92b2343d5917b","sha1":"24472e766cfac5b82a73b219796556a0a3702bd6","sha256":"0878fb2875c0ad852de8fb3e8f443afdf3064890f1443b3feccc274382f913cd","sha512":"71b8e7c0813227f5efa4b4e0561978b13672f46ee441bc222ad77aa46a32f0f44a5dab3ef038bb3418190e69dced597a79e77566da01a259f1cd6b5298a08662","ssdeep":"384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N","tlshash":"8a82bef49ea4241cdde2dfbce09243d635e8fb03481a9c516bcb46c27459ea2782c71d","first_seen":"2023-04-06T22:32:28Z","last_seen":"2026-10-08T00:44:16.011496Z","times_seen":232963,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"52.48.54.225","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww38.ladrake.bet/","date":"2026-10-06T21:57:57.491Z","timestamp":1791323877491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 17 Aug 2026 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EE:E8:EA:46:19:BB:CD:06:47:CD:BE:A5:CB:4D:D5:B1:10:DA:04:FB","sha256":"6F:F7:26:C1:10:8F:08:8A:9A:3F:1B:1D:C0:B2:22:FA:92:87:E8:8E:0B:BF:4D:70:D3:63:B0:64:7C:53:C5:9D"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 3036\r\nOrigin: https://ww38.ladrake.bet\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.ladrake.bet/\r\nCookie: cg_uuid=fdb99b5d2a259d3a249d86f32bbef602\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"cg_uuid","value":"fdb99b5d2a259d3a249d86f32bbef602"}],"method":"POST","post_data":{"size":3036,"data":"e=37dfbd8ee84e001263efc437e94f8d9f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d57138d642f17070100b1eabfd72e30d69183042b3e18f6646541c2628b70cd166651719a5b525a61060ec4bb621b66f336e66c8d41f6c538f2003df95b2b7a13c84ffe1fbe85ddcd3cb82d19f97adea954659005344163588b934131b723f8b388a75f45af34d0fd60b47d8b74c14e851538c9745bad4b01473cb52d3ea7dfa2f46cff1ab458da17f85e3975bddc273b7d70588661979d00e07360abc8ee3d4f7a23d6862f208a902a476811275843b88f2f646307b6e65b3bd9eae72482b15e241c7faaa1f3929b75bdd88f0be303cf5f3965c4bcc9e6f53194dcb763912112c3a79c3e1215f0606ca08c0621ac84e97e9d5ebb02f2c712dd508c887ccc2669c7cd65893ec5ccbaa6cbf0f10538a27aa4b1fb354376e98220cfea50b9464702cb4f0997dac3e4ecbccb70c86a88cefbc86fed3c2362ca383b9390965e37d7f833f341a7dd0d977def25026852dd10b803d785e13db3a328c413e0cf929b6b8d4d4f68fe481f5e72092687a023fa05d1cfa62aae9969ebbb2a9adaa9b13dc1f0e35f477083ee5252f0b1490242bbacac74e66688e037ece12dae7da0319553c815d7a83ecf0626e4ae9166233e600329094016aae18f6ace03b7454d4b35f9b44fdb9f040fe2a5d6babd6cdef0edfc87f9b3ec424f3df95b9bbf596f805f7812d762596d71ff7bae7305dfe2c1628c7cca2c8baa2bd1a50c9b73133c230a7b0f81c3e2df2066529b195988d4d8bfacd755059fdda16fc28a2a2fcad8003d77f896d05722b5248d589d04a77bca5adc9b56a4e8668ac88cdadf2f70f3f27826db22b487a2aa089d6b3d1706966b4b57b3bd01ede440c2d8c3ca1ebfedf1640c300eac21b941ef0ce6936384335d2046337c7ce3598686314bca0c98f18750b88611f27716d167202a8df4c3481ab863ffe57dc615734413ae312c9ebd83398f0642c5d642e58682a1e2178d040a7c07f8753940c8c54e4eb03fe6fddd3fcf8ebd1c577dbe786055518d055ae598ed0403d03f33c19d875ddb8bf99c0830b031a71535159f1b616ddfd3054297c4bc95b1f001eb3aba7c8c73949d08c5f1ea7a74fd8c45c29dbeb6d8e194896d049eec7b10c7638e18c50df3ee39a0ddd1c723f1df82eaf10d69cba294bc1c8617dd100468000f93ce6d699b269c0497df60f25f3afe7f199b62e4d26d7eb73b2c5718dcad987899cb01606904758d8681ebd075c356eabe2e2cced3545c4c102b6c4cbc7de0be3915abf9838cf6acb4a4ae8234f0b6d9447f6f4d63693822009804560ffcb2eef674e5ca68468b9401\u0026cri=3BG4IbtmIm\u0026sf=0\u0026dc=\u0026cp=5\u0026gtm=-\u0026gac=-\u0026uvid=e1217d0f9076e623a466573bd0b97a9c6da89370\u0026tb=1%7C7%2C55\u0026gi=17%2C1914\u0026ich=0\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=55\u0026ti=5025\u0026mo=0\u0026pn=6884\u0026spn=1858\u0026sck=38611571cec14d5d339ebeb20dd03a8e.ELp3aSj4xN7bb%2BOh%3AaOAtBLdCtpfZuFKOsuufC%2F12dba4XKn%2BYGoxfCgpZ0pqdw9zGmdQox%2Bp%2BFRbb5ll%2BUsEgKmYo9ulFbuLLebEq3xApV8hFi%2Fh3TGRyjZFu9lw%2FxSPGHzNvjXSO6UKAb9eKe7g0K2r%2BPk3lvJX8LHqavWpbdEWiT6h8PBvPJJi1WSFUb%2FhFEwu9C%2FzJSCxvo%2B2s1AenrVratpHsK2tJfs97PX5CPfmRrBXSFaWLm%2BKmHBOx9ap5LYtRkNQOWY%2FGLpmRwyG25WFhJ7HNAENKzEHD276Z2U6wb0Qh06VwgcNsdR1JmS%2B1uupi7uzu1FKCH%2Bgpw3ufqiPKO%2BDlp3FHh2ydJ3TDUIzwVORSa0TUzpTkwuE01Tsu%2BdBNI7QFHOsOt0%2B%2FwNae%2BgzB%2B%2FTQj52me%2BqSyscdvB3R3KYZ3ArhB40u%2Bk30fipPu5UtlY255vH3UH5FFq5XH5k4aTyM2RrD3EPNH74MwB%2F%2FZVtFKcYID1j5Y%2FMs3usqMULT4rHNXvtE04u2S%2F9MlJh%2FvXyXiWBmuK%2FlCKqOKDVg9Qlz4V1dex2FmuQRhf%2Ba5nbL%2BKfJ9jyB3Rk941l3lJqYh0THWyaw8NqJze8DWFRGAC%2B526I8xRyDleexzlSMM%2FDyczzd96zOC9QI9NPPIB94CTWqd0359KD4v0plpTuQ7ZLqyY3zI4ZKwCQ2yg%3D%3ADhKCii9229f0h4QlGw13rA%3D%3D\u0026fp=1248\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0\u0026snt=1"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://ww38.ladrake.bet\r\ncontent-type: application/json\r\ndate: Tue, 06 Oct 2026 21:57:57 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":3927,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T00:41:02.911988Z","times_seen":18927714,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.consentmanager.net/delivery/recall/logos/175795","fqdn":"cdn.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yfdpco5.com/sk-park.php?pid=9PO15V947\u0026dn=ladrake.bet\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.ladrake.bet%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-10-06T21:57:59.991Z","timestamp":1791323879991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.consentmanager.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"70:78:AC:EC:58:46:BE:A4:98:C0:29:71:CD:B8:DF:DC:99:05:84:92","sha256":"C2:1B:99:0D:17:3A:3D:5F:E6:6A:EB:55:36:3C:68:1B:B8:23:97:D8:7A:8A:A5:4B:F6:CE:FA:AA:0B:0F:15:AC"}}},"request":{"raw":"GET /delivery/recall/logos/175795 HTTP/1.1\r\nHost: cdn.consentmanager.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco5.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 06 Oct 2026 21:57:59 GMT\r\ncontent-type: image/svg+xml\r\nexpires: Wed, 07 Oct 2026 08:51:10 GMT\r\ncache-control: public, max-age=86400\r\nedge-control: public, max-age=86400, max-age=2592000\r\ncross-origin-resource-policy: cross-origin, cross-origin\r\nx-77-nzt: k1hL6RBpsM9sxgUnjU1b4Z5tF9/81HX5OzekedNVDf7dkHUNrJUCjimpmllONzD0MvdLDPA\r\nx-77-nzt-ray: 2a494a154dd75a970c6fc56a5655073b\r\nage: 47209\r\nx-77-cache: HIT\r\nx-77-age: 47204\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":2208,"size_decoded":1621,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9663837b7e86ac01b6a47c0a5dad0a37","sha1":"69d5e34c9211623decc0e25ba50327f07c50fbe9","sha256":"b63cd6f0d99d9c77bd0f2d6a43abf5a3fa7ae2b684abbc9f8c897d9751b83b51","sha512":"4a3afe10eff251478162cbd33e8526791ef0a3725b440e7ad64335f51554b40151ef9adbfff4162d69cb197a20d90588cdae00ea3290f1ded8be1861d040752d","ssdeep":"","tlshash":"e7418620e7b889755c488b640ef80c833f69184f3814a588febca2d6bf22d508a55e5f","first_seen":"2025-06-18T19:16:16.051879Z","last_seen":"2026-10-08T00:39:03.675745Z","times_seen":29215,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=2\u0026__cmpfcc=1\u0026id=175795\u0026o=1791323873\u0026h=https%3A%2F%2Fyfdpco5.com%2Fsk-park.php%3Fpid%3D9PO15V947%26dn%3Dladrake.bet%26ua%3DMozilla%252F5.0%2B%2528Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%2529%2BGecko%252F20100101%2BFirefox%252F134.0%26ip%3D195.64.118.0%26xfip%3D195.64.118.0%26requrl%3Dhttp%253A%252F%252Fww38.ladrake.bet%252F%26al%3Den-US%252Cen%253Bq%253D0.9\u0026\u0026l=en\u0026odw=0\u0026dlt=1\u0026l=en","fqdn":"d.delivery.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"94.237.93.104","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yfdpco5.com/sk-park.php?pid=9PO15V947\u0026dn=ladrake.bet\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.ladrake.bet%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-10-06T21:57:53.279Z","timestamp":1791323873279,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.delivery.consentmanager.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FD:3D:5F:67:04:BA:73:77:A7:4B:D6:EB:58:C2:FC:D4:01:EE:58:64","sha256":"95:14:00:DA:64:95:A5:B3:BD:95:40:8F:E7:45:6C:68:21:88:41:0E:BA:77:8C:C4:50:5C:15:69:2E:02:AB:ED"}}},"request":{"raw":"GET /delivery/cmp.php?__cmpcc=2\u0026__cmpfcc=1\u0026id=175795\u0026o=1791323873\u0026h=https%3A%2F%2Fyfdpco5.com%2Fsk-park.php%3Fpid%3D9PO15V947%26dn%3Dladrake.bet%26ua%3DMozilla%252F5.0%2B%2528Windows%2BNT%2B10.0%253B%2BWin64%253B%2Bx64%253B%2Brv%253A134.0%2529%2BGecko%252F20100101%2BFirefox%252F134.0%26ip%3D195.64.118.0%26xfip%3D195.64.118.0%26requrl%3Dhttp%253A%252F%252Fww38.ladrake.bet%252F%26al%3Den-US%252Cen%253Bq%253D0.9\u0026\u0026l=en\u0026odw=0\u0026dlt=1\u0026l=en HTTP/1.1\r\nHost: d.delivery.consentmanager.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco5.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Tue, 06 Oct 2026 21:57:53 GMT\r\nserver: Apache/2.4.68 (Debian)\r\ncache-control: no-store, no-cache, must-revalidate\r\nedge-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 01 Dec 1994 16:00:00 GMT\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 06 Oct 2026 21:57:53 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 3794\r\ncontent-type: text/javascript; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9902,"size_decoded":4280,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5925)","md5":"f496329db58979542fc91da4ea7f47e4","sha1":"1c73a638cfd0dbf384abbe28425c3c7baf1a23b9","sha256":"9b704d1fe860fc35eafdf20e2b993c026181651b87dec683fb8277bb4143a903","sha512":"b37ded2912438beac37883e613f371c749e15f479585df2564357ffba0688db1a9f37c44307019918134c044bb2996df589deac6f074974576e41bac89759405","ssdeep":"192:wnjUGGAoAUCvSKzdv93bzDD1CISbjWW7guf96zzcydlga:ijTrUmzhNYI0g2Zkga","tlshash":"6412c789efe4d47857d61ab5263f5216b9a8031f0ccc81c0c7855d0c166abbb7f83e9a","first_seen":"2026-10-06T21:32:04.231614Z","last_seen":"2026-10-06T21:58:41.619974Z","times_seen":3,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.cdn-fileserver.com/__media__/pics/9000/09/593//arrrow.png","fqdn":"s.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"172.67.181.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=949\u0026%21CU=T1NtYII~O~NiTO5tItONtahOT5aza~505XN1\u0026%21Eh~=%21D1\u0026%2A%2AEU=%7B%22%2A%2AXX%22%3A%22%298%22%2C%22%2A%2AXB3%22%3A%22p3%2A1D%22%2C%22%2A%2ACM%22%3A%22%22%2C%22%2A%2A%2AX%22%3A%220T%22%2C%22%2A%2AbCM%22%3A%22%22%7D\u0026%2ACb1=iit5WaNI\u0026%2AX=0T\u0026%2AYUJvU=\u00261XJCU=\u00263MEM=\u00263U%2AMJ=\u00263YDRXXR1WM=\u0026B%2AX1=ji0g5\u0026C%2ACU=T\u0026CDBXE=NA9Zsgt9F%3AeS9%7CO1N9%3A~IHrCyryCPr7P%7CO%29N9%3AyCdrP7ryyHrI%7C8AN9%3AyCdrP7ryyHryd~\u0026DBl=\u0026Dp1JJ=i\u0026EzB3M1=Up%21Eh\u0026J1nyJE=_BBM%3A%2F%2FEhUJhw1rY1B\u0026MCU=N.8fig%28AN\u0026U1Xppp=\u0026UpJ~=i\u0026XBMCU=\u0026XCU=NQSaTg064\u0026XJCU=N5NtitTIa\u0026XUl=80g5a\u0026XX=%298\u0026X_Dp0=I.8itGI5g\u0026X_Dpz=%21%2Al5RCDBX\u0026Y1=T\u0026YCU=\u0026YCUlz=\u0026YUJvU=\u0026Yh1=\u0026ZYCU=\u0026_BBM%2A=i\u0026hMQy=\u0026hU%21phCD=\u0026hUBi=\u0026hUBz=\u0026hUl=\u0026hXB=.KvK~25D2b%2F~W%2FhWK~byK5D%2F05J2%29%2F~20WK\u0026hY~EqCU=lz\u0026htmlsrc=1\u0026kkdd=nW%7C%21%7Ch3un%2AW9AH\u0026lC=igIi0z0NgziTI5NiTTg\u0026p%2AMh=T\u0026q%2A_M=T\u0026qE%2ABM=T\u0026tpid=\u0026wU=\u0026wqJ~=\u0026xUMJ=i\u0026xUMJXD%2AB=\u0026y%2AM1D~=T\u0026yxU=5\u0026~%2A=\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001791323872898032757816326589\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153886947282703404%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=8y_3XBAJ3IcS87_IpjSex2s4IrBLRwZQHx_oWc8Rhhwr4kDI87fMPMhhwUl7KD4TQTZ-LCoQWc6633yWLiLt44ViTvlkHHYmJyqA2btBKX_gUhdY0Z6rTaGUdyy9KKVoz-EqSDVoP_s4ahI71YMdkyCG3uC_vwRE_VIrBagSRc04SWEFea-6V6ur-5bJHCA4fDQJ1YtjYPA%3D\u0026tchkpts=%7B%22prel2%22%3A1791323873068%7D\u0026stime=1791323873068\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528%252528xi%253D%25257B%252522%252528%252528GG%252522%25253A%252522qm%252522%25252C%252522%252528%252528GOB%252522%25253A%252522vB%252528bc%252522%25252C%252522%252528%252528Yz%252522%25253A%252522%252522%25252C%252522%252528%252528%252528G%252522%25253A%252522JN%252522%25252C%252522%252528%252528uYz%252522%25253A%252522%252522%25257D%2526%252528G%253DJN%2526%252528Yub%253D33.PKX2H%2526%252528_iIDi%253D%2526%25252AQIy%253D%2526%25252Ai%253D%2526-_Yi%253D%25265GO%253DEMDMy9Pc9u%25252FyK%25252F5KMyutMPc%25252FJPI9q%25252Fy9JKM%25265_yxQYi%253Dah%25265iO3%253D%25265iOh%253D%25265ia%253D%25265ijv5Yc%253D%25265zTt%253D%2526B_cSGGSbKz%253D%2526Bi%252528zI%253D%2526Bzxz%253D%2526GG%253Dqm%2526GIYi%253D2P2.3.NHX%2526GOzYi%253D%2526GUcvJ%253DHEm3.fHPk%2526GUcvh%253Dj%252528aPSYcOG%2526GYi%253D2TpXNkJ4F%2526Gia%253DmJkPX%2526IbetIx%253DUOOz%25253A%25252F%25252Fx5iI5%25252Abo_bO%2526O%252528Gb%253DW3JkP%2526Q%252528Uz%253DN%2526Qx%252528Oz%253DN%2526UOOz%252528%253D3%2526Y%252528Yi%253DN%2526YcOGx%253D2R1-%252521k.1l%25253Arp1%25257C6b21%25253AyHnoYtotYVodV%25257C6q21%25253AtY~oVdottnoH%25257CmR21%25253AtY~oVdottnot~y%2526_5b%253D%2526_Yi%253D%2526_Yiah%253D%2526_b%253DN%2526_iIDi%253D%2526aY%253D3kH3JhJ2kh3NHP23NNk%2526bGIYi%253D%2526cOa%253D%2526cvbII%253D3%2526htmlsrc%253D1%2526ibGvvv%253D%2526ivIy%253D3%2526jYi%253DNb2._HHy6y23N6P.H.62.X56NPXhXyPJPG2b%2526jx5y%253Djcb%2526kkdd%253Duu%25257Cu%25257C9%25252A3nHA%2526t%252528zbcy%253DN%2526tpid%253D%2526twi%253DP%2526v%252528z5%253DN%2526wizI%253D3%2526wizIGc%252528O%253D%2526xhOBzb%253Divjx5%2526y%252528%253D%2526zYi%253D2Emg3k0R2%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","date":"2026-10-06T21:57:53.487Z","timestamp":1791323873487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 21:20:12 GMT","end":"Sun, 20 Dec 2026 22:20:07 GMT"},"fingerprint":{"sha1":"98:B1:3F:26:3D:00:6E:C0:49:6B:E0:9A:B3:7F:FA:65:57:D1:F6:66","sha256":"DF:7E:14:D6:11:75:6F:58:61:9F:1D:F8:34:5D:DF:EC:E0:72:07:A4:D8:EB:C3:70:2B:52:6E:C4:5A:C7:77:91"}}},"request":{"raw":"GET /__media__/pics/9000/09/593//arrrow.png HTTP/1.1\r\nHost: s.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://realtimesearchresults.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\nvia: 1.1 google\r\ndate: Tue, 06 Oct 2026 21:57:53 GMT\r\ncache-control: public, max-age=604800\r\nage: 419250\r\nlast-modified: Thu, 06 Mar 2025 13:05:37 GMT\r\netag: \"11b-62fac2985d568\"\r\ncontent-type: image/png\r\nx-cache-status: hit\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u3LpZp83O5Yn4a0LnD%2B%2FWoneD5ETCihkMZLkjzW%2Bq0y31TAo9jjGFz1vAL7Xh%2FLIoa%2FEqNyskimPQss6qpqMwwqr8LF3B%2FkOBLWLAAy4fhGQbhCTThaUddQwWj61N%2FgCTPr9I5HiPQ%3D%3D\"}]}\r\ncf-ray: a467eca158f2a0f0-OSL\r\ncontent-length: 283\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":283,"size_decoded":1051,"mime_type":"image/png","magic":"PNG image data, 17 x 27, 8-bit colormap, non-interlaced","md5":"80d42c82a6c37da90210fd60a2f36128","sha1":"554ba7c84d2a27ecf3b1f29d03e62101936b54d8","sha256":"a1626e2d9160a0890a0a8d6e3af9e7095d68a24f9fb5ac8a166000c9a2581e10","sha512":"8ecb032c38176996ee637009833f3399f773b325e4f574fbbd26f93cdb82892c4143c5816543052b3a5123b89ef4b1aaca0407315aab879968085e61a20786b6","ssdeep":"","tlshash":"38d023cb5d512c3dd3615031445810799df2ad602c774182013eb4760f73545c658714","first_seen":"2023-04-06T17:33:21Z","last_seen":"2026-10-08T00:44:16.010767Z","times_seen":233530,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":3,"connect":2,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euob.northwavepoint.com/sxp/i/636f8b858f681acb7bfa6f583a96630a.js","fqdn":"euob.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"13.249.8.22","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww38.ladrake.bet/","date":"2026-10-06T21:57:51.959Z","timestamp":1791323871959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 29 Jan 2026 00:00:00 GMT","end":"Sat, 27 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"CC:B5:FD:45:6E:B8:DC:24:11:6A:30:38:E9:1D:FB:81:45:2E:FA:8D","sha256":"32:3C:54:8F:1C:33:6B:BE:0F:39:18:D6:DB:E7:61:78:95:9A:27:61:E7:33:FF:DA:F0:5E:F5:B4:82:D5:5E:A7"}}},"request":{"raw":"GET /sxp/i/636f8b858f681acb7bfa6f583a96630a.js HTTP/1.1\r\nHost: euob.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.ladrake.bet/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 53154\r\ncontent-encoding: gzip\r\nserver: Caddy\r\ndate: Tue, 06 Oct 2026 15:33:31 GMT\r\ncache-control: max-age=43200\r\nexpires: Wed, 07 Oct 2026 03:33:31 GMT\r\netag: \"228cb-ipNw9sGSa1UrHMnVetjsGW/MdkE\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b96196480b09999ed2996bb489d3679c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: MyKxa9vcCjb5NYRwtTfMOFvoRpWrQzK8m3ANBEqu-wAIWtSl0Et0jw==\r\nage: 23061\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":141515,"size_decoded":53678,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"2bda5ec6c751ff6f44386a0cd8cd0587","sha1":"8a9370f6c1926b552b1cc9d57ad8ec196fcc7641","sha256":"593bbf19646928b96ba6b4182f5274732511aaa0c3c1500b54daf49252515957","sha512":"a04e4d06072d631a84b6e236ca1e0954a4bfba4b70e0316212bf393ac66669ab1625cb91c5b9323d61240baab04f28d368a4e06ec64ab1fcf701aa1113b33a7b","ssdeep":"1536:bE78CWmr0XA6QOZEKNrm8ux8OgCMGxwdwcaYt7alywnSGVjne0XzLonh0RKXPV0G:Q7Vr0wSNWxYCMLdwktGVYXYbOpbZ","tlshash":"3ad3c69db2e27035039334a5057f450ae27b1e553c4b8290d1bae9d4ac7ce8e857bfac","first_seen":"2026-10-04T15:34:53.26207Z","last_seen":"2026-10-08T00:39:03.679267Z","times_seen":530,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":13,"connect":9,"send":0,"wait":10,"receive":8,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"euob.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yfdpco5.com/sk-park.php?pid=9PO15V947\u0026dn=ladrake.bet\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.ladrake.bet%2F\u0026al=en-US%2Cen%3Bq%3D0.9","fqdn":"yfdpco5.com","domain":"yfdpco5.com","tld":"com"},"ip":{"addr":"208.91.196.46","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww38.ladrake.bet/","date":"2026-10-06T21:57:52.223Z","timestamp":1791323872223,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yfdpco5.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 16 Sep 2026 11:35:21 GMT","end":"Tue, 15 Dec 2026 11:35:20 GMT"},"fingerprint":{"sha1":"85:E9:16:61:3E:E1:35:C1:1D:A1:B3:39:A9:74:DF:4B:B9:22:DC:52","sha256":"01:84:AA:4A:9D:B2:E4:CA:D3:DD:8C:C4:5E:71:9F:C7:16:E3:13:19:49:92:F6:5D:3E:37:6B:C6:59:21:FD:1A"}}},"request":{"raw":"GET /sk-park.php?pid=9PO15V947\u0026dn=ladrake.bet\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.ladrake.bet%2F\u0026al=en-US%2Cen%3Bq%3D0.9 HTTP/1.1\r\nHost: yfdpco5.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.ladrake.bet/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 06 Oct 2026 22:05:11 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-sc-h: 21-fqwb\r\nvia: 1.1 google\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27370,"size_decoded":9063,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (11274)","md5":"3f77ad3cb823e51240b3ab88ef5ac75d","sha1":"315e11d277b1c85409b78916807fda3834ecb8e9","sha256":"414f967350b5bd4ff54a1e5e8ff6f6532e304d01d0e1186ec6cee0b69835083b","sha512":"28d7cdd5b9795159fbaff3127e1e912a30bbb7bc02884f9aefabdcf53658bab3bebbf12742001cd2cb8f0e0657c4c74e8598096e696d348d5309bf4385d2b8b1","ssdeep":"768:wZBsjBjrAyhtbgt4MiIO/5/9SL2xKvGWKvGQQZ:cMMyxKvGWKvGQm","tlshash":"cfc2845442f21825555320359ebf6f49777a4a23654cec08be8c8980bfaedb34df6be0","first_seen":"2026-10-06T21:58:41.629649Z","last_seen":"2026-10-06T21:58:41.629649Z","times_seen":1,"resource_available":true,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":2,"connect":131,"send":0,"wait":241,"receive":4,"ssl":409},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"yfdpco5.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.consentmanager.net/delivery/customdata/bV8xLndfMTc1Nzk1LnJfR0RQUi5sX2VuLmRfMzM2OTkueF82NC52LnAudF8zMzY5OS54dF8xMjMx.js","fqdn":"cdn.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yfdpco5.com/sk-park.php?pid=9PO15V947\u0026dn=ladrake.bet\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.ladrake.bet%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-10-06T21:57:53.330Z","timestamp":1791323873330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.consentmanager.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"70:78:AC:EC:58:46:BE:A4:98:C0:29:71:CD:B8:DF:DC:99:05:84:92","sha256":"C2:1B:99:0D:17:3A:3D:5F:E6:6A:EB:55:36:3C:68:1B:B8:23:97:D8:7A:8A:A5:4B:F6:CE:FA:AA:0B:0F:15:AC"}}},"request":{"raw":"GET /delivery/customdata/bV8xLndfMTc1Nzk1LnJfR0RQUi5sX2VuLmRfMzM2OTkueF82NC52LnAudF8zMzY5OS54dF8xMjMx.js HTTP/1.1\r\nHost: cdn.consentmanager.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco5.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 06 Oct 2026 21:57:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nexpires: Tue, 06 Oct 2026 22:02:35 GMT\r\ncache-control: public, max-age=3600\r\nedge-control: public, max-age=3600\r\nlast-modified: Tue, 06 Oct 2026 21:02:35 GMT\r\nx-77-nzt: k1AUBMNDasHH+xkSVFL40pajM3s52JJg4G2wX5KNmv/ZsbDyS1BkW9R0dYCmQSWRQkjfA+Y\r\nx-77-nzt-ray: 2a494a154dd75a97066fc56a92934314\r\nx-77-cache: HIT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-77-age: 3312\r\nserver: CDN77-Turbo\r\nage: 3318\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":234804,"size_decoded":48850,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (42801)","md5":"c71274f2fa711a1066e63095e25e19fb","sha1":"bacc26c3bca4b7a196c962d69028c49b05d613c9","sha256":"3c6565efac9417ace15e7b69f5edc5f968f0eed0bca0f39fafd8903b6b29722b","sha512":"5af1d5cea43a0ca2eea3e65f9a282812d43d038835098b443f7cce691478fd14ebe78549ddd266a983dd03b660c949268cae31d982a77e16ad396b566fead0e9","ssdeep":"1536:hsQ3sQxUKrn/SrdfZtwdRBdaF2QI3HPuez+tabAWax0RdCuiHBTVaqv:hsksiLdRBvQI3H23taUW40LCuiD","tlshash":"ce340024c9a2791b42db08cdc987847e27dc72a1b5dcd5a674d24d2faab53883336337","first_seen":"2026-10-02T09:17:40.587845Z","last_seen":"2026-10-08T00:39:03.678712Z","times_seen":2462,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":2,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"52.48.54.225","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww38.ladrake.bet/","date":"2026-10-06T21:57:55.484Z","timestamp":1791323875484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 17 Aug 2026 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EE:E8:EA:46:19:BB:CD:06:47:CD:BE:A5:CB:4D:D5:B1:10:DA:04:FB","sha256":"6F:F7:26:C1:10:8F:08:8A:9A:3F:1B:1D:C0:B2:22:FA:92:87:E8:8E:0B:BF:4D:70:D3:63:B0:64:7C:53:C5:9D"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 3036\r\nOrigin: https://ww38.ladrake.bet\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.ladrake.bet/\r\nCookie: cg_uuid=fdb99b5d2a259d3a249d86f32bbef602\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"cg_uuid","value":"fdb99b5d2a259d3a249d86f32bbef602"}],"method":"POST","post_data":{"size":3036,"data":"e=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\u0026cri=3BG4IbtmIm\u0026sf=0\u0026dc=\u0026cp=3\u0026gtm=-\u0026gac=-\u0026uvid=e1217d0f9076e623a466573bd0b97a9c6da89370\u0026tb=1%7C7%2C55\u0026gi=17%2C1914\u0026ich=0\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=55\u0026ti=3018\u0026mo=0\u0026pn=4876\u0026spn=1858\u0026sck=38611571cec14d5d339ebeb20dd03a8e.ELp3aSj4xN7bb%2BOh%3AaOAtBLdCtpfZuFKOsuufC%2F12dba4XKn%2BYGoxfCgpZ0pqdw9zGmdQox%2Bp%2BFRbb5ll%2BUsEgKmYo9ulFbuLLebEq3xApV8hFi%2Fh3TGRyjZFu9lw%2FxSPGHzNvjXSO6UKAb9eKe7g0K2r%2BPk3lvJX8LHqavWpbdEWiT6h8PBvPJJi1WSFUb%2FhFEwu9C%2FzJSCxvo%2B2s1AenrVratpHsK2tJfs97PX5CPfmRrBXSFaWLm%2BKmHBOx9ap5LYtRkNQOWY%2FGLpmRwyG25WFhJ7HNAENKzEHD276Z2U6wb0Qh06VwgcNsdR1JmS%2B1uupi7uzu1FKCH%2Bgpw3ufqiPKO%2BDlp3FHh2ydJ3TDUIzwVORSa0TUzpTkwuE01Tsu%2BdBNI7QFHOsOt0%2B%2FwNae%2BgzB%2B%2FTQj52me%2BqSyscdvB3R3KYZ3ArhB40u%2Bk30fipPu5UtlY255vH3UH5FFq5XH5k4aTyM2RrD3EPNH74MwB%2F%2FZVtFKcYID1j5Y%2FMs3usqMULT4rHNXvtE04u2S%2F9MlJh%2FvXyXiWBmuK%2FlCKqOKDVg9Qlz4V1dex2FmuQRhf%2Ba5nbL%2BKfJ9jyB3Rk941l3lJqYh0THWyaw8NqJze8DWFRGAC%2B526I8xRyDleexzlSMM%2FDyczzd96zOC9QI9NPPIB94CTWqd0359KD4v0plpTuQ7ZLqyY3zI4ZKwCQ2yg%3D%3ADhKCii9229f0h4QlGw13rA%3D%3D\u0026fp=1248\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0\u0026snt=1"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://ww38.ladrake.bet\r\ncontent-type: application/json\r\ndate: Tue, 06 Oct 2026 21:57:55 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":3927,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T00:41:02.911988Z","times_seen":18927714,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d.delivery.consentmanager.net/delivery/info/?id=175795\u0026did=2\u0026cfdid=2\u0026t=pv.d_d1.ce.cer.d_dnsx\u0026h=https%3A%2F%2Fyfdpco5.com%2Fsk-park.php\u0026o=1791323879982\u0026l=EN\u0026lv=97099\u0026d=2\u0026ct=14\u0026e=\u0026e2=\u0026e3=\u0026i=\u0026sv=1231\u0026dv=64\u0026","fqdn":"d.delivery.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"94.237.93.104","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yfdpco5.com/sk-park.php?pid=9PO15V947\u0026dn=ladrake.bet\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.ladrake.bet%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-10-06T21:57:59.992Z","timestamp":1791323879992,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.delivery.consentmanager.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FD:3D:5F:67:04:BA:73:77:A7:4B:D6:EB:58:C2:FC:D4:01:EE:58:64","sha256":"95:14:00:DA:64:95:A5:B3:BD:95:40:8F:E7:45:6C:68:21:88:41:0E:BA:77:8C:C4:50:5C:15:69:2E:02:AB:ED"}}},"request":{"raw":"GET /delivery/info/?id=175795\u0026did=2\u0026cfdid=2\u0026t=pv.d_d1.ce.cer.d_dnsx\u0026h=https%3A%2F%2Fyfdpco5.com%2Fsk-park.php\u0026o=1791323879982\u0026l=EN\u0026lv=97099\u0026d=2\u0026ct=14\u0026e=\u0026e2=\u0026e3=\u0026i=\u0026sv=1231\u0026dv=64\u0026 HTTP/1.1\r\nHost: d.delivery.consentmanager.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco5.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Tue, 06 Oct 2026 21:58:00 GMT\r\nserver: Apache/2.4.68 (Debian)\r\ncache-control: no-store, no-cache, must-revalidate\r\nedge-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 01 Dec 1994 16:00:00 GMT\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 06 Oct 2026 21:58:00 GMT\r\ntransfer-encoding: chunked\r\ncontent-type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":467,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"6f81c41597d3f5a336f458822cc0c32a","sha1":"8cd77a54b38f1fb376b45af2eaab8f5982523b8d","sha256":"5704a2e9f2f7ce43a79f9b407f1aedcfd50223cbe8bd2f71ff8c5c819e469cbc","sha512":"edb4841fa021f06b664c4f09378f6572177ceb8518b976c0b1571e2346fa116097d4979d31bd9ab7e841b68795922a07d451583620a2f31e3e54a867f91d7c95","ssdeep":"","tlshash":"b7900023ea888023c2a2c0300a0803003b88b8300238032e80bc30a8ec3a3a20c02000","first_seen":"2023-04-06T20:54:09Z","last_seen":"2026-10-08T00:39:03.673732Z","times_seen":62189,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":35,"send":0,"wait":41,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.ladrake.bet/04ed35b5-f4b6-4563-8f01-79f26b33cc9a/eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.LO61knHB5GLg_-kNKlWBwh30c1J5wGcHIHcIvEuLheP9XCuFHz38AQ.Bj0gJsf1mG4CLTJLfgFYgg.eyJ0b2tlbiI6ImUxMjE3ZDBmOTA3NmU2MjNhNDY2NTczYmQwYjk3YTljNmRhODkzNzAiLCJ0IjoiNmFjNTZlZGYiLCJzaWduYWxzIjpbInNvZnR3YXJlX3Jhc3Rlcml6ZXIiLCJvc19wbGF0Zm9ybV9taXNtYXRjaCIsIm9zX2ZvbnRfbWlzbWF0Y2giXX0.7QgGQ8SfzOg1TELgVZYusQ","fqdn":"ww38.ladrake.bet","domain":"ladrake.bet","tld":"bet"},"ip":{"addr":"185.53.179.200","port":443,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ww38.ladrake.bet/","date":"2026-10-06T21:57:51.979Z","timestamp":1791323871979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww38.ladrake.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Oct 2026 18:02:56 GMT","end":"Sun, 03 Jan 2027 18:02:55 GMT"},"fingerprint":{"sha1":"5F:1E:C5:32:F9:E9:DE:5E:C5:F1:5A:A3:DF:06:FD:BA:14:4B:97:94","sha256":"61:D2:C3:11:0C:0A:74:89:06:80:4B:3F:1D:1F:41:5F:76:CA:A0:31:D6:F0:2F:D4:46:18:25:E1:C6:85:81:31"}}},"request":{"raw":"GET /04ed35b5-f4b6-4563-8f01-79f26b33cc9a/eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.LO61knHB5GLg_-kNKlWBwh30c1J5wGcHIHcIvEuLheP9XCuFHz38AQ.Bj0gJsf1mG4CLTJLfgFYgg.eyJ0b2tlbiI6ImUxMjE3ZDBmOTA3NmU2MjNhNDY2NTczYmQwYjk3YTljNmRhODkzNzAiLCJ0IjoiNmFjNTZlZGYiLCJzaWduYWxzIjpbInNvZnR3YXJlX3Jhc3Rlcml6ZXIiLCJvc19wbGF0Zm9ybV9taXNtYXRjaCIsIm9zX2ZvbnRfbWlzbWF0Y2giXX0.7QgGQ8SfzOg1TELgVZYusQ HTTP/1.1\r\nHost: ww38.ladrake.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ww38.ladrake.bet/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nalt-svc: h3=\":8443\"; ma=2592000\r\ndate: Tue, 06 Oct 2026 21:57:52 GMT\r\nserver: Caddy\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":243,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T00:41:02.911988Z","times_seen":18927714,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"ww38.ladrake.bet","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.consentmanager.net/delivery/js/cmp_en.min.js","fqdn":"cdn.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"95.173.205.14","port":443,"asn":60068,"as":"Datacamp Limited","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://yfdpco5.com/sk-park.php?pid=9PO15V947\u0026dn=ladrake.bet\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.ladrake.bet%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-10-06T21:57:53.067Z","timestamp":1791323873067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.consentmanager.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"70:78:AC:EC:58:46:BE:A4:98:C0:29:71:CD:B8:DF:DC:99:05:84:92","sha256":"C2:1B:99:0D:17:3A:3D:5F:E6:6A:EB:55:36:3C:68:1B:B8:23:97:D8:7A:8A:A5:4B:F6:CE:FA:AA:0B:0F:15:AC"}}},"request":{"raw":"GET /delivery/js/cmp_en.min.js HTTP/1.1\r\nHost: cdn.consentmanager.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco5.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 06 Oct 2026 21:57:59 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Thu, 01 Oct 2026 14:54:31 GMT\r\netag: W/\"78573-65cc897e40ab6\"\r\ncache-control: max-age=86400\r\nexpires: Fri, 02 Oct 2026 15:08:19 GMT\r\nedge-control: max-age=86400\r\ncross-origin-resource-policy: cross-origin, cross-origin\r\nx-77-nzt: k1Q5YeK+ExLGZupp8qwg1nFcSGlFMm6UQzRs4BXAcJeT1SqXruLOMZ1pPYMtMf6xolFEwec\r\nx-77-nzt-ray: 2a494a154dd75a970c6fc56a0016412c\r\nage: 456580\r\nx-77-cache: HIT\r\nx-77-age: 24575\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nserver: CDN77-Turbo\r\nx-77-pop: osloNO\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CDN77","description":"CDN77 is a content delivery network (CDN).","website":"https://www.cdn77.com","common_platform_enumeration":"","icon":"CDN77.png","categories":["CDN"]}],"data":{"size":492915,"size_decoded":111847,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9f4c46eb33a5c4dfa6852550be352652","sha1":"4451328db0f4a5741691717b4b01aa18c44ff008","sha256":"d2cf708ecc92e934f50bc5ba2eeeeb9ca37ffbbeb43cde8366edb46267e859ec","sha512":"d9a2a554b858f7fe922d49d2e18d15b2d4f6861dcf71b55915045528bcdbdda8d99e88219736136ecd6b7b99df82f072ea662c2b7294aad740320943611582c7","ssdeep":"6144:bdsrLpvioTTHBsjT2zzq4vmaYE97BDL/Q4dlQhdvi0Baa+4gwfPhezIvw9Vuk4Vu:O99DL/Q4dmhdPBaSYvD","tlshash":"51a42856309321b41eeb49b4223f2b0579296b68680c509cfe70d4e47b96e8b7c77bf4","first_seen":"2026-10-01T15:18:08.554116Z","last_seen":"2026-10-08T00:39:03.676692Z","times_seen":2737,"resource_available":true,"data":null}},"time_used":6678,"timings":{"blocked":1,"dns":29,"connect":1,"send":0,"wait":2,"receive":0,"ssl":6644},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.cdn-fileserver.com/bql.php?vgd_len=5205\u0026\u0026vgd_l2type=dmola\u0026fp=4MIcPO7NGqkcg6rwweV9dVI_6RYU5tWPoSFODYVHVhg_UcSrAY3JR02gLZaldehB_iVVLJ-Tg2bKTA8yQDFDk1UdKMqTGDeS4mUle25-1NzWsjavwJy0fNcU2Eo0ds1W7hvxne3maHY%3D\u0026cme=YQ59PP0dv3v3Uvsm8VZRdqopQ-QMZAWfIMF3B29Z4gM26OL_wJ5VGYd6q9rQ4qQhQxzaGZKRi3tGT4ucEqU2nwriSHMKhgjDRGTImWfYxJ4p24pBSqOxjkcQbyQlGob7QY3EyKglrzzSGe8aUc6Jby_OIGp1PHV7xy60tPihqZARpu49qdcfJaO4x13gP1igM8jLRxnFi_Q1c2OYn7Wn-YjljaUXU1bXKAG4z8qx2alvx-M16soHeMR-NU4v2NSzugAjtG9ihPk%3D%7C%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7CWtJPvijWHRsfBv4nOZN-Vs0s0qvvEfG0%7CxDcVMoSqRIR4EymPIl-6nsSVTiX17pQEipxAYimR0cE%3D%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7C\u0026ctst=Default\u0026ksu=360\u0026fdkt=658\u0026vgde_kbbh=fuoyxQBuGUBO\u0026kwd[]=Betting+Games\u0026kwt[]=658\u0026kbc[]=05a96b35a2bb8841f14dc96131f13d7f.d2s\u0026kwp[]=1\u0026kid[]=3523812\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D8986%7Cclid_serp%3D7105%7Cakp%3D9%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.2036%7C23%3D1.2086%7C30%3D0.0001%7C7%3D0.0120%7C8%3D100614%7C13%3D0.0252%7C14%3D100618%7Ckus%3D5.0000%7Ckucs%3D0.6278%7Ckcucs%3D5.0000%7Ckcucs2%3D0.6775%7Ckssks%3D5.0000%7Crcid%3D189420%7Cclpr%3D0.851200%7Ccllvl%3D5%7Cm_p%3D74.1481%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.997%7Cps_id%3D0\u0026ktd[]=79363637763927153775265321216\u0026kwd[]=New+Online+Bookmakers\u0026kwt[]=658\u0026kbc[]=05a96b35a2bb8841f14dc96131f13d7f.d2s\u0026kwp[]=2\u0026kid[]=394460738\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D28922%7Cclid_serp%3D29984%7Cakp%3D2%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.2036%7C23%3D0.8971%7C30%3D0.0001%7C7%3D0.0106%7C8%3D100614%7C13%3D0.0245%7C14%3D100618%7Ckus%3D5.0000%7Ckucs%3D0.4259%7Ckcucs%3D5.0000%7Ckcucs2%3D0.6313%7Ckssks%3D5.0000%7Crcid%3D210375%7Cclpr%3D0.804900%7Ccllvl%3D5%7Cm_p%3D78.7336%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.997%7Cps_id%3D0\u0026ktd[]=79228162514268841193188495616\u0026kwd[]=Online+Sports+Betting\u0026kwt[]=658\u0026kbc[]=05a96b35a2bb8841f14dc96131f13d7f.d2s\u0026kwp[]=3\u0026kid[]=21263614\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D28922%7Cclid_serp%3D29984%7Cakp%3D1%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.2036%7C23%3D1.7524%7C30%3D0.0001%7C7%3D0.0069%7C8%3D100614%7C13%3D0.0282%7C14%3D100618%7Ckus%3D5.0000%7Ckucs%3D0.5145%7Ckcucs%3D5.0000%7Ckcucs2%3D0.6313%7Ckssks%3D5.0000%7Crcid%3D127668%7Cclpr%3D0.861900%7Ccllvl%3D5%7Cm_p%3D84.1700%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.997%7Cps_id%3D0\u0026ktd[]=79228162514264337593577902336\u0026kwd[]=Jack+The+Lad\u0026kwt[]=362\u0026kbc[]=lad\u0026kwp[]=4\u0026kid[]=15586278\u0026kbc2[]=akp%3D4%7C%7Cfp%3Dna%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7Cclid_fz%3D-2%7Cclid_serp%3D-2%7C24%3D0%7C25%3D0%7C22%3D9.2036%7C23%3D2.6882%7C30%3D0.0001%7C7%3D0.0137%7C8%3D100614%7C13%3D0.0141%7C14%3D100618%7Ckus%3D5.0000%7Ckucs%3D0.3269%7Ckcucs%3D5.0000%7Ckcucs2%3D0.6087%7Ckssks%3D5.0000%7Crcid%3D73787%7Cclpr%3D0.736600%7Ccllvl%3D5%7Cm_p%3D50.7849%7Cokt%3D362%7Cbdkt%3D362%7Cps%3D0.974%7Cps_id%3D0\u0026ktd[]=79228162514268841193188098304\u0026kwd[]=Betting+Systems\u0026kwt[]=658\u0026kbc[]=05a96b35a2bb8841f14dc96131f13d7f.d2s\u0026kwp[]=5\u0026kid[]=3524329\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D28922%7Cclid_serp%3D-1%7Cakp%3D3%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.2036%7C23%3D1.4607%7C30%3D0.0001%7C7%3D0.0073%7C8%3D100614%7C13%3D0.0205%7C14%3D100618%7Ckus%3D5.0000%7Ckucs%3D0.5260%7Ckcucs%3D5.0000%7Ckcucs2%3D0.6313%7Ckssks%3D5.0000%7Crcid%3D191283%7Cclpr%3D0.837600%7Ccllvl%3D5%7Cm_p%3D87.5887%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.997%7Cps_id%3D0\u0026ktd[]=79228162514264337593561125120\u0026v=1\u0026gdpr=1\u0026geo=59.56%7C11.4\u0026lper=100\u0026vgde_sa_ijp=%7B%227E8O%22%3A9%2C%22L77%22%3Ak1jQJ%2C%22E-jM8zd%22%3Ak1jQJ%7D\u0026lpid=\u0026tsid=1005\u0026hint=\u0026cc=NO\u0026wsip=170764106\u0026bca=0\u0026ugd=4\u0026vgde_setid=Nfu\u0026vgde_chost=LJ1j78YJQJ1LNwLJQxj7Q.NmY\u0026cid=8CU6073RK\u0026vi=1791323872109481007\u0026vsid=DefVid\u0026tdAdd[]=asnum%3D50304\u0026vgde_test_data_struct=%7B%22EO7E8O%22%3Au%7D\u0026vgd_adprefflag=00\u0026vgd_adpref_diff=1010\u0026vgd_fm_lang=EN\u0026vgd_implt=3\u0026vgd_cage=0\u0026vgd_tsce=L1374-S1374\u0026vgd_l3_sc=30\u0026vgd_pdtid=1\u0026vgd_oscar=1\u0026vgd_ctrlid=O_SERP\u0026vgd_nrrv=93776\u0026vgd_nrrmf=8301000480a\u0026vgd_nrrsf=scrr\u0026vgd_cty=mysen\u0026vgd_csovr=0\u0026vgd_intc_log=%7B%22dmip%22%3A%22195.64.118.152%22%2C%22impl_type%22%3A%22skp%22%2C%22xcip%22%3A%22195.64.118.0%22%2C%22xvip%22%3A%22208.91.196.46%22%7D\u0026vgda_kbpdl=%5B%22%22%2C%22%22%2C%22%22%2C%22%22%2C%22%22%5D\u0026vgd_ifrmode=14\u0026vgd_cmp_inj_fl=true\u0026sbdrId=\u0026verid=\u0026mprpslog=8y_3XBAJ3IcS87_IpjSex2s4IrBLRwZQHx_oWc8Rhhwr4kDI87fMPMhhwUl7KD4TQTZ-LCoQWc6633yWLiLt44ViTvlkHHYmJyqA2btBKX_gUhdY0Z6rTaGUdyy9KKVoz-EqSDVoP_s4ahI71YMdkyCG3uC_vwRE_VIrBagSRc04SWEFea-6V6ur-5bJHCA4fDQJ1YtjYPA\u0026kbbq=%26asn%3D50304\u0026vgd_ppvi=2153886947282703404\u0026vgd_wlstp=0\u0026vgd_vstrid=DefVid\u0026vgd_scsver=3768\u0026vgd_himglg=K0P0-O0K0-S0\u0026vgd_cache_metadata=%7B%22kbb%22%3Afalse%7D\u0026vgd_cfud=251031\u0026vgd_optout=0\u0026vgd_l2shld=1\u0026vgd_akcip=195.64.118.0\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026vgd_och=0\u0026vgd_rensize=1280_926\u0026vgd_scr_h=1024\u0026vgd_scr_w=1280\u0026vgd_col_sch=l\u0026vgd_be=0\u0026vgd_nmerr=1\u0026tdAdd[]=uiparams%3D%3Brend_w%3A1280%3Brend_h%3A926\u0026vgd_sc=30\u0026hvsid=00001791323872898032757816326589\u0026rc=0\u0026rand=1791323873601\u0026acid=undefined\u0026matm=1791323873601\u0026vgde_ltimesrc=u\u0026vgde_ltime=XXu\u0026vgde_rtime=XHX\u0026vgde_etm=u9\u0026vgde_timeObj=%7B%22juJ-JN%22%3Azxjj%2C%22jfjm1O%22%3AHfW%2C%22QNLLQ71L7%22%3Au9X%2C%22QNLLLJzOJL%22%3Auf%2C%22QNLLJ-JN%22%3AuW%7D\u0026vgd_lhl=2355\u0026vgd_sbSup=1\u0026vgd_nrrs=93776\u0026vgde_cdeplbl=1E8Mzm7M1e18j1GjJ\u0026vgd_end=1","fqdn":"l.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"172.67.181.210","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=949\u0026%21CU=T1NtYII~O~NiTO5tItONtahOT5aza~505XN1\u0026%21Eh~=%21D1\u0026%2A%2AEU=%7B%22%2A%2AXX%22%3A%22%298%22%2C%22%2A%2AXB3%22%3A%22p3%2A1D%22%2C%22%2A%2ACM%22%3A%22%22%2C%22%2A%2A%2AX%22%3A%220T%22%2C%22%2A%2AbCM%22%3A%22%22%7D\u0026%2ACb1=iit5WaNI\u0026%2AX=0T\u0026%2AYUJvU=\u00261XJCU=\u00263MEM=\u00263U%2AMJ=\u00263YDRXXR1WM=\u0026B%2AX1=ji0g5\u0026C%2ACU=T\u0026CDBXE=NA9Zsgt9F%3AeS9%7CO1N9%3A~IHrCyryCPr7P%7CO%29N9%3AyCdrP7ryyHrI%7C8AN9%3AyCdrP7ryyHryd~\u0026DBl=\u0026Dp1JJ=i\u0026EzB3M1=Up%21Eh\u0026J1nyJE=_BBM%3A%2F%2FEhUJhw1rY1B\u0026MCU=N.8fig%28AN\u0026U1Xppp=\u0026UpJ~=i\u0026XBMCU=\u0026XCU=NQSaTg064\u0026XJCU=N5NtitTIa\u0026XUl=80g5a\u0026XX=%298\u0026X_Dp0=I.8itGI5g\u0026X_Dpz=%21%2Al5RCDBX\u0026Y1=T\u0026YCU=\u0026YCUlz=\u0026YUJvU=\u0026Yh1=\u0026ZYCU=\u0026_BBM%2A=i\u0026hMQy=\u0026hU%21phCD=\u0026hUBi=\u0026hUBz=\u0026hUl=\u0026hXB=.KvK~25D2b%2F~W%2FhWK~byK5D%2F05J2%29%2F~20WK\u0026hY~EqCU=lz\u0026htmlsrc=1\u0026kkdd=nW%7C%21%7Ch3un%2AW9AH\u0026lC=igIi0z0NgziTI5NiTTg\u0026p%2AMh=T\u0026q%2A_M=T\u0026qE%2ABM=T\u0026tpid=\u0026wU=\u0026wqJ~=\u0026xUMJ=i\u0026xUMJXD%2AB=\u0026y%2AM1D~=T\u0026yxU=5\u0026~%2A=\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=30\u0026vgd_cmp_inj_fl=true\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001791323872898032757816326589\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222153886947282703404%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=8y_3XBAJ3IcS87_IpjSex2s4IrBLRwZQHx_oWc8Rhhwr4kDI87fMPMhhwUl7KD4TQTZ-LCoQWc6633yWLiLt44ViTvlkHHYmJyqA2btBKX_gUhdY0Z6rTaGUdyy9KKVoz-EqSDVoP_s4ahI71YMdkyCG3uC_vwRE_VIrBagSRc04SWEFea-6V6ur-5bJHCA4fDQJ1YtjYPA%3D\u0026tchkpts=%7B%22prel2%22%3A1791323873068%7D\u0026stime=1791323873068\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%252528%252528xi%253D%25257B%252522%252528%252528GG%252522%25253A%252522qm%252522%25252C%252522%252528%252528GOB%252522%25253A%252522vB%252528bc%252522%25252C%252522%252528%252528Yz%252522%25253A%252522%252522%25252C%252522%252528%252528%252528G%252522%25253A%252522JN%252522%25252C%252522%252528%252528uYz%252522%25253A%252522%252522%25257D%2526%252528G%253DJN%2526%252528Yub%253D33.PKX2H%2526%252528_iIDi%253D%2526%25252AQIy%253D%2526%25252Ai%253D%2526-_Yi%253D%25265GO%253DEMDMy9Pc9u%25252FyK%25252F5KMyutMPc%25252FJPI9q%25252Fy9JKM%25265_yxQYi%253Dah%25265iO3%253D%25265iOh%253D%25265ia%253D%25265ijv5Yc%253D%25265zTt%253D%2526B_cSGGSbKz%253D%2526Bi%252528zI%253D%2526Bzxz%253D%2526GG%253Dqm%2526GIYi%253D2P2.3.NHX%2526GOzYi%253D%2526GUcvJ%253DHEm3.fHPk%2526GUcvh%253Dj%252528aPSYcOG%2526GYi%253D2TpXNkJ4F%2526Gia%253DmJkPX%2526IbetIx%253DUOOz%25253A%25252F%25252Fx5iI5%25252Abo_bO%2526O%252528Gb%253DW3JkP%2526Q%252528Uz%253DN%2526Qx%252528Oz%253DN%2526UOOz%252528%253D3%2526Y%252528Yi%253DN%2526YcOGx%253D2R1-%252521k.1l%25253Arp1%25257C6b21%25253AyHnoYtotYVodV%25257C6q21%25253AtY~oVdottnoH%25257CmR21%25253AtY~oVdottnot~y%2526_5b%253D%2526_Yi%253D%2526_Yiah%253D%2526_b%253DN%2526_iIDi%253D%2526aY%253D3kH3JhJ2kh3NHP23NNk%2526bGIYi%253D%2526cOa%253D%2526cvbII%253D3%2526htmlsrc%253D1%2526ibGvvv%253D%2526ivIy%253D3%2526jYi%253DNb2._HHy6y23N6P.H.62.X56NPXhXyPJPG2b%2526jx5y%253Djcb%2526kkdd%253Duu%25257Cu%25257C9%25252A3nHA%2526t%252528zbcy%253DN%2526tpid%253D%2526twi%253DP%2526v%252528z5%253DN%2526wizI%253D3%2526wizIGc%252528O%253D%2526xhOBzb%253Divjx5%2526y%252528%253D%2526zYi%253D2Emg3k0R2%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","date":"2026-10-06T21:57:53.623Z","timestamp":1791323873623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 21:20:12 GMT","end":"Sun, 20 Dec 2026 22:20:07 GMT"},"fingerprint":{"sha1":"98:B1:3F:26:3D:00:6E:C0:49:6B:E0:9A:B3:7F:FA:65:57:D1:F6:66","sha256":"DF:7E:14:D6:11:75:6F:58:61:9F:1D:F8:34:5D:DF:EC:E0:72:07:A4:D8:EB:C3:70:2B:52:6E:C4:5A:C7:77:91"}}},"request":{"raw":"GET /bql.php?vgd_len=5205\u0026\u0026vgd_l2type=dmola\u0026fp=4MIcPO7NGqkcg6rwweV9dVI_6RYU5tWPoSFODYVHVhg_UcSrAY3JR02gLZaldehB_iVVLJ-Tg2bKTA8yQDFDk1UdKMqTGDeS4mUle25-1NzWsjavwJy0fNcU2Eo0ds1W7hvxne3maHY%3D\u0026cme=YQ59PP0dv3v3Uvsm8VZRdqopQ-QMZAWfIMF3B29Z4gM26OL_wJ5VGYd6q9rQ4qQhQxzaGZKRi3tGT4ucEqU2nwriSHMKhgjDRGTImWfYxJ4p24pBSqOxjkcQbyQlGob7QY3EyKglrzzSGe8aUc6Jby_OIGp1PHV7xy60tPihqZARpu49qdcfJaO4x13gP1igM8jLRxnFi_Q1c2OYn7Wn-YjljaUXU1bXKAG4z8qx2alvx-M16soHeMR-NU4v2NSzugAjtG9ihPk%3D%7C%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7CWtJPvijWHRsfBv4nOZN-Vs0s0qvvEfG0%7CxDcVMoSqRIR4EymPIl-6nsSVTiX17pQEipxAYimR0cE%3D%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7C\u0026ctst=Default\u0026ksu=360\u0026fdkt=658\u0026vgde_kbbh=fuoyxQBuGUBO\u0026kwd[]=Betting+Games\u0026kwt[]=658\u0026kbc[]=05a96b35a2bb8841f14dc96131f13d7f.d2s\u0026kwp[]=1\u0026kid[]=3523812\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D8986%7Cclid_serp%3D7105%7Cakp%3D9%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.2036%7C23%3D1.2086%7C30%3D0.0001%7C7%3D0.0120%7C8%3D100614%7C13%3D0.0252%7C14%3D100618%7Ckus%3D5.0000%7Ckucs%3D0.6278%7Ckcucs%3D5.0000%7Ckcucs2%3D0.6775%7Ckssks%3D5.0000%7Crcid%3D189420%7Cclpr%3D0.851200%7Ccllvl%3D5%7Cm_p%3D74.1481%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.997%7Cps_id%3D0\u0026ktd[]=79363637763927153775265321216\u0026kwd[]=New+Online+Bookmakers\u0026kwt[]=658\u0026kbc[]=05a96b35a2bb8841f14dc96131f13d7f.d2s\u0026kwp[]=2\u0026kid[]=394460738\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D28922%7Cclid_serp%3D29984%7Cakp%3D2%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.2036%7C23%3D0.8971%7C30%3D0.0001%7C7%3D0.0106%7C8%3D100614%7C13%3D0.0245%7C14%3D100618%7Ckus%3D5.0000%7Ckucs%3D0.4259%7Ckcucs%3D5.0000%7Ckcucs2%3D0.6313%7Ckssks%3D5.0000%7Crcid%3D210375%7Cclpr%3D0.804900%7Ccllvl%3D5%7Cm_p%3D78.7336%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.997%7Cps_id%3D0\u0026ktd[]=79228162514268841193188495616\u0026kwd[]=Online+Sports+Betting\u0026kwt[]=658\u0026kbc[]=05a96b35a2bb8841f14dc96131f13d7f.d2s\u0026kwp[]=3\u0026kid[]=21263614\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D28922%7Cclid_serp%3D29984%7Cakp%3D1%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.2036%7C23%3D1.7524%7C30%3D0.0001%7C7%3D0.0069%7C8%3D100614%7C13%3D0.0282%7C14%3D100618%7Ckus%3D5.0000%7Ckucs%3D0.5145%7Ckcucs%3D5.0000%7Ckcucs2%3D0.6313%7Ckssks%3D5.0000%7Crcid%3D127668%7Cclpr%3D0.861900%7Ccllvl%3D5%7Cm_p%3D84.1700%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.997%7Cps_id%3D0\u0026ktd[]=79228162514264337593577902336\u0026kwd[]=Jack+The+Lad\u0026kwt[]=362\u0026kbc[]=lad\u0026kwp[]=4\u0026kid[]=15586278\u0026kbc2[]=akp%3D4%7C%7Cfp%3Dna%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7Cclid_fz%3D-2%7Cclid_serp%3D-2%7C24%3D0%7C25%3D0%7C22%3D9.2036%7C23%3D2.6882%7C30%3D0.0001%7C7%3D0.0137%7C8%3D100614%7C13%3D0.0141%7C14%3D100618%7Ckus%3D5.0000%7Ckucs%3D0.3269%7Ckcucs%3D5.0000%7Ckcucs2%3D0.6087%7Ckssks%3D5.0000%7Crcid%3D73787%7Cclpr%3D0.736600%7Ccllvl%3D5%7Cm_p%3D50.7849%7Cokt%3D362%7Cbdkt%3D362%7Cps%3D0.974%7Cps_id%3D0\u0026ktd[]=79228162514268841193188098304\u0026kwd[]=Betting+Systems\u0026kwt[]=658\u0026kbc[]=05a96b35a2bb8841f14dc96131f13d7f.d2s\u0026kwp[]=5\u0026kid[]=3524329\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D28922%7Cclid_serp%3D-1%7Cakp%3D3%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D9.2036%7C23%3D1.4607%7C30%3D0.0001%7C7%3D0.0073%7C8%3D100614%7C13%3D0.0205%7C14%3D100618%7Ckus%3D5.0000%7Ckucs%3D0.5260%7Ckcucs%3D5.0000%7Ckcucs2%3D0.6313%7Ckssks%3D5.0000%7Crcid%3D191283%7Cclpr%3D0.837600%7Ccllvl%3D5%7Cm_p%3D87.5887%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D0.997%7Cps_id%3D0\u0026ktd[]=79228162514264337593561125120\u0026v=1\u0026gdpr=1\u0026geo=59.56%7C11.4\u0026lper=100\u0026vgde_sa_ijp=%7B%227E8O%22%3A9%2C%22L77%22%3Ak1jQJ%2C%22E-jM8zd%22%3Ak1jQJ%7D\u0026lpid=\u0026tsid=1005\u0026hint=\u0026cc=NO\u0026wsip=170764106\u0026bca=0\u0026ugd=4\u0026vgde_setid=Nfu\u0026vgde_chost=LJ1j78YJQJ1LNwLJQxj7Q.NmY\u0026cid=8CU6073RK\u0026vi=1791323872109481007\u0026vsid=DefVid\u0026tdAdd[]=asnum%3D50304\u0026vgde_test_data_struct=%7B%22EO7E8O%22%3Au%7D\u0026vgd_adprefflag=00\u0026vgd_adpref_diff=1010\u0026vgd_fm_lang=EN\u0026vgd_implt=3\u0026vgd_cage=0\u0026vgd_tsce=L1374-S1374\u0026vgd_l3_sc=30\u0026vgd_pdtid=1\u0026vgd_oscar=1\u0026vgd_ctrlid=O_SERP\u0026vgd_nrrv=93776\u0026vgd_nrrmf=8301000480a\u0026vgd_nrrsf=scrr\u0026vgd_cty=mysen\u0026vgd_csovr=0\u0026vgd_intc_log=%7B%22dmip%22%3A%22195.64.118.152%22%2C%22impl_type%22%3A%22skp%22%2C%22xcip%22%3A%22195.64.118.0%22%2C%22xvip%22%3A%22208.91.196.46%22%7D\u0026vgda_kbpdl=%5B%22%22%2C%22%22%2C%22%22%2C%22%22%2C%22%22%5D\u0026vgd_ifrmode=14\u0026vgd_cmp_inj_fl=true\u0026sbdrId=\u0026verid=\u0026mprpslog=8y_3XBAJ3IcS87_IpjSex2s4IrBLRwZQHx_oWc8Rhhwr4kDI87fMPMhhwUl7KD4TQTZ-LCoQWc6633yWLiLt44ViTvlkHHYmJyqA2btBKX_gUhdY0Z6rTaGUdyy9KKVoz-EqSDVoP_s4ahI71YMdkyCG3uC_vwRE_VIrBagSRc04SWEFea-6V6ur-5bJHCA4fDQJ1YtjYPA\u0026kbbq=%26asn%3D50304\u0026vgd_ppvi=2153886947282703404\u0026vgd_wlstp=0\u0026vgd_vstrid=DefVid\u0026vgd_scsver=3768\u0026vgd_himglg=K0P0-O0K0-S0\u0026vgd_cache_metadata=%7B%22kbb%22%3Afalse%7D\u0026vgd_cfud=251031\u0026vgd_optout=0\u0026vgd_l2shld=1\u0026vgd_akcip=195.64.118.0\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026vgd_och=0\u0026vgd_rensize=1280_926\u0026vgd_scr_h=1024\u0026vgd_scr_w=1280\u0026vgd_col_sch=l\u0026vgd_be=0\u0026vgd_nmerr=1\u0026tdAdd[]=uiparams%3D%3Brend_w%3A1280%3Brend_h%3A926\u0026vgd_sc=30\u0026hvsid=00001791323872898032757816326589\u0026rc=0\u0026rand=1791323873601\u0026acid=undefined\u0026matm=1791323873601\u0026vgde_ltimesrc=u\u0026vgde_ltime=XXu\u0026vgde_rtime=XHX\u0026vgde_etm=u9\u0026vgde_timeObj=%7B%22juJ-JN%22%3Azxjj%2C%22jfjm1O%22%3AHfW%2C%22QNLLQ71L7%22%3Au9X%2C%22QNLLLJzOJL%22%3Auf%2C%22QNLLJ-JN%22%3AuW%7D\u0026vgd_lhl=2355\u0026vgd_sbSup=1\u0026vgd_nrrs=93776\u0026vgde_cdeplbl=1E8Mzm7M1e18j1GjJ\u0026vgd_end=1 HTTP/1.1\r\nHost: l.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://realtimesearchresults.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=0, no-cache, no-store\r\ncontent-type: text/javascript\r\nexpires: Mon, 05 Oct 2026 21:57:53 GMT\r\npragma: no-cache\r\ntiming-allow-origin: *\r\ndate: Tue, 06 Oct 2026 21:57:53 GMT\r\nserver-timing: cfExtPri\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=je4Prr1PM5AN7mBtG1AGYLpG63ES0XzRJbJCC3gDJ6mTWMa%2F840fyD85dtrTWIV9LpvlslZOmqskIxGSpjtFwkb8X9WFUMcyDAVktDWTgAXfKJRDFai%2B898S0a5237MneYfzVE1e7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a467eca2291ca0f0-OSL\r\ncontent-length: 15\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":15,"size_decoded":914,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"2ba5e95642c652c708881ad3c9d8443f","sha1":"5bfcc33bb9cc897546c600206b03d1307bd63a94","sha256":"c787e9dd6dc8ea3c935f5f0f30e3b9e4a3e066b4619bb244f569883f8e318a24","sha512":"8c157fc41fd03bbd47633269b18effb652644e58284f8f85465b0ffba9b5a06544a03ed0655706c96edfa09a64f4f164f6bbc573ac5045000cae03c8b36d046f","ssdeep":"","tlshash":"7e600000000cc030030f0c00c3000300303000c000000c33000f30cc000000c00fc303","first_seen":"2025-03-08T00:25:13.560069Z","last_seen":"2026-10-08T00:39:03.663847Z","times_seen":225630,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d.delivery.consentmanager.net/delivery/info/?id=175795\u0026did=2\u0026cfdid=2\u0026t=cc\u0026h=https%3A%2F%2Fyfdpco5.com%2Fsk-park.php\u0026o=1791323879952\u0026l=EN\u0026lv=97099\u0026d=2\u0026ct=14\u0026e=\u0026e2=\u0026e3=\u0026i=\u0026sv=1231\u0026dv=64\u0026","fqdn":"d.delivery.consentmanager.net","domain":"consentmanager.net","tld":"net"},"ip":{"addr":"94.237.93.104","port":443,"asn":202053,"as":"UpCloud Ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://yfdpco5.com/sk-park.php?pid=9PO15V947\u0026dn=ladrake.bet\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026ip=195.64.118.0\u0026xfip=195.64.118.0\u0026requrl=http%3A%2F%2Fww38.ladrake.bet%2F\u0026al=en-US%2Cen%3Bq%3D0.9","date":"2026-10-06T21:57:59.988Z","timestamp":1791323879988,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.delivery.consentmanager.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 10 Feb 2026 00:00:00 GMT","end":"Sat, 13 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"FD:3D:5F:67:04:BA:73:77:A7:4B:D6:EB:58:C2:FC:D4:01:EE:58:64","sha256":"95:14:00:DA:64:95:A5:B3:BD:95:40:8F:E7:45:6C:68:21:88:41:0E:BA:77:8C:C4:50:5C:15:69:2E:02:AB:ED"}}},"request":{"raw":"GET /delivery/info/?id=175795\u0026did=2\u0026cfdid=2\u0026t=cc\u0026h=https%3A%2F%2Fyfdpco5.com%2Fsk-park.php\u0026o=1791323879952\u0026l=EN\u0026lv=97099\u0026d=2\u0026ct=14\u0026e=\u0026e2=\u0026e3=\u0026i=\u0026sv=1231\u0026dv=64\u0026 HTTP/1.1\r\nHost: d.delivery.consentmanager.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://yfdpco5.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Tue, 06 Oct 2026 21:58:00 GMT\r\nserver: Apache/2.4.68 (Debian)\r\ncache-control: no-store, no-cache, must-revalidate\r\nedge-control: no-store, no-cache, must-revalidate\r\nexpires: Thu, 01 Dec 1994 16:00:00 GMT\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 06 Oct 2026 21:58:00 GMT\r\ntransfer-encoding: chunked\r\ncontent-type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Debian","description":"Debian is a Linux software which is a free open-source software.","website":"https://debian.org","common_platform_enumeration":"cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*","icon":"Debian.png","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.68","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":467,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"6f81c41597d3f5a336f458822cc0c32a","sha1":"8cd77a54b38f1fb376b45af2eaab8f5982523b8d","sha256":"5704a2e9f2f7ce43a79f9b407f1aedcfd50223cbe8bd2f71ff8c5c819e469cbc","sha512":"edb4841fa021f06b664c4f09378f6572177ceb8518b976c0b1571e2346fa116097d4979d31bd9ab7e841b68795922a07d451583620a2f31e3e54a867f91d7c95","ssdeep":"","tlshash":"b7900023ea888023c2a2c0300a0803003b88b8300238032e80bc30a8ec3a3a20c02000","first_seen":"2023-04-06T20:54:09Z","last_seen":"2026-10-08T00:39:03.673732Z","times_seen":62189,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":36,"send":0,"wait":39,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.northwavepoint.com/mon","fqdn":"obseu.northwavepoint.com","domain":"northwavepoint.com","tld":"com"},"ip":{"addr":"52.48.54.225","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww38.ladrake.bet/","date":"2026-10-06T21:58:07.519Z","timestamp":1791323887519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.northwavepoint.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Mon, 17 Aug 2026 00:00:00 GMT","end":"Sun, 15 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EE:E8:EA:46:19:BB:CD:06:47:CD:BE:A5:CB:4D:D5:B1:10:DA:04:FB","sha256":"6F:F7:26:C1:10:8F:08:8A:9A:3F:1B:1D:C0:B2:22:FA:92:87:E8:8E:0B:BF:4D:70:D3:63:B0:64:7C:53:C5:9D"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.northwavepoint.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 3039\r\nOrigin: https://ww38.ladrake.bet\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ww38.ladrake.bet/\r\nCookie: cg_uuid=fdb99b5d2a259d3a249d86f32bbef602\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"cg_uuid","value":"fdb99b5d2a259d3a249d86f32bbef602"}],"method":"POST","post_data":{"size":3039,"data":"e=37dfbd8ee84e001263efc437e94f8d9f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d57138d642f17070100b1eabfd72e30d69183042b3e18f6646541c2628b70cd166651719a5b525a61060ec4bb621b66f336e66c8d41f6c538f2003df95b2b7a13c84ffe1fbe85ddcd3cb82d19f97adea954659005344163588b934131b723f8b388a75f45af34d0fd60b47d8b74c14e851538c9745bad4b01473cb52d3ea7dfa2f46cff1ab458da17f85e3975bddc273b7d70588661979d00e07360abc8ee3d4f7a23d6862f208a902a476811275843b88f2f646307b6e65b3bd9eae72482b15e241c7faaa1f3929b75bdd88f0be303cf5f3965c4bcc9e6f53194dcb763912112c3a79c3e1215f0606ca08c0621ac84e97e9d5ebb02f2c712dd508c887ccc2669c7cd65893ec5ccbaa6cbf0f10538a27aa4b1fb354376e98220cfea50b9464702cb4f0997dac3e4ecbccb70c86a88cefbc86fed3c2362ca383b9390965e37d7f833f341a7dd0d977def25026852dd10b803d785e13db3a328c413e0cf929b6b8d4d4f68fe481f5e72092687a023fa05d1cfa62aae9969ebbb2a9adaa9b13dc1f0e35f477083ee5252f0b1490242bbacac74e66688e037ece12dae7da0319553c815d7a83ecf0626e4ae9166233e600329094016aae18f6ace03b7454d4b35f9b44fdb9f040fe2a5d6babd6cdef0edfc87f9b3ec424f3df95b9bbf596f805f7812d762596d71ff7bae7305dfe2c1628c7cca2c8baa2bd1a50c9b73133c230a7b0f81c3e2df2066529b195988d4d8bfacd755059fdda16fc28a2a2fcad8003d77f896d05722b5248d589d04a77bca5adc9b56a4e8668ac88cdadf2f70f3f27826db22b487a2aa089d6b3d1706966b4b57b3bd01ede440c2d8c3ca1ebfedf1640c300eac21b941ef0ce6936384335d2046337c7ce3598686314bca0c98f18750b88611f27716d167202a8df4c3481ab863ffe57dc615734413ae312c9ebd83398f0642c5d642e58682a1e2178d040a7c07f8753940c8c54e4eb03fe6fddd3fcf8ebd1c577dbe786055518d055ae598ed0403d03f33c19d875ddb8bf99c0830b031a71535159f1b616ddfd3054297c4bc95b1f001eb3aba7c8c73949d08c5f1ea7a74fd8c45c29dbeb6d8e194896d049eec7b10c7638e18c50df3ee39a0ddd1c723f1df82eaf10d69cba294bc1c8617dd100468000f93ce6d699b269c0497df60f25f3afe7f199b62e4d26d7eb73b2c5718dcad987899cb01606904758d8681ebd075c356eabe2e2cced3545c4c102b6c4cbc7de0be3915abf9838cf6acb4a4ae8234f0b6d9447f6f4d63693822009804560ffcb2eef674e5ca68468b9401\u0026cri=3BG4IbtmIm\u0026sf=0\u0026dc=\u0026cp=15\u0026gtm=-\u0026gac=-\u0026uvid=e1217d0f9076e623a466573bd0b97a9c6da89370\u0026tb=1%7C7%2C55\u0026gi=17%2C1914\u0026ich=0\u0026ws=1280x973\u0026wos=1280x1024\u0026ver=13\u0026fi=55\u0026ti=15053\u0026mo=0\u0026pn=16912\u0026spn=1858\u0026sck=38611571cec14d5d339ebeb20dd03a8e.ELp3aSj4xN7bb%2BOh%3AaOAtBLdCtpfZuFKOsuufC%2F12dba4XKn%2BYGoxfCgpZ0pqdw9zGmdQox%2Bp%2BFRbb5ll%2BUsEgKmYo9ulFbuLLebEq3xApV8hFi%2Fh3TGRyjZFu9lw%2FxSPGHzNvjXSO6UKAb9eKe7g0K2r%2BPk3lvJX8LHqavWpbdEWiT6h8PBvPJJi1WSFUb%2FhFEwu9C%2FzJSCxvo%2B2s1AenrVratpHsK2tJfs97PX5CPfmRrBXSFaWLm%2BKmHBOx9ap5LYtRkNQOWY%2FGLpmRwyG25WFhJ7HNAENKzEHD276Z2U6wb0Qh06VwgcNsdR1JmS%2B1uupi7uzu1FKCH%2Bgpw3ufqiPKO%2BDlp3FHh2ydJ3TDUIzwVORSa0TUzpTkwuE01Tsu%2BdBNI7QFHOsOt0%2B%2FwNae%2BgzB%2B%2FTQj52me%2BqSyscdvB3R3KYZ3ArhB40u%2Bk30fipPu5UtlY255vH3UH5FFq5XH5k4aTyM2RrD3EPNH74MwB%2F%2FZVtFKcYID1j5Y%2FMs3usqMULT4rHNXvtE04u2S%2F9MlJh%2FvXyXiWBmuK%2FlCKqOKDVg9Qlz4V1dex2FmuQRhf%2Ba5nbL%2BKfJ9jyB3Rk941l3lJqYh0THWyaw8NqJze8DWFRGAC%2B526I8xRyDleexzlSMM%2FDyczzd96zOC9QI9NPPIB94CTWqd0359KD4v0plpTuQ7ZLqyY3zI4ZKwCQ2yg%3D%3ADhKCii9229f0h4QlGw13rA%3D%3D\u0026fp=1248\u0026f_mt=\u0026s_mt=\u0026t_mt=\u0026l_mt=\u0026m_mt=0\u0026snt=1"}},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://ww38.ladrake.bet\r\ncontent-type: application/json\r\ndate: Tue, 06 Oct 2026 21:58:07 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":3930,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-08T00:41:02.911988Z","times_seen":18927714,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-06","alert":"Sinkholed","trigger":"obseu.northwavepoint.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}