{"report_id":"36209ada-6bfe-4936-9c33-1e437606b286","version":6,"status":"done","tags":[],"date":"2026-04-17T20:04:21Z","url":{"schema":"http","addr":"ori-777play.space/","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"104.21.57.132","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ori-777play.space/","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"title":"ORI777 \u003e Situs Game Online Gampang Menang Terpercaya","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ori-777play.space/","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"104.21.57.132","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-22T20:04:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-12T22:35:46.689898Z","alert_count":0,"request_count":4,"received_data":533279,"sent_data":2057,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-04-13T10:12:37.432172Z","alert_count":0,"request_count":5,"received_data":6767,"sent_data":2620,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":8984,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ori-777play.space","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-13","domain_rank":0,"first_seen":"2026-04-17T20:04:26.851808Z","last_seen":"2026-04-17T20:04:26.851808Z","alert_count":24,"request_count":24,"received_data":2107606,"sent_data":12153,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap:3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-04-13T04:03:30.044476Z","alert_count":0,"request_count":21,"received_data":1105691,"sent_data":9654,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2026-04-16T06:02:59.279052Z","alert_count":0,"request_count":2,"received_data":2515337,"sent_data":887,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":4,"received_data":89943,"sent_data":2154,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.viva88athenae.com","ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-25","domain_rank":168367,"first_seen":"2023-12-25T05:56:51Z","last_seen":"2026-04-11T12:58:05.786893Z","alert_count":0,"request_count":71,"received_data":1795702,"sent_data":31889,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-12T22:24:43.06808Z","alert_count":0,"request_count":1,"received_data":474293,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vsb49.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":952945,"first_seen":"2020-04-04T06:35:12Z","last_seen":"2026-04-15T22:55:48.598078Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1081,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ori-777play.space/","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c1e318f6b7ecb6870cabdcc2fc146c2d","sha1":"f9cda18c8a1ec4aaae4ce18f491f3e71b9eb487c","sha256":"86ccd2306e510478d599caebe325742f0ebc3f6e48c7afa278e8ff4b8aa2168a","sha512":"85a540a33850410eac8d77494a94306fd288a03adfdeba2b5250c95488c5abebdd41bb330393437644928142c0a022f1ec322e0d1c18b93f73888bb8b63894d0","ssdeep":"","tlshash":"dcc02bcc320a0c7052f727008b3ff604f0423224f4e0ba31880a73044d30e07db44c18","size":153,"data":"","first_seen":"2025-07-11T00:04:02.216199Z","last_seen":"2026-04-17T20:04:34.09684Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78c4cd0c84838bea16844c9f9ef24b83","sha1":"8cd7971318371ab3d16379df6cfb254a5c649fca","sha256":"ea8fe021a4ace4f6786fecc418f70b658fc2dc02d136e8fe5c6ab6b62a46d5d0","sha512":"bc80244dddc0af2f6bc1fd25adbf64222a722246af2a96069f2a29057b3a4a22df352cc0bc236fbd0bcac015795e56a0e0ef286696795399f86c7a04ac64318f","ssdeep":"1536:2Iif7R2qTTR2t4iYniNw+inrJuQolwxLBAF927wXtWJTI5TrtgK:gR2c7tLBW27wXtSTI5t","tlshash":"6573b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","size":80578,"data":"","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-04-17T21:26:05.896289Z","times_seen":4399,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/js/old/new2-webduo35.js?v=1776341694","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6af5416986901dd7b37ba69046784b62","sha1":"5a3f9ac02178eb4b32865c96423c6d0066a4157b","sha256":"5f0c1636204e2e3d782b702bdc80e3fb5fb0dc9c558b297d7b3ffcd3cf251b95","sha512":"188d418e51eaef94d230b55b7d2c358d0d6aa0ae230807d1831d8324ac8d6541ed3947927320c674242f02913f985cedc3f6dab513c47462b7a44f174fe3aaa7","ssdeep":"1536:+vHOgntNuMAdXhM8Q8Y8o8sAMgmMuYUQ6cX:WuGtNHuXhM8Q8Y8o8dMXMJULcX","tlshash":"37335349ff8c4a8f5677219c483b81c56b5c8835e10b4f06fe7c58987f8a61a7271a2f","size":50304,"data":"","first_seen":"2026-04-16T13:51:41.782666Z","last_seen":"2026-04-17T21:07:34.027031Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-04-17T22:30:24.767635Z","times_seen":49365,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1aab6f0ddbf491d568120416d37c4cd2","sha1":"56dddf5e085467ef7376a4d7d1d4bdf89acf7a00","sha256":"732c202345e9f8f4303823ba9788c44d9043d60adde66a6f09004499f68e3ce5","sha512":"765f647c60a1381b42b05d1e8cf94913578465f029b87d71f4d5f44a85699156d9cebe9e0347bdb2ea1db6036bc6e9e62ae4c98350f7180cdaba47933b517b80","ssdeep":"3072:tiEIYgAYqhzhT9dyWFW1WfifM4fO5MxzjQi4IzxLMz9YZ15:tXyWFW1WKfM4fTxvZLMz9615","tlshash":"7634c69df186b47606a37130501f320af23a685ab45ac4d4f636d8e1bd789cea133f79","size":241778,"data":"","first_seen":"2026-04-16T11:08:25.336147Z","last_seen":"2026-04-17T22:40:53.098723Z","times_seen":454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","size":5504,"data":"","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-04-17T22:30:24.777495Z","times_seen":27479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/js/old/jquery-3.6.4.min.js","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"76d953d1285b57743bb4f425423f6f9d","sha1":"520277b4df74ad21592d7c33657ce97ded65a4a2","sha256":"cf5e50b1ac962ec10dfba4424fd35a5de3ea28363160f3f5939e7e7741c3ae95","sha512":"6913f9128895022b08339049963616cb09bbc61bd759a45c3bf7cb6662854f0c3ef16d975758468c34cd607176c011d9c62f5fcb8196cba93d0b4b265760747e","ssdeep":"1536:VjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvu:VeeIygP3fulzhsz8jlvaDioQ47GKf","tlshash":"5193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","size":89795,"data":"","first_seen":"2023-05-17T07:35:27Z","last_seen":"2026-04-17T21:07:34.019576Z","times_seen":2754,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d94ca516760e09fb980530e9b7984fba","sha1":"16038fff74d701f4d76ccd51a96fe85f6fdfa321","sha256":"36b060ec031f3ad890a452427a085eb45ac061cf57288972de5b7569434b79ed","sha512":"8b8609af121a075c8a3fdf704e29c825ef4d9b69d1ccf7c45d286ef1d234824597958b3c3672c1c3506671e61e9cb9d56a8ac7cc8bc92cc90bdffb569708a386","ssdeep":"","tlshash":"9cf0234c3c62b02737f93638c3239aaf3365070175c39524c645cc2428544860856c8e","size":445,"data":"","first_seen":"2025-07-11T00:04:02.217796Z","last_seen":"2026-04-17T20:04:34.097722Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-04-17T22:30:24.8039Z","times_seen":75879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","size":324696,"data":"","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-04-17T22:33:26.07601Z","times_seen":11825,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","size":1000,"data":"","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-04-17T22:30:24.778052Z","times_seen":35219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"40571ed967d847afae2cee3ce43c7ed9","sha1":"3619a4f5f89ef02006fc0a30f40c99995511fa65","sha256":"839295857f3f306fb85d55abb04d30ee37e5c614daf618346ab31914a1bb1941","sha512":"6d836646837bbaa3bd01ff3c7a96ee83946c3734f53e1ead24e38bb96ecfd046a204adf62abc7d4e8de3d767219581da9447e40c557dcfe501ecea56d6bf2bb7","ssdeep":"384:UJw/U5YK8Hx9KJCThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJCThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"8452c6a7b2a4782d42379712308f3205f33b7d45b215da19f36edcea4aa84c16056f3e","size":14213,"data":"","first_seen":"2026-04-16T11:08:25.276877Z","last_seen":"2026-04-17T22:40:53.092673Z","times_seen":418,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6512c815ab356c260beeea3b2aea31a2","sha1":"66c01d874ccfbed580d9ebc6cacf299b73dd7222","sha256":"6b1083691798f10543bd7293f2ba14a5a93e2eb8bfb601c914e6a1cfac3eb544","sha512":"26ee76e9a20d5c09a94d421157b3124eeb4df70f918e49cb67812fa30b30697ca78f66132203a77c65e13fbc4befa10611352c0957aedaa9725a171b469a5e6d","ssdeep":"","tlshash":"dcf0a35d3c56b07737fd3634c2278b6f3355074175c35524c645cc2468644961846d4d","size":444,"data":"","first_seen":"2026-01-23T03:15:24.53725Z","last_seen":"2026-04-17T20:04:34.098926Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-J47P3ZG14T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b2d1eab48a2df407aacbbab9bb0f343","sha1":"6377eec7fbb4ec27ffef2b8e74b65f29d40f92b2","sha256":"bb194b2c178e307ebeecad6d91855fbf31f7e0286fa4c1cdca7bc58e09f76437","sha512":"7088947bad74afbe8e7157342fd11a728ebee2416b5dcce28108ea72e18623d61ec2cd90817b861b068306dda2f753cd3a6178855fdba6157af2167e437aa0b5","ssdeep":"6144:/V4OjKg7CA4MRBRfrJPj8B3v0yIjwcHCpLUgW6w01V91XG:V7t4MtfrJL8p5WOW","tlshash":"f7a409ceb3d674625396f478903f018ba57b28a2b44cc89af189cce42d7465a4277f7c","size":473689,"data":"","first_seen":"2026-04-17T20:04:34.011926Z","last_seen":"2026-04-17T20:04:34.011926Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-17T22:30:24.799366Z","times_seen":75838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a22fbe1430d56fb2a5eed7fa6af6abb6","sha1":"3696567e9b22b652e731a2026551cea5a3cab229","sha256":"5a055b7bebbea5b3d7bf6b078bac808bafc52a93ff347ca4fe16971657168aec","sha512":"9a38d0362df8b491a5e827e76ef8ce99fdbb7e16d1a303ae91be28d639613e9fbdd02abfd6053ba7fbe62858c1cb22ebb69426a2f57fcc28678390da865c1576","ssdeep":"","tlshash":"af41b5d936e4f9ba834318e5043fa016b6353836487be8c0531dd8f5bc78c45821afb6","size":2306,"data":"","first_seen":"2026-04-16T11:08:25.271979Z","last_seen":"2026-04-17T22:40:53.066836Z","times_seen":454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"16049453652e98e2376bef44201239a7","sha1":"fdbd9b54dc8e36e05b5a7748ba6bd9b6fe00b49e","sha256":"76433801cd55867bd89d1306b39c0ddba3ce38c7339a04526d03efa263439048","sha512":"3fe61e42ccb0fd757d397a5913bfd8deaada8993350a8d395fd6377f1c18fd40e21292b23951bfbbcbd24937f6b53f815ce0d88a6e89f418aac248b6393ddd66","ssdeep":"","tlshash":"37f0235c3ca2b01337f93534c2238a6f3352170075c39524c605cc3838549c61847c4e","size":445,"data":"","first_seen":"2026-01-23T03:15:24.539421Z","last_seen":"2026-04-17T20:04:34.099855Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c5dd8e07ab2aa7b83e02dc4bf193440","sha1":"fd20251c226f88ee9aea54d933f529087580b608","sha256":"a1f978d318bcde06be72d489bf706927cf87fb04fa8bdc10570ff42e086fc0b8","sha512":"e458418e143c493a9bb6580540fb48a864d907f7831070e217929c907c7b59c324b5fc4e160c70c5d73b6911bcc94ae71962db510e450c1f31f85fb976f24fcc","ssdeep":"","tlshash":"ae112b2417b10220011af6469bc95750623c415fa444dc1e7d6d569a5fa2f1a12fceb9","size":944,"data":"","first_seen":"2025-02-14T06:27:47.014565Z","last_seen":"2026-04-17T21:07:34.03831Z","times_seen":1725,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51c9ec2d9f72ba62ae53d9289b01bd15","sha1":"3930e1d9d385c9949afa5afb9cfb047077d46797","sha256":"3ccc85c0b97f1c4345faf873849fc11c283b11c01a6041d8995a53189483f085","sha512":"5ef1c404691c96482baca330989e1b0b6eca4b9ce820ca16e7de95c09413916b38a23997abad354a55430c8df02b16c419c565dced8498d06bec18655938c6de","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCFGN//h6LiJq:SzP2DfSLi8","tlshash":"96822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","size":18392,"data":"","first_seen":"2026-04-16T11:08:25.265979Z","last_seen":"2026-04-17T22:40:53.091929Z","times_seen":424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"535e065fc4023a5b83ac59ad739ceec3","sha1":"85aceda883b231d5a8c7e11a29d93912e199f9ed","sha256":"343ea09fb9e954fa1383ab01432325fdd0c3535a78cd2d677d7a4c0879b51274","sha512":"bb2965db9dff79bd8adb3d4fce7cd426084312bd6ebb4da71eeb5c0e14e67672b1eb52711daf2c22520eb2917453601497269c670734c6e68bb20ebe01491e3d","ssdeep":"","tlshash":"5141c52af1db0dd34037ace22afa8b503b5841576447c6123ebcd94d6f63d1b6c634aa","size":2197,"data":"","first_seen":"2025-12-08T08:31:50.012227Z","last_seen":"2026-04-17T21:07:34.038938Z","times_seen":696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb5b802637ddf21172bad8d6046b1703","sha1":"ba7e5eaa854171ed5efcc91a1536fa42e2d0755f","sha256":"1a033022d96219ee1c92928f65d5cc3d8cc4da63d9af6e3847934218a9ea265a","sha512":"335c71b5a43b0292467468a0e694fbe3e64c05f16132a5ba819b41b500da192c691c3282304687ba9decfc9f29c72258d2036baa95ad8db7066a94e3f5e213e2","ssdeep":"192:KdLXEAB7K0tHXdFVEm/38KwqgzLDXV69LVSyQgkc+HXSixyeNfuUMc+28fzmJZ63:KBbttEm/JsbgHuQkPS6JE8rI6/w","tlshash":"8c62ad9975b3706b4523e0fd4bdf8016a3248817210ccd44bf6c9706bfa6b64cef5a9a","size":14820,"data":"","first_seen":"2026-01-23T03:15:24.542989Z","last_seen":"2026-04-17T20:04:34.101949Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4434b133d07794f1ccc6a43e1974db04","sha1":"f70242b35b72cf83277447f6fb561b415da4cbab","sha256":"60153c5b27067a5fde46b6b605f3bf23a8b16e2a835c8bd12f7f4bbbbaaeaa43","sha512":"9b3fce4cd97fde5577760425c5b85975927121bdabe973b4ff20c856064b653c1231dcf7f722107ac01cffce6d732be821342e6a1c9d3c97be1b5ce06caae689","ssdeep":"","tlshash":"6ec09b5b637535314567657505eb41643420d18b15055c1d3d6cc7724f33a550f96a8c","size":181,"data":"","first_seen":"2023-06-26T19:27:32Z","last_seen":"2026-04-17T21:07:34.041199Z","times_seen":2681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","size":10938,"data":"","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-04-17T22:33:26.070493Z","times_seen":25657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f816e5bfd3790278425cd60813fcc4b8","sha1":"fcfd53bd9a7010e6fc539758a716299a9bdd83a4","sha256":"73c1b4ba7489c2c2192d08c46ad8d025fa333c4fb7cdefe79fb6055e802b84a0","sha512":"6d172889ca4858f4290501523bb56ef2e669c4cbc90d0f6334d176399ed4a523cad9a79a1f033935f20e80ef298a1053b702cf4540ddda9b0fdd5b1cf3fc7376","ssdeep":"96:zNC9Hqt7pEma7hY/rcKIJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYyLRIvgx43nVY","tlshash":"f1b1859af247b45ac156225150ef3b1df33a281ca61ccdc4a66565f218784cba077f39","size":5261,"data":"","first_seen":"2026-04-16T11:08:25.273523Z","last_seen":"2026-04-17T22:40:53.189157Z","times_seen":424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/js/old/jquery.marquee.min.js","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb33cf2aed11f9e6d82f325e3a59aeaa","sha1":"23269fefa9d4c96301289553b145f6cf2224dc5b","sha256":"98e6d279e0a953b3aed10af732b0144fac9ec784a386750259b6b03eb3f26d93","sha512":"547b353276af03a66bd61b1b4ae7a41bbf604c6c69be27da542a2a9473e9dc96095f5df9b7591e74f71a264cd69076b44353f9c1c104f7472cdbdea82bda1963","ssdeep":"96:zceMfHftw6RX2wUb6cJkLIoeUJZYfShCmxxAAFzYi0yBo3nNyJmmxfbgFlUOvhWX:zcFfHf5kJkLIoeUJB/N0yB0kbfb29Fm","tlshash":"a31220d2aa703194cb9703bf948b02864e72d931641d0d7fb4b38198be60648bb17f3b","size":9052,"data":"","first_seen":"2023-03-07T13:03:32Z","last_seen":"2026-04-17T21:50:38.542196Z","times_seen":491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9f0bf9b94ea7d930bd33ae39a5e3b25a","sha1":"b4aac8a7325b38e3c92085c3b3a2010ffcf8c3b7","sha256":"945161443b9f87d8ca0a32a47bb8733c97c4670af663af27ae394b5e4d2d4661","sha512":"50222df3ec60be44fcd3b0bd344f4d8bee0a67f59a076466a1697f9e62325f28df22f72a6bb2f7f8bcfe8f4c15e98ae0f96c968c70d2b8b0e2c6d78532c7676a","ssdeep":"","tlshash":"63e0206d29447d35925355a754f6de4c34b23024a655945059df88052614d89c42cf58","size":334,"data":"","first_seen":"2026-04-17T20:04:34.103421Z","last_seen":"2026-04-17T20:04:34.103421Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5fff970a0fff14aff414dff2f6b7cbe9","sha1":"27f04b0b5ed5287faa7ea3eb726568fa63e79506","sha256":"af7a9f64ddcd32eaba256026c63c069de707dd88d389f05dd14b1b7a29ef1ace","sha512":"49b4bdd2d013b720d8ed2a023f9c162180ff278c281dc3792511da598b32c1841191b2e8a4515ab620c7cdea738dd21066f51ddeb862425aabf2edb2c83f1afd","ssdeep":"192:z9w28Od6wtvIEMViKSNilCMio7ifSWls0Zn:xuEmun","tlshash":"27f18b2e41b71972487361f99b8f244431765003700dce9a3e2e5b016f96a2d9be2bff","size":7827,"data":"","first_seen":"2026-03-24T07:10:15.087251Z","last_seen":"2026-04-17T21:07:34.045202Z","times_seen":214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/602065d1c31c9117cb76c075/1etv8rf92","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62ef709451866442548043bb9b62a203","sha1":"c995404be464e58438b701fbfaa43326fb72deb1","sha256":"e4d7eafcaab843dcaff55330b4999a1943eb8110fddf8b42bf3ec34f95ea8da7","sha512":"1329b8cca58fda13d5c1d64c1cae88dd4ca807d65c268e6353d06bfc5cb675aef39140523dab17bbb15094dc332c9e2a266089e77362630a2250657e2ec04fdf","ssdeep":"","tlshash":"2e41b0e6af4f185bd2a410d80cbff90e787b21e745a858e257080c617265aad3b8dd2c","size":2123,"data":"","first_seen":"2026-04-17T20:04:34.049502Z","last_seen":"2026-04-17T20:04:34.049502Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"738ff91ff3b95cf361a0ec2c097c0306","sha1":"ac6fc66c22e22c7d17e896d31ea756c9beab679e","sha256":"3b6c4eb099b85462a923be96ad492c8e3540d3a9c7f90817274879072f3bba00","sha512":"6e5f28534779b8776115f953912ef7153d5b494c24c798bcdb6558032a885cfccc584642693dc5fd853c8a9dbf7f92cd972065bc3051bdb0337042d7ab2f7023","ssdeep":"1536:BigMXSFu196wofTn32jGDIgaOS9WbaGlDluK1yFYBdZPkx3u4V5pfYMrlSf:4DiuTgQG/g1x3u4V5pPrlSf","tlshash":"b6a30a6ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","size":106298,"data":"","first_seen":"2026-04-16T11:08:25.339244Z","last_seen":"2026-04-17T22:40:53.096178Z","times_seen":421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"175258ff814b5c134ca0b32510211fef","sha1":"05236b3554ba1892e75e67e470f737cfede747c8","sha256":"b6450ab77a8c1e141fa15f4a469340158eb7ae036cdc48b21441463d83fc3bc9","sha512":"fe0358972f7ef32bab67c76f6ebd6da18427010c5d7b5d123bc2d2fb6157b2937142a38d1578b250b4452ea7517cac27b0b34abff68c095d6cfb75bb78a8155e","ssdeep":"","tlshash":"2e71ef1af25705220acf69be27e3078535b08447a504ca073d2c56656fa7fa7263abfc","size":3758,"data":"","first_seen":"2025-12-08T08:53:31.349411Z","last_seen":"2026-04-17T21:07:34.046056Z","times_seen":461,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc3c144b883a3abdbbe71701ebb0e66b","sha1":"9a6863582eebab6a5c00391ef8a37b3afa855945","sha256":"26ded8f2b1b53d104c738332e3ede0dc27518fe9aba6ecb67be692592f02e88a","sha512":"e0f0f98278b181b703d238011b3e8828c6fe283659371d445ebcac8ab548032e7c32011575d5584e9e1f1b28faaf457febc3105f135548494d44953d07a4587a","ssdeep":"","tlshash":"84b012dc70b9e10402342b80495b415c341e500e310e3cb3104c0f48471045400c5118","size":90,"data":"","first_seen":"2023-03-07T13:03:32Z","last_seen":"2026-04-17T21:07:34.051387Z","times_seen":1699,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","size":53530,"data":"","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-04-17T22:30:24.775337Z","times_seen":27334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCv6KVjbNBYlgoCxCvjsGyN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 02:16:44 GMT\r\nexpires: Sun, 11 Apr 2027 02:16:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 582434\r\nlast-modified: Wed, 27 Aug 2025 19:19:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29844,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29844, version 1.0","md5":"9418887ae687a640730a62da6d5cef56","sha1":"c82ce6b645275be73a81d3c9027f540c0add912f","sha256":"3658a0717e347c1db8d80dd565584b9dc56769fbf87909c50a4a7740206ec5f7","sha512":"c700f698292446c2f7b8c6ab8d44eedc78ef1a0053faec159ef3f67d321bc5c9b0c24b8860ca15dcd02b24da947a32f2640bd00b4ba2c6729f3a7810ba441487","ssdeep":"768:8K/8hhK5wKRT6RxuABYd47Sm56257a/1MePoWvV6:88Sh3eTzABYdkR5b5SPoEI","tlshash":"bad2f160971a7d67dfe1de267811eb4f43aa36df0f515a4918da35cc231e38920b43e4","first_seen":"2025-09-02T19:57:23.466991Z","last_seen":"2026-04-17T22:29:44.732594Z","times_seen":10871,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":118,"dns":1,"connect":11,"send":0,"wait":23,"receive":8,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/new-webdata.php?content=data","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:59.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /new-webdata.php?content=data HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:59 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sqexoam97ka5z4bz%2Bf6R2PfQaGkMttYew26ahUwox825Sd4DrGZBQ87wqVJNAUTwAcXd34rpzn1I08pcEbkEtfmPvbcpHiNWDw6qrqix85%2Fa9ywzAiOzeua5cs1xX%2F8DKOiYRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ede09463ce25687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":249,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"94afbae0363cb2c8ccd91f44704eb62b","sha1":"944d115805ea9236b90a3f4812b2fa7f49a78ae8","sha256":"b5ddfdafed2ce87df2ea9dc06941a5eabfe4c06264a18d20ce4cbf3f1555ce58","sha512":"d82bf0593abf7a25b401c8d1964182300468f025e8a589a03efe296c9d1970eb8deeb212f1e1f016d348952ef45900e6b5ec458b7c8f298450cbdccbac6d671f","ssdeep":"","tlshash":"8cd02b11b2188e355101fb76b1ea74da1106013742c18d0862004c0d0beb91eba54955","first_seen":"2026-04-17T20:04:34.004642Z","last_seen":"2026-04-17T20:04:34.004642Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:59.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ori-777play.space/\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 20:04:00 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 16 Apr 2026 10:58:16 GMT\r\netag: W/\"73eea1de9215521cb137b51419ba55a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ede094b4ef2783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10839,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"73eea1de9215521cb137b51419ba55a9","sha1":"a8876b573146cd5450adc92a5450febea8d33f22","sha256":"df1d970dbd95be40780e8c006102fa7892bfe26bc989ee0c9222b089038542ee","sha512":"277849fa8a9d59430663b5c1aac29a198436731ab59bc5968ed9fcfb839f00a31e6e278c3c78547f6e1c20d94847963375de011be6493af268a7bac25cd15257","ssdeep":"192:ImwHq/LrnzPLEgIE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:s6LrnzCE1iN+xkDOy+Hp8/5Avy","tlshash":"c7224269ce504ea702c29647399f35437624429b1f54382eb78891ac0f8ec6f71f779e","first_seen":"2026-02-18T09:54:55.751197Z","last_seen":"2026-04-17T22:33:26.084254Z","times_seen":11893,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:04:00.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/js/twk-chunk-6289ff8e.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 20:04:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 10:58:15 GMT\r\netag: W/\"738ff91ff3b95cf361a0ec2c097c0306\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 119122\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ede0950acdfb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106298,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"738ff91ff3b95cf361a0ec2c097c0306","sha1":"ac6fc66c22e22c7d17e896d31ea756c9beab679e","sha256":"3b6c4eb099b85462a923be96ad492c8e3540d3a9c7f90817274879072f3bba00","sha512":"6e5f28534779b8776115f953912ef7153d5b494c24c798bcdb6558032a885cfccc584642693dc5fd853c8a9dbf7f92cd972065bc3051bdb0337042d7ab2f7023","ssdeep":"1536:BigMXSFu196wofTn32jGDIgaOS9WbaGlDluK1yFYBdZPkx3u4V5pfYMrlSf:4DiuTgQG/g1x3u4V5pPrlSf","tlshash":"b6a30a6ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","first_seen":"2026-04-16T11:08:25.339244Z","last_seen":"2026-04-17T22:40:53.096178Z","times_seen":421,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//fish-fs.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //fish-fs.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 792\r\nserver: cloudflare\r\nlast-modified: Mon, 22 May 2023 04:43:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=jDZwE.kMIguE.gAt.UruLAYdUH_9WCkXYBpF.CqlJqo-1776456237.2525833-1.0.1.1-iTnGu0zaJGNoZS5Vk9Vqi4cYv17Qkb3gEFK9K2Cvxsse5Oz6P4P.v_O6jpPT1cEskD1Ogah4a1VLwXVYGdEoimE_Xz3pYFshMJKSYuKLtDz6hjMAtzlT_MmvJ.4.3Xmf; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-polished: ok, orig_size=1584\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093acd03b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":792,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"516a01f7b1b3c95a9ecf44e325f9ee07","sha1":"1982923475107c337470ced7a3e78b685ac47c79","sha256":"6240f17a98bc571378a82e5112eed4635d7d5421ae012f54523623c3096d835a","sha512":"09f420e3a4a7472e7cd37e29aa959ed273d9ff721b4115e0bca13b9ad185c64afb58b862da9d9f68098ebdadb4b986c82a1dc5e4318aeb64a36d9443995d912b","ssdeep":"","tlshash":"8b01758cf2dbe5e681153311db113f789cd6ba4bad23c538f08238654da9856583803d","first_seen":"2023-05-22T07:32:15Z","last_seen":"2026-04-17T21:07:33.996276Z","times_seen":2508,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-mg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //interactive-mg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1092\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 04:52:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=oGXWXp.K8IOyk4VIiwg5znvaMkr5tNRzfu4oxIJ3.WQ-1776456237.2586198-1.0.1.1-DMw7QSPNdY3cgZnUR42UQbxWRPBnXv4YLZdIKv.XvpqOaSR61eDJTeDBggNmY5PMtGMLDOKvXbs3K33KTz5bQKnHuQgTBeSIkocOIejnUSyNh8DeJQVIn5eVA8rnMA58; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=4064\r\nvary: accept, accept-encoding\r\nage: 6043\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093add0eb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab217824849c8bc2f05240458ef55574","sha1":"06b015108c8fc22469d8e5a4c371e6d05c04b624","sha256":"326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72","sha512":"85738d45d8f938d949662c26377b9a050c906b83b9013a1b0f5c070526ff287272a1e8ee640aa568682ddd3713cf06980f1f1bfc42acb7fc79c42df545e84005","ssdeep":"","tlshash":"3011b66ab8162169cca0c426b6bf9ac0fd1085411b0b7decbfdc4205db936b6646112f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:33.931731Z","times_seen":2508,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/assets/guidelines.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET /assets/guidelines.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5688\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 11:04:58 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=HfeVz1yyoYoJuzXcaxuviJcOwxvnwYvqozqoCF5doC4-1776456237.3169115-1.0.1.1-sTnPOyqlR3ULl1TntzdCNgFbtZS2.VDke.YvoWKEJ6dCogwuC8m0aPmRwHIKwx8PDjUGh1TZmVsGXJtWo1O9swa2wuXXy0IsMN8zk2qx9ZiJF3ZlaH7M1AdFuiWeRwGo; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=11637\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093b3d71b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"27c7481d5a81d1ffa560cd5fd38d40c6","sha1":"b0f1278c93a08d9a83a0817f96ed4df81db4321b","sha256":"ecb550035fc18ec3d65ab4009346a27e06a68d0579b4e06ff17fd18f95a2c1b1","sha512":"eb8bee706d476461c96adc6517245a39a1bc5f1e25eb0d9f48496852b4a550f70bd7a0be4521ec7c6927863549136e58d3cd48f9d35ec7af411153c0bc12b2b3","ssdeep":"96:PWSw6RKoMSmUxkDYGlhbnSTKFVBc2r4tplUI/v6AizeXQQ3FUjKd:Pnw6RKZSpax3jjLc/tp9/+ggjW","tlshash":"68c19f7345fe36881c34b551c9fd24fd4e40242c42d2af3268c34a56999cf07e353ac8","first_seen":"2025-11-19T10:28:57.315993Z","last_seen":"2026-04-17T21:07:33.994415Z","times_seen":741,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/css/old/template/PP.css","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /css/old/template/PP.css HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PPpPBM2UCmR9sz6zHG43Ac7uXCz9LdabwZcp9dE2poqwlmsbeUd8fNXGCVTLZq8v6qlLnBBdFLcB15ZvvVEMv5Qx5s2lT%2F1T8VAD8oL6EppREakOrTFqRbT3EIWo9Qys0v1WbA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ede093a0eda5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":649,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"0d2f93dc6b2e6a0dd205df41c078789b","sha1":"8b808714cc6fa17be935d3ee3a2ad3032609cd62","sha256":"b8fc1815963f3d7f1ffa1a68a54646ff6c670342f5273b81e4dcd352af38a2ca","sha512":"e85b92e0b17b3788a4fba6b3674ef14b9b87155b492aa9130c86083d3181e7e2d15844cac9f0616308278b08f9f6fc3f8fdbae97ea50646f2e0a79017710630c","ssdeep":"","tlshash":"1bf0dc189d8a412aa43b48bf33e9a413f230348ba4497bb6bed85070af38414393f881","first_seen":"2024-09-19T22:39:57.393337Z","last_seen":"2026-04-17T20:04:34.009307Z","times_seen":81,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-nxt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-nxt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 726\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Jun 2025 10:35:19 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=owLQU7p7VqKDRjkzJp5N2IPKeKF6XUfNynLtoqw4qeQ-1776456237.2358174-1.0.1.1-7LGEy6XXQWRliwLWuj6IzfaEAKzvXio29Wt9tiznY10WKJIP59fcOmVaXoecQe2Q.WpDwIdLVi_c.c4eVmIQUU70r1c._HkfX4sA4V_fUf25rftqCXLxzB27A9Y3xxMA; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=1401\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcd1b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":726,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6449a17268b8f3221bdad537a2018215","sha1":"a4f56e8c44c4a178b9f261fb449c8fb36c9769fa","sha256":"5113196adc5f4c02ea7f5026149ce8dd97782f2bc2aa701e3ee11919a7950b6a","sha512":"803c55fd5af1caa42b842c4cc3b6e53790e3bf8e2e09d70bad65c03ec3dd77ea0b94c10397b0ec16d26da8a1b6511ce35e26b6a6bcdf303f87419e41eaab593a","ssdeep":"","tlshash":"c5019914ab51f11216f732975332f148966e7082233883708f43394c32f676f5939e03","first_seen":"2025-06-24T13:08:13.727437Z","last_seen":"2026-04-17T21:07:34.036389Z","times_seen":1712,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//beranda.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //beranda.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4280\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Nov 2025 06:08:31 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=UdggGidlnek5kJfTWl1FD4Ufpwy18IJ6BakPw1KkfyU-1776456237.2640781-1.0.1.1-u56o2uScQBaI4Sxsl4lm6XMUyA2CLy9qgzoC4eDYGWH67SlAnS0h_0_9FC1mwxjx047inkA7yCkVoZPMrbPP30uBqx22Rh8oETTPoYAQtVpEt4Swg7y6sC26zKwhjiBc; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=5926\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093aed1eb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4280,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d5c94e134973f78a3abd09f8ecaaa1a7","sha1":"b079718fafc29f5496df6186b28ed6aa4e8000c6","sha256":"de1ffff913bd404be635b1f1fafa41fb2f83e65ebef63467adeade423d491315","sha512":"f6519ea55de5c7b50edf0ce8292964fc798d4397733c19048e769f9de89c8ac5ca843c8544f4d9a1c8f046049df2f6bc6509af0057a76258158206780130ced2","ssdeep":"96:OC1l25Lw1FSSu4F4GR0hyjDxGCMiKmfLPCiKjf9S9Yy:Rl25Lw3Sl4RRRj1GfiKG5S9S95","tlshash":"70917cd24d58e0864d78194b4dccfb38405d143e4d955fe3261a47fc02bc2c0612edb2","first_seen":"2025-11-19T04:54:17.138379Z","last_seen":"2026-04-17T21:07:33.972026Z","times_seen":990,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/m/capreg.php","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /m/capreg.php HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8fKiEk5pn5KjlL5m9TX49sXwShH4kScovmM%2FZgkth%2B80LfLjK01%2B8F3uFMYrYQSbyIQ%2Bodamt7ldGGWP%2Fmkut%2FSX5g8oANrCsBXdRdaR3ffVgUTbZokk%2F3WeSeaB84jowUrXRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ede093acfc45687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2654,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 44, 8-bit/color RGB, non-interlaced","md5":"19563daa4953ce707835c480934f2639","sha1":"cecfbe54bbd6553d30aedfd4cec5c18dcb9f85d0","sha256":"faaf45bdf3ddfbbbde58e11651d549d4db05a8387e88e8822f45afc682c411d3","sha512":"2b9ad8cb6446f3868d11e057ded6c12713031cd62640bb468113746ac5d7bbe80ce454786a3eb4ffe7489f9b9eb26cc7e6e3fd26458b23553a43104a1679d697","ssdeep":"","tlshash":"22516cb3c0ffd5917ea017e0053b61e321b01335a9b8b5462be39cc939680c79b68c6a","first_seen":"2026-04-17T20:04:34.01101Z","last_seen":"2026-04-17T20:04:34.01101Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-J47P3ZG14T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=G-J47P3ZG14T HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 17 Apr 2026 20:03:58 GMT\r\nexpires: Fri, 17 Apr 2026 20:03:58 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157062\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":473689,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"7b2d1eab48a2df407aacbbab9bb0f343","sha1":"6377eec7fbb4ec27ffef2b8e74b65f29d40f92b2","sha256":"bb194b2c178e307ebeecad6d91855fbf31f7e0286fa4c1cdca7bc58e09f76437","sha512":"7088947bad74afbe8e7157342fd11a728ebee2416b5dcce28108ea72e18623d61ec2cd90817b861b068306dda2f753cd3a6178855fdba6157af2167e437aa0b5","ssdeep":"6144:/V4OjKg7CA4MRBRfrJPj8B3v0yIjwcHCpLUgW6w01V91XG:V7t4MtfrJL8p5WOW","tlshash":"f7a409ceb3d674625396f478903f018ba57b28a2b44cc89af189cce42d7465a4277f7c","first_seen":"2026-04-17T20:04:34.011926Z","last_seen":"2026-04-17T20:04:34.011926Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2329,"timings":{"blocked":1097,"dns":1,"connect":7,"send":0,"wait":41,"receive":28,"ssl":1153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-sg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-sg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1480\r\nserver: cloudflare\r\nlast-modified: Mon, 15 Sep 2025 07:44:54 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=vArSIPNqv4JQr_iQ4yeih993LLmC3KNsqQq9kr2kfi0-1776456237.2425432-1.0.1.1-v0yRER77JjnnaVYwHKXb8wOjpzyZiIG4DTrIHtswNtoAr.S_mvau_KVK_J8tUbrCtiqg9dsj6tdiaYeCyG4LiYt7HFhMLPcdN3.4G1LBF7v2EhD5Q6WlafsKC6ArVMQM; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=2690\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 6153\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abce6b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1480,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5226d29aef9aad472795f18b79eceaea","sha1":"ce47d4a7ee1d0c56f477dab5ff66c0de15432cb2","sha256":"bc4de63c2fcb87195d112cb068604727015cbe7cc14bd6c29c83d53f3a7aac2d","sha512":"f20e4f162b5abe9512de4f5d2bb82d8f9ba17ec199e74d0bbec14d83115baeba1fa81eb37c5fa9bed8c2b206844d95d92ac52ed1036d8f0623b83ac7d3b083a6","ssdeep":"","tlshash":"6531e92086baecedfd1ab65d4e4e0ea4452850a661808debfc1fd57021f0f6512cc696","first_seen":"2025-09-15T13:55:36.940008Z","last_seen":"2026-04-17T21:07:34.030012Z","times_seen":1464,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-all.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-all.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2548\r\nserver: cloudflare\r\nlast-modified: Mon, 07 Sep 2020 10:34:19 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=Odk1jzEXEWxS5XkT_0iWBZx.VHrggdI3_1eSsmtegbg-1776456237.243335-1.0.1.1-K2h483UurKULXRFJamGa70OonVLtoSwnk.mXmS5CIbJy3FwoJRa6kcsNnyRxFVTOVMwmGW5AaVURy2C3iyeetIA.AlrlsRaGLf0EJTjrgVfEzt3908.igz7Kj5d2Ln.B; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=9511\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abceab51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2548,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80ab66e968b68828f745dbd67b94dfc8","sha1":"18d70a225ba9f5c51d79d286178312966d339f76","sha256":"bf207416b528a9c36145e5943266d17c909af991f3512d62636b85eb8232ab5f","sha512":"6fa79f44200fdb6f99507cdc247bef76c2148d722ca90fa1b2f91baf303897536fd4e73219f2e27364f2366c7e4f4b87032afa0aac9ccc4e782f432789793a5f","ssdeep":"","tlshash":"2a511a6e75e3673f492ba83709e7aa4509a02a3a0800d02f53fe8041f39c61a6116a67","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:34.013187Z","times_seen":2507,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//promosi.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //promosi.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4572\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Apr 2023 09:33:06 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=4eguPvKOwBHvXKPy8HEtbLFCpzqUCkg4t26opeXkwJk-1776456237.264507-1.0.1.1-u0JGcYwF9SBpC0FfrW6DVMPl5VlP_56U6IduMF0HoAXTRhazrTsyMg04atY2RKJ18zsQFr2rfW3Fl8L1Fa2vSdhFOrlboFPFhPHayKcGurTgYWTgOMGvaw4XpNL_Wv3S; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=6991\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 6169\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093aed20b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"22fe7e055070f4d93573d911106f0915","sha1":"f1a2dd86dbfd35926751fa3dc475610b8bc3a9a2","sha256":"e4fa61fb5af8d64e7261796f4b1080b885dd33b4d33182773165ef2c418cf618","sha512":"615e8cae1aabbc9c122334c9f567046f1b7b2151315d2878e7b34ca430bd77850ae930ac9941f933529129e9af54b8a4a2fb2f72a7415699fd38120710f4603c","ssdeep":"96:Kg0nKF+KSETc5+EX0F5k1tiOyLgpXCIOTAtzr/LJK8CP:pNDTc5zkTKyLgN1EYr/LJK8G","tlshash":"8991aea2e037412f188f43847ba48bef3eea8924012b4eb1b8c25de8461c15d32d0677","first_seen":"2025-02-01T22:41:26.037317Z","last_seen":"2026-04-17T21:07:33.979053Z","times_seen":2014,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/pop/mobile-fgs.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET /pop/mobile-fgs.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 165531\r\nserver: cloudflare\r\nlast-modified: Sat, 11 Apr 2026 08:13:02 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=oE5hfwQ8.e703EMioheXtKEtjxNy9N6fb2wLV9xaHJ4-1776456237.3151453-1.0.1.1-alb.3kCGfb7Ii_XAoPId_OJzJzbR_KHrY2CzBxICSfOF.wvxEZFWogfXvQE7pbCGmUjloTd9LZHf4f9IDtUwKbvW4psCTBRri_kb29eSr9dvCWVkOWe00IrVNxYFE5Kg; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=1;i=?0,cf-chb=(252;u=3;i=?0 6673;u=5;i=?0 96840;u=6;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: webp_bigger\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9ede093b3d6fb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":165531,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 600x200, components 3","md5":"6941ff6df96f27b67cf150d9bb1b7aa2","sha1":"da0b95a60ec83fcdc4e20294e33ef701f2edbf3e","sha256":"d1f658062d02718f44bdf0c8de0b7edc5e29425c3b204b12b59523bda3660296","sha512":"a2a30d4e158a551f65c7cdf2c9e5f5047b3a27de0f782016a34d490bac648356f70c5cd72ac146afe1bf930f98998def544af06ae966149f8c54cdeb8d4e23ed","ssdeep":"3072:8bMw4tFSI5BUuxKsN8M159QGt/olKZ3lhtjgQQYcPypPy3hfx9PzzB6KxsBuQlLA:8QhJ1zQGtRl31QH++fbpsBzop","tlshash":"b5f322382e02ca3c398671c558850b5e2d53fd52bbe79320a87ebf07b057297a6f1749","first_seen":"2026-04-11T10:59:00.076146Z","last_seen":"2026-04-17T21:07:33.916504Z","times_seen":66,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:04:00.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/js/twk-chunk-2d0c8092.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 20:04:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 10:58:15 GMT\r\netag: W/\"f816e5bfd3790278425cd60813fcc4b8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 119122\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ede0950ace0b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5261,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5261), with no line terminators","md5":"f816e5bfd3790278425cd60813fcc4b8","sha1":"fcfd53bd9a7010e6fc539758a716299a9bdd83a4","sha256":"73c1b4ba7489c2c2192d08c46ad8d025fa333c4fb7cdefe79fb6055e802b84a0","sha512":"6d172889ca4858f4290501523bb56ef2e669c4cbc90d0f6334d176399ed4a523cad9a79a1f033935f20e80ef298a1053b702cf4540ddda9b0fdd5b1cf3fc7376","ssdeep":"96:zNC9Hqt7pEma7hY/rcKIJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYyLRIvgx43nVY","tlshash":"f1b1859af247b45ac156225150ef3b1df33a281ca61ccdc4a66565f218784cba077f39","first_seen":"2026-04-16T11:08:25.273523Z","last_seen":"2026-04-17T22:40:53.189157Z","times_seen":424,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-pt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-pt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Apr 2025 06:39:54 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=lx4_DKHx87X3fp9438VT.XWV86AxnSJs1lYWQTQWDjI-1776456237.236694-1.0.1.1-n7WmERz4KJXpJsry3i8UAnEaZ5jCcjn.HR_8czh05D2TNWDCr5aZyUxtk51eI9uhxwp8Kmu0uaNrGcC44OFbppPSlzw97bMl8hmbNy7HCqe.9TXlIZ1PQphcOKdqnbDU; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2786\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcd3b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf2e40a6c2bbd9b99547276f714a38b","sha1":"1504aae0b4185bd4f9a0eaae10c6bdd6c652d33b","sha256":"a4ace4b72b9e31666a708b47beb2c453b100fc613ff2c2da2d76693c7dac83d8","sha512":"d8b60b6158fc47b6fb606abb69cadc5bccb2a4e8cb482592b0d38c76c611e434b4c301cb78476a1f80c3c7de7e95abdc504ba7ff3e8cb460ac5777eaa1cb25c9","ssdeep":"","tlshash":"ec31c8d9ba4b2d5f027bb5bf23df5aa221c564376559430140a1668a3d8549332433b3","first_seen":"2025-05-04T18:37:36.957474Z","last_seen":"2026-04-17T21:07:33.944385Z","times_seen":1781,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sabung-ws.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //sabung-ws.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1366\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Jul 2023 07:34:01 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=8e3gJ.E8g1tYKN5tmzUrX8DYFh1E9ylNv7eZfg2rh5k-1776456237.2530785-1.0.1.1-rdK_s7JN01TtppNAaN6_B4m8QgSE6k_Et.BrmuQGKNuchBw1yJhw8UqmHUxqKjtVIWFvvnUfJ2BnbkLQSKxQeWQ3OOYpRRde5_dhSLvoI5irrCAULPTUk7fSUr67rl94; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2970\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 5903\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093acd04b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1366,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"12e10125b7a65d74f94467a847dce8bc","sha1":"c67d4b17bc3162371c2c2329209bbd39d6f7cb95","sha256":"e86efe377195faa9e5f5709ca33a5bfaea418399ec78379d41d34c723a3d3060","sha512":"311f0626f696dff522740af39c1d9aa57ea4b1c569d7614c363493fe0839de04e26ab6bb84c17360e3a015eaca90196d540f02221c47c5ceb281004d12cb205f","ssdeep":"","tlshash":"e92108b7a374c3b2902892a8508bc68c804d1bca5aad0178fd7b4cd034780dc5d8a9db","first_seen":"2023-07-14T08:22:56Z","last_seen":"2026-04-17T21:07:33.976077Z","times_seen":2491,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:59.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 16 Apr 2026 10:58:15 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9ede0946dbfda41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-04-17T22:30:24.767635Z","times_seen":49365,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-17T20:03:56.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"AMP","description":"AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.","website":"https://www.amp.dev","common_platform_enumeration":"","icon":"Accelerated-Mobile-Pages.svg","categories":["JavaScript frameworks"]},{"name":"Bootstrap:3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":163150,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (414), with CRLF, LF line terminators","md5":"2c06172d7e0a57a8c40d091d027c229f","sha1":"95a3aedf49ebc22ba5e55eafddee54b5b8d8da97","sha256":"3fbab418ead91da40a1669a5f4fc62939825486113624a5328091ad5fc4dd8d4","sha512":"83ddd7714409bf619f44e8de36cc57ae5e2066d31eef296a50eee03f2146fd0fe9e2eb50d430c1fa1570986eb32c3b2ee455d62a31070eb3dc87a9636e690137","ssdeep":"1536:UrhJr1hwwxziIDU431K8huZMF9Wrg4Y5gbR7qUpOs46KrHK+0CV:UDRZkCGY5g97qUpOs46KrHK+l","tlshash":"5ef34f2144e1246341b3e1e49eb25b1afe969207cb0f8a0476fd1b871ff3e55cd636a8","first_seen":"2026-04-17T20:04:34.025333Z","last_seen":"2026-04-17T20:04:34.025333Z","times_seen":1,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-mg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-mg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1092\r\nserver: cloudflare\r\nlast-modified: Tue, 15 Mar 2022 06:24:42 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=xeRzyEMQ1X7CHBQnSHKsLJtgWmikDwnY4dWideJVAcw-1776456237.2342103-1.0.1.1-6S73vshPe_ftE6W263lrGGjaoFB5HXg35JyaehSV3_ZAYNvEeFl6Ew9QcMNKtuh4_sKtetClKW6HX40UYoKXZSUA35oiZLOFWJoY8qSUQsQDA_QEf726DvE5XA0n3q8i; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=4064\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abccdb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab217824849c8bc2f05240458ef55574","sha1":"06b015108c8fc22469d8e5a4c371e6d05c04b624","sha256":"326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72","sha512":"85738d45d8f938d949662c26377b9a050c906b83b9013a1b0f5c070526ff287272a1e8ee640aa568682ddd3713cf06980f1f1bfc42acb7fc79c42df545e84005","ssdeep":"","tlshash":"3011b66ab8162169cca0c426b6bf9ac0fd1085411b0b7decbfdc4205db936b6646112f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:33.931731Z","times_seen":2508,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-hks.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //interactive-hks.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1132\r\nserver: cloudflare\r\nlast-modified: Tue, 15 Apr 2025 09:02:35 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=6maoMREbKHN1.txbtW6GziHUmFRq2ntPhW6d29Cn.mg-1776456237.2597218-1.0.1.1-qDmZGYryXlCq3gduXgU0cRPVE4b508pwa4Y9xGNhcFa_7plQzUs5cOxdv8HFp8Bf9B0CLy6BDLwvmycbfAwNs1okSLf6bABfVcw.DlIyDWxcYsB_RjpvDWPvKmsnWl.x; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=1967\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093add12b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1132,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6600701766dedded2849ef673259f328","sha1":"12291bcde6d44cfeb812fde9451ffc7dcbafcf1c","sha256":"4089ec78c57a80637a24478bd1f0516324b1aa2634f23d51ee6794148dbe6487","sha512":"79e895659963d6c56749bdb32a13c0a626bfe8fd2897aa646102995d9bb17888679d7dacedbe7f461f3b13698b987f7a66d688f2e57fe96fea5cb7afe6944695","ssdeep":"","tlshash":"c121c630562add1c7c5f6f371ab6b44da74052005ba9cfb2a1e3401b013a2f5994a3d2","first_seen":"2025-02-03T20:11:49.968534Z","last_seen":"2026-04-17T21:07:33.932672Z","times_seen":1926,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/images/upload-Slides-20231025104540.jpg","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /images/upload-Slides-20231025104540.jpg HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 200179\r\nserver: cloudflare\r\nlast-modified: Thu, 14 Nov 2024 04:58:26 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t8Scths05gQZCwBgFssyyFMO%2BBejlycdX089xZAlzl1GD%2BZ5z0O0WreWSYFQX218r9H9lygL7bvkbPWq%2FHNkdxNP3WVlUf34fPGEbF2wnzT%2BtzMxmKe%2FZaVtQeD8HnCWKqMTyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ede093adfd25687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200179,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2023:10:25 10:41:17], baseline, precision 8, 1900x380, components 3","md5":"6a45dbdf8a6c2ed0400c6fb04ef88c09","sha1":"341f96b35b11e589808a95bc5bb476ef30dac0e7","sha256":"a7adae4d74d5423179691a8ce01737acea69c55368b5a9d489b35aed106fa423","sha512":"eeff30c483dab6bcb9d1eeff1f833704a78e683d797ffa5a7d11d2e3599e08a924a35f5b209207c83a7b42a793458a466717480241b16b9e4cee49ea3aa1490a","ssdeep":"6144:lMPSOFJunIqMYYSfqDPnAk+dJfcTKwhQgkZcWt5:VM1AHVyKwdnu5","tlshash":"8f1402316b295df0c9ea34734a51c956e3708fc40357baf2fe2d3a983b59e910c2985e","first_seen":"2025-07-11T00:04:02.108182Z","last_seen":"2026-04-17T20:04:34.027243Z","times_seen":3,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":356,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/images/upload-Slides-20210418180053.jpg","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /images/upload-Slides-20210418180053.jpg HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 169722\r\nserver: cloudflare\r\nlast-modified: Thu, 14 Nov 2024 04:58:26 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HyFDkgPdKnAInJde6GxAC4cJ6LcANU8jfAdp3CoZL6TzK3kODChKGh%2FnmzZrnpCzQCDJeDMHu93GBMpbpRF2AvLaSCM3lEi%2B2cwuDx8Ab2sCPiSw%2F%2F8fBrkPj97UDc6ihL7FSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ede093b18265687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":169722,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=3, software=Adobe Photoshop CS6 (Windows), datetime=2021:04:18 17:58:00], progressive, precision 8, 1900x380, components 3","md5":"1a392ff90d4a49d777801d5e9d30fed2","sha1":"231860addb7a9dae20a2dfd8ded21f83373b7ff3","sha256":"66d16962d6bb5b05432f97fa022cc2c71cdaab7916f430d927b61108ad4dc1a6","sha512":"6045b7ca2f04727f51a7bc325a7d9e4cf03ed4017059c6f29cdc54652bf3b1633f6af831d72d4452099a4c93c81a243c731ef9984cded7be5c477b0ce1de506a","ssdeep":"3072:EpsqLXcpCtFOE0yRfy+wFUD6XTKtJX1H3HTIoLqVtYzLgYB+63Tq+v7/:EpJXcpQOKK+wCuDKHToVtC9+63ua","tlshash":"d3f312ca7b4e4dabd1f14ab8cca4d246ca6179069a2b3d54b15c462c3f621c0cebfd35","first_seen":"2025-07-11T00:04:02.147493Z","last_seen":"2026-04-17T20:04:34.028946Z","times_seen":3,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":346,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//fish-sg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //fish-sg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1874\r\nserver: cloudflare\r\nlast-modified: Thu, 13 Apr 2023 12:41:47 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=gcqsPG2jc38UzRi7wU9E4aY4dXIGn59leY5DWRK6r54-1776456237.2522001-1.0.1.1-aLjX6lGvYSAC4qwwU5nXJhCE3zZ9Tnjfq8o4Bq1GSD5dxkRpQlnalJaTGTxabRmvWr76fAeT0_oaMxmeYRhdxggZ3hDjfw1Tim7j_nlyzqZ2i5.hXuyBCy28MG9da.xJ; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=5584\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 6153\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093acd02b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1874,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aee6fc0c74426166a631dc703dd18435","sha1":"b835716a43afeadc19565056eb7c3de94358e656","sha256":"3c0b4942ad2984422affeac2a3dd2bba982cf91623f2706e607dde9e935b5bdd","sha512":"6b723c0bd20156a0955b204ba50db0b7ea2f8f842fefcb20e7c182600f3960888310caa2c63550fb972c8a08944c95b5094d2c506e1e939a269bd4dbc9cf0f86","ssdeep":"","tlshash":"4331190d74e743ed67dfaed1389828548d20b00bda97b6c9a3587c0e41ae0a4c3e6040","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:33.899895Z","times_seen":2507,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/js/old/new2-webduo35.js?v=1776341694","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /js/old/new2-webduo35.js?v=1776341694 HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 16 Apr 2026 12:09:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7hZO%2FyWeT6EAmJAfC5HJkNmDcUJoiXuFT%2BRiZatDJJfto4UVEHqcKzPe6ubVkNM0jjwHSnJZyZPkhRJpivEJYxXg4KbdYYYpcLMhb3C1JMmdd%2FT8IzrQtGnVk8361OvHvPSQGw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ede093b48635687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50304,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"6af5416986901dd7b37ba69046784b62","sha1":"5a3f9ac02178eb4b32865c96423c6d0066a4157b","sha256":"5f0c1636204e2e3d782b702bdc80e3fb5fb0dc9c558b297d7b3ffcd3cf251b95","sha512":"188d418e51eaef94d230b55b7d2c358d0d6aa0ae230807d1831d8324ac8d6541ed3947927320c674242f02913f985cedc3f6dab513c47462b7a44f174fe3aaa7","ssdeep":"1536:+vHOgntNuMAdXhM8Q8Y8o8sAMgmMuYUQ6cX:WuGtNHuXhM8Q8Y8o8dMXMJULcX","tlshash":"37335349ff8c4a8f5677219c483b81c56b5c8835e10b4f06fe7c58987f8a61a7271a2f","first_seen":"2026-04-16T13:51:41.782666Z","last_seen":"2026-04-17T21:07:34.027031Z","times_seen":11,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/interactive.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icons/interactive.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 388\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:01 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=5yZWgCTtkB03p7Q7PTWYNL81nEwF_u3IllMtk1Narwk-1776456237.267572-1.0.1.1-dW6mKiF6TKJRL1IQYv1v2YHewcnuYG9VBWl2Yffovmu1yqHNhnKySuSJHL8.JAO051ZWHdyAMm9_OCgTUpzM9VDapxDna7wgGpWAWiWWUQ1TM_px4hd7RyOro7_Rh.g3; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=3417\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093aed31b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":388,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cc0dcea77b7295c691fe07673177a86","sha1":"666431536479501ce70432f76475b7dc09ae70df","sha256":"5b8992379e55caf367e94b27323cc0e64b656977881a2ec14c95e652dc527920","sha512":"c48c66c5b41ac16efe1ff90bc4375866f13303aa320f64feeb13cedd480bb4bba5422a6965bc2c81700de0953d0ff17e010e660ab5c993bf681be6388cec6315","ssdeep":"","tlshash":"9de0f1dcc6a89a046504a0d07633370dd3d2d586138dba926345f430122462dbe28cb0","first_seen":"2025-11-19T10:28:57.292064Z","last_seen":"2026-04-17T21:07:33.967472Z","times_seen":945,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/banner/mgl-25.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET /banner/mgl-25.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 550868\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 06:08:59 GMT\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=bQ7tQb.tdE8TC1VFIM7hSjVc1gOnU6TICol_jxcBaIU-1776456237.3132966-1.0.1.1-MSjKUoOU1e2CgUpixfQ..4CelLMCaLSgg966753jeok_f6jT08V25qqjmd30L4vfatNqx2sU3Xxc0ffFX_QR17cZnte56StpzmbcKYZmRkHzWfxNn1mN2TMtH7iz6Mf2; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\naccess-control-allow-origin: *\r\nvary: accept-encoding\r\npriority: u=1;i=?0,cf-chb=(266;u=4;i=?0 32894;u=5;i 260563;u=6;i)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: webp_bigger\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093b3d6bb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":550868,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1900x380, components 3","md5":"ab769c15a159db54c62032cb22713f63","sha1":"9e6cdfbc3f8d5160a1c7dcf3f53776beeecb6cc0","sha256":"5a2807b6fa68128afd106831bed45340bf065e6f191dcb596941823233156c82","sha512":"6afaed7a479a8c1ff6f108ed876c5ab59a090191001677a59249a4db65f57e2d24a80ed62b1fedc939c6e6fc70867c472c88c7fdc3cfcada2c8103d349dcaa21","ssdeep":"12288:rIPg11iqC6wABhN0CuCBY8nIZ7KCaz5xWLPWOqUEqWsf4E8klX:z1IDZCuCJ0s6DWOqif4ElX","tlshash":"21c42373cc7a75378690366b83147903504110eef5c5ae84acb2a639fb44b6ec1b6bbd","first_seen":"2026-03-31T12:23:49.58938Z","last_seen":"2026-04-17T21:07:34.011999Z","times_seen":158,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:59.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 16 Apr 2026 10:58:15 GMT\r\netag: W/\"1aab6f0ddbf491d568120416d37c4cd2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9ede0946ec05a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":241778,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"1aab6f0ddbf491d568120416d37c4cd2","sha1":"56dddf5e085467ef7376a4d7d1d4bdf89acf7a00","sha256":"732c202345e9f8f4303823ba9788c44d9043d60adde66a6f09004499f68e3ce5","sha512":"765f647c60a1381b42b05d1e8cf94913578465f029b87d71f4d5f44a85699156d9cebe9e0347bdb2ea1db6036bc6e9e62ae4c98350f7180cdaba47933b517b80","ssdeep":"3072:tiEIYgAYqhzhT9dyWFW1WfifM4fO5MxzjQi4IzxLMz9YZ15:tXyWFW1WKfM4fTxvZLMz9615","tlshash":"7634c69df186b47606a37130501f320af23a685ab45ac4d4f636d8e1bd789cea133f79","first_seen":"2026-04-16T11:08:25.336147Z","last_seen":"2026-04-17T22:40:53.098723Z","times_seen":454,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:04:00.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/js/twk-chunk-2d224aff.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 20:04:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 10:58:15 GMT\r\netag: W/\"51c9ec2d9f72ba62ae53d9289b01bd15\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 119123\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ede09508cd5b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18392,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18392), with no line terminators","md5":"51c9ec2d9f72ba62ae53d9289b01bd15","sha1":"3930e1d9d385c9949afa5afb9cfb047077d46797","sha256":"3ccc85c0b97f1c4345faf873849fc11c283b11c01a6041d8995a53189483f085","sha512":"5ef1c404691c96482baca330989e1b0b6eca4b9ce820ca16e7de95c09413916b38a23997abad354a55430c8df02b16c419c565dced8498d06bec18655938c6de","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kCFGN//h6LiJq:SzP2DfSLi8","tlshash":"96822ba6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","first_seen":"2026-04-16T11:08:25.265979Z","last_seen":"2026-04-17T22:40:53.091929Z","times_seen":424,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:04:00.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/js/twk-chunk-4fe9d5dd.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 20:04:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 10:58:15 GMT\r\netag: W/\"8249fafc9a9fbe0f75d4bef0aae2305a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 119122\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ede09509cdcb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1000), with no line terminators","md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-04-17T22:30:24.778052Z","times_seen":35219,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:59.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 16 Apr 2026 10:58:15 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\ncontent-encoding: br\r\ncf-ray: 9ede0946dbfaa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-17T22:30:24.799366Z","times_seen":75838,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/languages/id.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:04:00.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/languages/id.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ori-777play.space/\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 20:04:00 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 16 Apr 2026 10:58:16 GMT\r\netag: W/\"ad35cd0d91e8ff678d330f2ed8790ff8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ede094e1f69783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11666,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ad35cd0d91e8ff678d330f2ed8790ff8","sha1":"79f3c1122fed2d4993c0fd39f523f36d0b55f8a9","sha256":"f502994557ac91f4537debbb1ab1d906e42c3015e1b61dcc053961134109aa6f","sha512":"1fc89311be303140073d3fd771c5cc5eb7f44584b2a2e2644c77014a5c9751fbe14391022bbd22d71fc45e9190de161f0e10552ca7b1d183b6ed09c6d34d8647","ssdeep":"192:nh+odmEHzLjssiw0V3Y4nrbOm8d5x9hYt0kbbtgT1Q5ENxJF7:h+odlHsDw01Y4nrbD8l9hYSy0Q5mzx","tlshash":"173261b1cd655dd701815286b8ea265339a842931f08391e3b4c9bfc0f8fd9f66b636c","first_seen":"2025-06-19T05:28:43.717583Z","last_seen":"2026-04-17T20:04:34.035381Z","times_seen":1085,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:04:00.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/js/twk-chunk-7941cc06.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 20:04:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 10:58:15 GMT\r\netag: W/\"09a6b2a4fc1400ec37c1115e6aa1670f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 119122\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ede09509cdeb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53530,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53411)","md5":"09a6b2a4fc1400ec37c1115e6aa1670f","sha1":"d703fbc76276de75b56fad5c189fb663146d116b","sha256":"59147272a66366aa00b1f3771a23f360ee90c3bcac88ad31f59d29562b2d3c28","sha512":"2af2fecb20cad761430bd295a3e8846ad7404f20c9610dc8e20010e4d941b9067a192e700a964b92fccd2289ae4a10eb0e2ae81db8323b49bc3c0543dfe0e457","ssdeep":"768:Vlxfu8+HYUmI+rTRWf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK43:xfurowf20UJWfO+Et7GZrC90k","tlshash":"a533c8c9b2d6f4258763632130af3006f27a4964a81dd155f334d9f6b9ece48a227f2d","first_seen":"2025-11-13T12:40:48.539817Z","last_seen":"2026-04-17T22:30:24.775337Z","times_seen":27334,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"vsb49.tawk.to/s/?k=69e2923063411febb57ea54c\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2MDIwNjVkMWMzMWM5MTE3Y2I3NmMwNzUiLCJ2aWQiOiI2MDIwNjVkMWMzMWM5MTE3Y2I3NmMwNzUtNmVzbTkxdW5LUW9NZFRvSWZKWHp6Iiwic2lkIjoiNjllMjkyMzA2MzQxMWZlYmI1N2VhNTRjIiwiaWF0IjoxNzc2NDU2MjQwLCJleHAiOjE3NzY0NTgwNDAsImp0aSI6IjQta0JubXg2cDNLeWlRMGNOTTJXdiJ9.AbTA81xhOFQoIAKqINGP3CV7BZdnxeM0OdU1RMw9nj2PIOkwB08rWv03a2v2biyVjKdFlgu2uYXuTi8DmRiDNQ\u0026EIO=3\u0026transport=websocket\u0026__t=PsT2mvM","fqdn":"vsb49.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:04:00.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /s/?k=69e2923063411febb57ea54c\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2MDIwNjVkMWMzMWM5MTE3Y2I3NmMwNzUiLCJ2aWQiOiI2MDIwNjVkMWMzMWM5MTE3Y2I3NmMwNzUtNmVzbTkxdW5LUW9NZFRvSWZKWHp6Iiwic2lkIjoiNjllMjkyMzA2MzQxMWZlYmI1N2VhNTRjIiwiaWF0IjoxNzc2NDU2MjQwLCJleHAiOjE3NzY0NTgwNDAsImp0aSI6IjQta0JubXg2cDNLeWlRMGNOTTJXdiJ9.AbTA81xhOFQoIAKqINGP3CV7BZdnxeM0OdU1RMw9nj2PIOkwB08rWv03a2v2biyVjKdFlgu2uYXuTi8DmRiDNQ\u0026EIO=3\u0026transport=websocket\u0026__t=PsT2mvM HTTP/1.1\r\nHost: vsb49.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ori-777play.space\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: zds6J5hNs9LAWYhTFvq+eA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 17 Apr 2026 20:04:01 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: OVSDyaTd+/1k2WD6vrm9R8aJIxM=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nStrict-Transport-Security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: 9ede09510ede56c7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T22:23:08.127138Z","times_seen":13876769,"resource_available":true,"data":null}},"time_used":638,"timings":{"blocked":-1,"dns":17,"connect":17,"send":0,"wait":587,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-mg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-mg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1092\r\nserver: cloudflare\r\nlast-modified: Tue, 15 Mar 2022 06:24:43 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=p5s5JqlYvUH2_Z15VN3ZnTXnhrFL1Sqtvkts9ZmLYlI-1776456237.241918-1.0.1.1-yX3by2ULAyElkP4UBbfuhT2oojVpyMFZuGPfV8pDILOevCY5JmgpF3M3GBDI0KZjqQMRVpTKlXr.3tgmNDO7Bf0_PQRqXD4VrsyVLoFeWGrn6_FdnU.6_qqkBoLzIcz9; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=4064\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abce3b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1092,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab217824849c8bc2f05240458ef55574","sha1":"06b015108c8fc22469d8e5a4c371e6d05c04b624","sha256":"326039e01fe95c632ec94f34f39b85e61715f2a5abcdb555d937ec140574aa72","sha512":"85738d45d8f938d949662c26377b9a050c906b83b9013a1b0f5c070526ff287272a1e8ee640aa568682ddd3713cf06980f1f1bfc42acb7fc79c42df545e84005","ssdeep":"","tlshash":"3011b66ab8162169cca0c426b6bf9ac0fd1085411b0b7decbfdc4205db936b6646112f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:33.931731Z","times_seen":2508,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-gmn.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //interactive-gmn.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1766\r\nserver: cloudflare\r\nlast-modified: Mon, 11 Mar 2024 04:30:34 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=ZPQbVSZumRVC6t0joExRAsRNc_0PwSjcyFIGtG_wcKA-1776456237.2575374-1.0.1.1-ZJF027BNebSd4dha2vyz7HEXdkWG5ZYysXiX740DdYCs_mxMkg9pvsiLObegptXYY7u17CM2709XLynSCFszzjIZHis1WMhptKQuZt38JDg2dKSz69O_1WtztQM0_ZmX; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=4417\r\nvary: accept, accept-encoding\r\nage: 6043\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093add0bb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1766,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f89632ca3f4d9915c5e398c5511037bd","sha1":"c89176559445f60316d818d55a5a0b24161303a3","sha256":"35ac284ee8ca72f42f9f5fcb5022cf71af19b3b42a02c07c5dccc58ee4bc12bc","sha512":"6a6d96f23fc82a623adad91e1138a335b67b67c92827c3f9dad04bc762ab06ed42b3d598ad4566c5d714171dc31bbf9b2822a0f929bbc5aa4fb3a79821e3904a","ssdeep":"","tlshash":"a631e91c3dc838288746ad953515635bc274579e306dd169b9c59b783e3c0b4de94220","first_seen":"2024-04-06T22:27:32Z","last_seen":"2026-04-17T21:07:33.991652Z","times_seen":2422,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/banner/5g-10rb.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET /banner/5g-10rb.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 309333\r\nserver: cloudflare\r\nlast-modified: Sat, 11 Apr 2026 08:12:02 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=N8vecv31Cu9HK8vndTYA4vOgNclwZRtVRp12ipzP1d8-1776456237.3118498-1.0.1.1-pGcBddTLe4MOefdr5RsI0OYP9k5oEnZjAWsLWKCPQTqZShqqKYtYjHycW8R2r.CrZTFLB9MKSEjdjNaRxTXPWv.Hxtiegr2uU0Z2AIk6Bg0Pg3tTSv.ZtgTCYa9ahLzw; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: webp_bigger\r\npriority: u=1;i=?0,cf-chb=(249;u=4;i=?0 31152;u=5;i 136462;u=6;i)\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9ede093b3d6ab51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309333,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 1900x380, components 3","md5":"d93224f8ba6ffde93565bd1c1649461b","sha1":"147371a6d02ac34eaefb757f21fd4da6722991f5","sha256":"dfca7aa627f6f3da03efffc41c3a74fd8fc46056b4fcad0c85c51b4c9ffb1dfe","sha512":"ec366b2f0552173cb6dc35962b4a394bfeb6261b7c7d1e6c5ac8ecbc8caea27538126bea56936850df5a23c7ae7f31eccfd560a0447b86c67a8ca7de132e85ec","ssdeep":"6144:Sd3WEwoxP5oxdPneG8MYAXXNi4VWU7IWX/xMGUs:SdNwoWf11Xdi4VW+Im/xMs","tlshash":"7f6423bc786a5d01bc28c4dd94a565360328388bd52ae39da94d329f1bc84f7190daff","first_seen":"2026-04-11T10:59:00.066796Z","last_seen":"2026-04-17T21:07:34.023727Z","times_seen":67,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:04:00.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 20:04:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Apr 2026 10:58:15 GMT\r\netag: W/\"af9830eef563b4df395870a483ce549c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 119122\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ede09510ce7b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36092,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36049)","md5":"af9830eef563b4df395870a483ce549c","sha1":"2c678a245c7b8984569447c9bbfe182583ef7e56","sha256":"5d919993a3fe6ec4c27ec6696b643900c02b95584a4a21a518eb8809edf12531","sha512":"16416617f0c79b40d196c1a7df699f1e01a130e3df75a4f437b4adfc04fa666ac7987d080bbfe759b849bd81860e6bab5b2af02356a8814f0dd1fa9a64b726d4","ssdeep":"384:uTTacuVZNgxYe4fbgL3w23U3xi7vxEbXR+ziLwH0Lg26/tFTiBB6TX3DYC8:yeyna+ziLwH0Lg261F2BBCX3DZ8","tlshash":"47f2bef1f4b700c8b363c122c3d5f67c6459b770ca86ce92f427666c49e16a63581abc","first_seen":"2025-05-21T12:18:34.219676Z","last_seen":"2026-04-17T22:30:24.768261Z","times_seen":35044,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/css/max-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:04:00.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/css/max-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 20:04:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Apr 2026 10:58:15 GMT\r\netag: W/\"7c8224daff490314bbee102edaf64029\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 119121\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ede09514cedb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100307,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7c8224daff490314bbee102edaf64029","sha1":"13aabbb4f10305443e0fbb19c55fd27c149828a6","sha256":"a3652c70ae4477871298cf7fec970ce38a1a5f26a814c06b72cbbafa9c6f3298","sha512":"4a1ac844d0cfc147baefde211336f72422efaaa9c92b4e3a150e434aa3bcd0ca3ab49c34aefca46bed94139738c01ec1af989beb50b48dc747faef0cb8a779b0","ssdeep":"1536:f/Uifm7kUdwddCri1iLc0Lg261F2BBCrikauV3cGiH27PNWE98MGfU0nPROpmi0U:xauVLmi0V0d+tKaK","tlshash":"dda399b2e56710cc7363c22692c1faac1029e370c757caa6f827767d4bc25963562f9c","first_seen":"2026-01-16T00:46:03.978063Z","last_seen":"2026-04-17T22:33:26.040762Z","times_seen":21146,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-prag.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-prag.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1564\r\nserver: cloudflare\r\nlast-modified: Tue, 16 Apr 2024 09:40:59 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=.wm9gHsIhZR8xa9OBPK5EdLpqPhSnOPar07mkEJUInU-1776456237.245722-1.0.1.1-HTDzWUzYwV_ptAts9LCVm3ah9T7oXFJJ7a4aFeX_gzc1YxZtYBhsjChjilEnG.ihbvBO57UXZ_PhrJfSh7HvlxqYzk2C3COE_0G5N19YwXI8Z8njdlGdkwADVNFE.kuS; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2903\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 6936\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcf3b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1564,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78e1cc3e477967eb0e5fd72c4c642afd","sha1":"8c76d2fe01ae98da934ab4e53f4d4fa1c5e9fe7e","sha256":"194f18fc0e595150274c827ae94ecdaa7aa01188b37b680007f3b439e3f4efff","sha512":"2c178de312d68b50b0656890955fdf98a5eab85e463d41853db28db02aa9ea02d3652de96e5e7a429671d208018435d418d5b7648aa3895f9d1a9b84d4ddeedf","ssdeep":"","tlshash":"7b312c2512bc1c0cf5c72298f6da5a3bf8b5b4a3f962c81404bc21d6629b8035344255","first_seen":"2024-04-18T12:05:46Z","last_seen":"2026-04-17T21:07:33.948968Z","times_seen":2445,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-jok.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-jok.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2000\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Dec 2019 05:38:14 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=w5iGulwfAJ7hDXknJEsl0bQ9yBJKCyAtmwzmhQVbfUQ-1776456237.2337735-1.0.1.1-Nf45UYNziDMJcclp7uICee5CC7Vtc0TWa9Vmg3hRz5wdgnyNetLSbmw560W7Eboq4xKURTtHgQJxFCBDviZenM54Cle.w_Ko2o9uFuX3xYYql78qgEATI_VgNg3zcrK7; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=7983\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(89;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abccbb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2000,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3d6ce73337d8098402370b95ce184d6","sha1":"f82824809e6fc6b5bc0696c7dce5942ab17abac5","sha256":"21cd86f323c17093d4d78ba1e98352a00c8459cb70d1135006cf1de90b0388b3","sha512":"447bcdd622151905e0d9085165a36f0d4db2045a0218684f9b5f26c7f30fbfc3e9718bc726fb5f0593b8fd88c1b43f2916efa6f6d1d4c34f199db271d148bf35","ssdeep":"","tlshash":"1841e461e62d124bb41fb12bde3322a15702c3ae74604523eaa84a30457ede1b05afb8","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:33.974226Z","times_seen":2507,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sabung-sv.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //sabung-sv.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 994\r\nserver: cloudflare\r\nlast-modified: Sat, 13 Sep 2025 09:16:27 GMT\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=Uc8qxks6CaN8DA0gCkfodLuhrx295TqIfw9F6MpKXDA-1776456237.253486-1.0.1.1-eIf10Xj2OeX8URgrLSoK9bXDTSvICYJeGdsvH89Pg_ZF0HKS_Ao1NcGVSPpSwrWOY.fo62FUTXMVlZe0.TwrwmVxg2EpNuz3teeqUbl2f898I6T9OayZc2kPOVI.1ISq; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\naccess-control-allow-origin: *\r\ncf-polished: ok, orig_size=1698\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093acd05b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":994,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"28ec208db2d7b9ab92a7def6285608b9","sha1":"cfcd270dbce51874a5b0cd4ebaa1bbdb5950423f","sha256":"1cf25e65aceed06d6fb6898f1f10c620b236bcf94676ee585d2ed8c258318db0","sha512":"be225647c983a5047d00ea048177332fa16493868ff5e4d8f6a66eb81bbc478ec674f689ab26684148ccd9f03150384403bc69929a0f8482e2950d1c07254630","ssdeep":"","tlshash":"4611a5a715386388fc32e548b241ed209d9c206fc161ce41b9e309cd8bc211c492b1aa","first_seen":"2025-09-13T17:11:51.504401Z","last_seen":"2026-04-17T21:07:34.027744Z","times_seen":1457,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/m/capimg.php?9643","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /m/capimg.php?9643 HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HGN8NF%2Bc4TNMlnKHDjtSiJKbodY%2Bq1blOdMDKee3p7wqfvkso%2FtASm3aYrhxL%2B0vYnz8gMlmlvDEWXJOngRFHR0OyrXbrCFksxECIodHg4IrIyPqnyijtBqxLlNmXO2uOxehdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ede093acfb75687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2552,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 44, 8-bit/color RGB, non-interlaced","md5":"1f44c6a91d7a93de423dadd6be7e9f76","sha1":"e1ad87547b62adbd11dc38dd443f80263d2e1e24","sha256":"3cb21c02737a3be74238b58c73c2a9471a38db9a304d068df87ddaee6fe9f6f3","sha512":"79932699239f55854b361e87efee657f10e196c67cfb30a59e5ebd7a4ae1dc554406590897a571adf9e70176cd6f506ef6034c32af4c5e90d93dfa45cb6a9823","ssdeep":"","tlshash":"f1513af602ec016ae6b930f52c5813c22819ee659f633034bdcb672c907e1969a33c0b","first_seen":"2026-04-17T20:04:34.04125Z","last_seen":"2026-04-17T20:04:34.04125Z","times_seen":1,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/kontak/whatsapp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET /kontak/whatsapp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 378\r\nserver: cloudflare\r\nlast-modified: Wed, 05 Feb 2025 10:50:46 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=OvkOLHXpGnB3bSy9NcEujGVSca190mNHNx9TdJ5HcEw-1776456237.3201427-1.0.1.1-6oOoZpxNWwY0HCJDSkn2_S4M538q8DGU2eVS6fZfkzdwPxhtGiV86eJMe5bWtpLrbPpR8zPdEbE0qDV8hEe95m3v5mpOforijGCTZMFc8JVEQ.RrBZ.B.PsPg7ZrxhTI; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=1628\r\nvary: accept, accept-encoding\r\nage: 6045\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093b3d75b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18d9883e1a072905361ca73d34a57734","sha1":"c9dcf63a7866cd530f7615bd220e7ce4e81aad0d","sha256":"a06f5509e0ed17a2901ee5d71717a549f53e66dbec7607e3944cb418c60688c5","sha512":"fb470bdc215ebaf74df39bba27c8887b99765385ebf31d4a06258c7f3ca92fa0084ff9dd647cdf0ec4bf7a461468754366a3cb6d18343b3214f8d7b23313a08b","ssdeep":"","tlshash":"43e0f1b81c50030a5df62d07a3100fac4b7905c55b56fb23a1964dd07100ce4483379d","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:34.018079Z","times_seen":1952,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-fgs.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-fgs.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1324\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Aug 2024 05:14:43 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=dkdQDf7bKc8mWn8.bHzCe0Mq6bAm8yLAsYXiR6QnLsU-1776456237.2346776-1.0.1.1-_SGvQGmUMWxReByFgaIKXUdap49wyBb6LZ58YXvyUoGURByORSX41TMazXteBlIYt3zwiY4wc2Nisnqmmu8CqSnDD0FoPXRchb0vuhVCTUJ3_Ug5n7Cje2Sn168aLfjR; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2957\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abccfb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1324,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0db329565ff7fa54709c6b982d143079","sha1":"86787749df4f0dac3c2aed2d7ed03c12d4e9f9cc","sha256":"a56b49bc68bd936efed2bb75c474cbff5aa6382bb4db26ea9ed393cd3a846b3a","sha512":"23e85ddefc5722b311bafcaf8bcf198dc28da94cf904129af1ce7795e2bdb38e6930feda2abf2d9ea1fdc2e8ae0d1b8bfe7abb7d0102db4366d3a65455b4bfe1","ssdeep":"","tlshash":"e421d5206bd3894c865fd608686ae401257b725a5d24fa7b0bfe16338f3f0608428919","first_seen":"2024-08-03T17:27:29Z","last_seen":"2026-04-17T21:07:34.016171Z","times_seen":2142,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0-alpha3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.0-alpha3\r\nx-jsd-version-type: version\r\netag: W/\"13ac2-jNeXExg3GrPRY3nfbPslSlxkn8o\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\nage: 821275\r\nx-served-by: cache-fra-etou8220161-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24077\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80578,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65292)","md5":"78c4cd0c84838bea16844c9f9ef24b83","sha1":"8cd7971318371ab3d16379df6cfb254a5c649fca","sha256":"ea8fe021a4ace4f6786fecc418f70b658fc2dc02d136e8fe5c6ab6b62a46d5d0","sha512":"bc80244dddc0af2f6bc1fd25adbf64222a722246af2a96069f2a29057b3a4a22df352cc0bc236fbd0bcac015795e56a0e0ef286696795399f86c7a04ac64318f","ssdeep":"1536:2Iif7R2qTTR2t4iYniNw+inrJuQolwxLBAF927wXtWJTI5TrtgK:gR2c7tLBW27wXtSTI5t","tlshash":"6573b7593254b4730ade85b68037420bf2265994b24b802cb5bcadde2a7dcc67277f7c","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-04-17T21:26:05.896289Z","times_seen":4399,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/oswald/v57/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 12248\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Apr 2026 21:36:54 GMT\r\nexpires: Sat, 10 Apr 2027 21:36:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 599225\r\nlast-modified: Wed, 10 Sep 2025 16:46:12 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12248,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 12248, version 1.0","md5":"b2a5bf57bad8445af7def71e2f49332a","sha1":"6614389ac1a58764b059d94e2f69c4e182569dd8","sha256":"e902b779e43944c300cf8ae5e4a1affa68cb8a823fd263dd2f479c4cdfbd213c","sha512":"517447cfe5fb1cdfb7700741a2f833bf2bf6b5cdb12ac38a5bfa60d1f630f42da28e05c121cc3ef1bd94cda8172f66ab9613ef18cabdc8b9803bdb3ea46ac628","ssdeep":"192:YqqOjETPdIkWeUa+UZ0eWWo1Cm6Uf3APPEMioaQ3+aZ0YMXFxfzUWEE0uZkSBIg6:Yq5jYjWeUaDiDom6EGZKYUc4kox6","tlshash":"3542b0f44c38691ae32108fc67ec857c0f11516ded1896a42de84f643aee3751772aad","first_seen":"2025-09-11T17:19:09.75806Z","last_seen":"2026-04-17T22:40:56.6776Z","times_seen":8676,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":155,"dns":2,"connect":9,"send":0,"wait":23,"receive":3,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/css/old/variable.css","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /css/old/variable.css HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:16 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v4cELqcSTa6yrTRNbHi1jmQQFWdfU7ul4IsEL%2BK%2F0d2RqBleFBZJgj9Vvpr%2FQGH35%2B1Xq6qkTK3M5tn8XE5JTpeuxV3%2BYdlB9jSkQeZPfn%2FjAJaBuD69aXe3q%2FMLC3JzBCYYNw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ede093a1edb5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":928,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ae5328ef8b69161bcfef314f9242715b","sha1":"3c738ba67d113bfd06bd99816fabcbd4af5c046f","sha256":"0201e0d85b7cd86ae9bbdfed466b52df0f3ee95d363a36cfc9630e3760554039","sha512":"592bd491ffde13970beb798f9d66be6265db0d1ea69c7d660f49dc93b675e08b506a16a266477de6154ba4e9dc9a8786b4d740b4e994a4b6cd7ef3b2e62036d1","ssdeep":"","tlshash":"24114f159097a8bc763fd5b267ea5b0be22c5d1ac80a3f4e70ec75e04ea12ac1077c64","first_seen":"2024-09-04T08:18:43Z","last_seen":"2026-04-17T21:07:34.005283Z","times_seen":1824,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-saba.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //sport-saba.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1770\r\nserver: cloudflare\r\nlast-modified: Mon, 19 Dec 2022 07:31:08 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=yDhTDEuc8u9irJk5dmJPWu.7mNE6hjg85sJmxa3ycSo-1776456237.249219-1.0.1.1-rD43YyNfzd9gTOx4OOw5I8Dlpbn2tJ_tXyJczfr5NzQ0cElOjQE1VPpMQ1tDYeCPBGGyeuDUASMjZZ6xckYEmwyUnTVZ_hvK1r2JPWqGwy.h8yfBHUfoXueb6gUPnkte; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=5247\r\nvary: accept, accept-encoding\r\nage: 6947\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcfdb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1770,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9dc335c8ab6468b47a49e492aa97af52","sha1":"e8982a717f2557a1242a1dfd4511ceec6b47cd70","sha256":"277b290785f86422c338396b72410c9dfb7f0672b608e6808f41365b3579f26f","sha512":"1fe4fd928f064b203b3f55039e8fe0a6f6b86084e50e2535b9d03e2a009b674ed638056c6145fcc9b99a3df4dd7b787b657f2396ff8dd56f8a0907d1a3dfcf29","ssdeep":"","tlshash":"7b31e9b9bf1f80f8493220554d34957afc9b950cd21f2d13d2ab1be4460f6aaae22cd5","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:33.987245Z","times_seen":2508,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/casino.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icons/casino.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 990\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:00 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=Kj1BBoj3B8nxvDJ4f1XMYI4s_c6BJvOtOlin.5VSCOU-1776456237.2662337-1.0.1.1-xhkUvQv1G54fXaWHUj670KLtB0kwTPF6E4YIs1Y7UKdnNk3xtqOvJKTwNTP.iEi9L7g8eCEggP_y9f1xm7kkIHKEWg6E0MBhnZOCLlfw221d6_ATAPshGRmL_yntkm2b; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=4290\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093aed29b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":990,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18d3f2a042f3a157da682adbb52f3040","sha1":"40066f35a2a29d4bafdcd05179e9f2c7af1666ea","sha256":"3c22945d0cbdf7368c5eaa30f26611147425df5c45d7303551b9ba9ddfc957eb","sha512":"0e7768bd55d719c646cdd57e7b0bb038c668142fcaf10d3d61d33b3d992ffea15a8f48f18404118d64cc3cf791f37ab6b8d0c4f044ca91a550ce0ef87fa807db","ssdeep":"","tlshash":"1011c8a98739c523e226cb39cf0c355a84a86385f031b0bf95c2790c70ea32b3b4c980","first_seen":"2025-11-19T10:28:57.226883Z","last_seen":"2026-04-17T21:07:33.973631Z","times_seen":946,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/assets/provider.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET /assets/provider.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 44146\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 08:21:08 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=nWu8CYEAYubmnoL7uB4Ix0y9LIixoonBnVBDJNIHYCw-1776456237.3182092-1.0.1.1-wLH.5ujmDA5mPojLhyo0eKFD4Laf14LENJ3jkqNF2SbKegOlE.nWaLS6hSrCqr1yt2aAU0KMKf6qyfmP9eOj_eJNj91jpt_6uqs_UD0JpuOdf1JHFHY60GOOyAGFV1XP; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=84967\r\npriority: u=4;i=?0,cf-chb=(74;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 7062\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093b3d72b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":44146,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"efb91e9005a7aa9e20d714c1a7644e7f","sha1":"3afc5d8c00a7ef9fbc15721030e867f28ae555fd","sha256":"a2fbb65fe2a3a82b38c68b6110b02af5c6dfd9a80cfadc1530b2e8f42ea05680","sha512":"3dc477400e56e6a2bafba3cd2cb9a978c5c2848e02667e1f467968d6c498f9a50320c3d74266ceaf9e10f995d088083e85f5443a7447760a8e8e345edfcb7c66","ssdeep":"768:Vny6nAA1aO74VHhEVquOKZcz4S2fUg2SCt3DB7qfmh/Sf6vs+ue3M49L1P9B7:5HAnXaqUQ4PCSKDVEm0f6vsLe3MezB7","tlshash":"fc13f1bc13b85076147dc21c0546afc7b8ba0d769f402d2b4e187a1b15a9b4e2eed9d1","first_seen":"2026-04-08T14:06:41.727008Z","last_seen":"2026-04-17T21:20:30.670504Z","times_seen":95,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=602065d1c31c9117cb76c075\u0026widgetId=1etv8rf92\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:59.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=602065d1c31c9117cb76c075\u0026widgetId=1etv8rf92\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ori-777play.space/\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-px50\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-91-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 17 Apr 2026 20:04:00 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9ede094b3eeb783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2300,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9ca01607625c718768e9307b0eac3c4b","sha1":"176c864cba02f81afba9161fd7a3df72ef84aadc","sha256":"d824e84d688fff8b4e5221df835e3d63fb71ffcde6a83dd14867af96d113aceb","sha512":"5d0f15c192dec924845ac37a74645136b90062b25d61b4e8e29f09413bdd1b66b01c2f4e672a1e11fd192a23bca40af1e6a0419873593bd3497ee92188316d1a","ssdeep":"","tlshash":"494133254915ad75b3cd826371da7b33ad3d9437d388290ce09c5d2893f769c6211b1b","first_seen":"2026-01-23T03:15:24.516083Z","last_seen":"2026-04-17T20:04:34.047004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":446,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/log-performance/v3","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:04:01.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"POST /log-performance/v3 HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ori-777play.space/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 94\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":94,"data":"{\"logData\":\"{\\\"socket\\\":677,\\\"register\\\":0,\\\"widget\\\":2547,\\\"script\\\":1576,\\\"download\\\":971}\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-z593\r\naccess-control-allow-origin: https://ori-777play.space\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Fri, 17 Apr 2026 20:04:01 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9ede0955cd15b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"fda44910deb1a460be4ac5d56d61d837","sha1":"f6d0c643351580307b2eaa6a7560e76965496bc7","sha256":"933b971c6388d594a23fa1559825db5bec8ade2db1240aa8fc9d0c684949e8c9","sha512":"57dda9aa7c29f960cd7948a4e4567844d3289fa729e9e388e7f4edcbdf16bf6a94536598b4f9ff8942849f1f96bd3c00bc24a75e748a36fbf2a145f63bf904c1","ssdeep":"","tlshash":"0e3000000000000000000000000000000000000000000000300000000000000000000c","first_seen":"2023-04-06T02:18:46Z","last_seen":"2026-04-17T22:30:24.779081Z","times_seen":34128,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-pp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-pp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1418\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Jun 2020 07:51:40 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=9055uS37PGrZ1eYnYFGPfV3fz53YcZfJXPQbaZgTybg-1776456237.2409384-1.0.1.1-6eaTBsMvl1tCzh201eDRfC83LytQQ25k93CBLvxvEv7k22Z_XDYCHaBaRN3l5YCHSdby0yTtQVOoLf8B7PsDjH5HCKnLvEMyUFbt3R3gHIxAqnYthKhBGDJ.3hw18jR8; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=7765\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abce1b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1418,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1f1aa38c5a91ca20b6bfdee9245eebc2","sha1":"5f00a7a39257fc368e3fcaaf0b923f6a9fd49bcf","sha256":"57d9d0b26be6a4ea6d8894ff8dab03ea2c4400155146d5380281f4a589966e65","sha512":"54a31f338389d1b99243da7023fb2f109640cf90887627d5dec60f156ddf296454eae20d4d8a056f6682d56d3f0c9eff3a1b5af2ef4756816d61cb43586567a8","ssdeep":"","tlshash":"6a21c6784526df623d88772113f97f39802f468d47e803762ff91891346d2b42260cb1","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:33.981527Z","times_seen":2507,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-tf.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //sport-tf.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1148\r\nserver: cloudflare\r\nlast-modified: Fri, 09 Jun 2023 05:12:11 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=7Nv7BtXUDaHn...xKNCF4RqNBqLV8oHkUmlQU9ScPVA-1776456237.2515244-1.0.1.1-6UzGeP0xkPRh1x0q.sjIscu7LKqLq6IxBpcODNxCm7P9JgsPmCrTef_XWmXAzcXFqbCEL2rNP4efd4vMKfoPiwzOm28PXPk583cyQbYdTHr39_lXj4cwfJZ82O0oLKln; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=2565\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 7037\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093acd00b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1148,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fc4fa9cc349b0cf768f45038d1246f19","sha1":"f85ab86fb81b010f37a04bc8f682fc3e85a3f7ea","sha256":"68baa1f93a0fe9e1e20f86d5793025f920a15bd1631e47abd62fa9e86a8372b2","sha512":"788a16cfd6ec571fa54b6b4c40e92e34a6a9c31e26dfc0a5a74be8737e5a5bd2d53e64209ab98ab06b4f07310cb4939944a91543025b735b5fb30b951fa97768","ssdeep":"","tlshash":"9621a7de2384721c89e178fcc241e538516ace87e5473a30d54b2850a5632936d6dbe5","first_seen":"2023-06-09T18:38:01Z","last_seen":"2026-04-17T21:07:33.86779Z","times_seen":2488,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/602065d1c31c9117cb76c075/1etv8rf92","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /602065d1c31c9117cb76c075/1etv8rf92 HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:59 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-69e0c09cf0a\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9ede09451aaca41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"62ef709451866442548043bb9b62a203","sha1":"c995404be464e58438b701fbfaa43326fb72deb1","sha256":"e4d7eafcaab843dcaff55330b4999a1943eb8110fddf8b42bf3ec34f95ea8da7","sha512":"1329b8cca58fda13d5c1d64c1cae88dd4ca807d65c268e6353d06bfc5cb675aef39140523dab17bbb15094dc332c9e2a266089e77362630a2250657e2ec04fdf","ssdeep":"","tlshash":"2e41b0e6af4f185bd2a410d80cbff90e787b21e745a858e257080c617265aad3b8dd2c","first_seen":"2026-04-17T20:04:34.049502Z","last_seen":"2026-04-17T20:04:34.049502Z","times_seen":1,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":36,"dns":2,"connect":4,"send":0,"wait":156,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:04:00.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/js/twk-chunk-2d0d2b7c.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 20:04:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 10:58:15 GMT\r\netag: W/\"ecc9e5cf090bf5602a01763e2895acad\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 119123\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ede09508cd4b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10938), with no line terminators","md5":"ecc9e5cf090bf5602a01763e2895acad","sha1":"1d07eaeecb0a31f0d95363694e803282518f81a3","sha256":"1cb6c04d780fb838f64fe8bad72bbc16ff24e2466f9ba3123471321f8342cc0a","sha512":"9ace38dcdfd09222ce1f2536d8e4acc781b0055d6ae35486922b86baa540befc98bd9a5bc67bb00b0ef09b9da16ec97b1fe3b2b676b1403cde8eb2c13981870b","ssdeep":"192:0CFny7CpmxwbZlR1cwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mChZlRNr40v0GF/LvV4hwsR","tlshash":"073295b7e0a1107ea316871c506fa610f61f6c8ab2161da6b67ab46f900ddcfc065f7c","first_seen":"2025-11-28T06:07:28.918411Z","last_seen":"2026-04-17T22:33:26.070493Z","times_seen":25657,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/log-performance/v3","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:04:01.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"OPTIONS /log-performance/v3 HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://ori-777play.space/\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-6n1g\r\naccess-control-allow-origin: https://ori-777play.space\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Fri, 17 Apr 2026 20:04:01 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9ede0954cd09b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T22:23:08.127138Z","times_seen":13876769,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.0-alpha3\r\nx-jsd-version-type: version\r\netag: W/\"38cf3-SvPX4VpqOAxsurukLprfMwtJ1Y8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\nage: 499058\r\nx-served-by: cache-fra-eddf8230134-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33068\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232691,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65335)","md5":"d603cfa239a34ac65af566681e7aa3e7","sha1":"4af3d7e15a6a380c6cbabba42e9adf330b49d58f","sha256":"16ee7f3d53462650bbd32e263c48c0ea759574fcf620c681ad719008912c461a","sha512":"8868c69b0226d541cd692bb088d15f077f87a734ff60b24c8983cace54045694fa1568b9adfa5bcab06e4cfb1e49c382581911b6cad121bad3cc9a50d3621a2c","ssdeep":"1536:Xa/tfXbf98fOdBfvO5wlP79y9A37onOHFsY/ElV6V6pz600I41r:itfL98fVnOHVI6V6pz600I41r","tlshash":"c33482d6f590317d9ca7c1499681fefd866fa985cb120aa6f003776847cabd30922dcc","first_seen":"2023-04-09T07:05:04Z","last_seen":"2026-04-17T21:26:05.91702Z","times_seen":3810,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":1,"connect":13,"send":0,"wait":15,"receive":4,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-sbo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //sport-sbo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1258\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Apr 2024 09:57:15 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=wZQuMKFelrZHwDa5RryqvBkEW7Up_jbKpEORVrB4dVI-1776456237.2494144-1.0.1.1-Dw8QDrHH.TW_uFlUS4LKlXj0yb6hhUpmAyMkFDlQCZFhFJpgVbte4kiPYbdSA9Res1.uFZJY4WBUUnJrDDF8KQ2d1vTt3Axi7dHR7szzcGRARA1G_jfvxsk9Gn49oUxi; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=2245\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 6153\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcfeb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ec313ad70ebf040f8a7f198d4b08f5fc","sha1":"6dd5e6b742b5b6f4ddfd36a56e31591702468320","sha256":"e7e3ff1ffc4a20c85261693b5e5fb017db4495990484037361699f2994938389","sha512":"d0ef2625a6b0df028d59dac949f08064bfce2f4d1d95802ad7425272d270e5c3f8afdadf031cdd3cc0018d666a91c7c8fd7483ee6dddfc906563bf2b2015fbc3","ssdeep":"","tlshash":"9321eab1c714d61df26c354c43df19445a3e9a4f6407e333ab93bf1143a03b93215552","first_seen":"2024-04-24T22:56:01Z","last_seen":"2026-04-17T21:07:33.90192Z","times_seen":2436,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/js/old/jquery-3.6.4.min.js","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /js/old/jquery-3.6.4.min.js HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:21 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SaweCxbeG2UlvhsjcVgMmYAJE9U2A3wrew6fQDNtBiWqc3VGT5%2F41l0ix2Y4eUmSyoGiNgfEiQATDh8ZXbQE9YykuOS1HheGzRycjJPUTjacBemDGQ39rp1uO69jZ7%2FITluA9w%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ede093a1ee65687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89795,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"76d953d1285b57743bb4f425423f6f9d","sha1":"520277b4df74ad21592d7c33657ce97ded65a4a2","sha256":"cf5e50b1ac962ec10dfba4424fd35a5de3ea28363160f3f5939e7e7741c3ae95","sha512":"6913f9128895022b08339049963616cb09bbc61bd759a45c3bf7cb6662854f0c3ef16d975758468c34cd607176c011d9c62f5fcb8196cba93d0b4b265760747e","ssdeep":"1536:VjjxXUHunxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBqUsuy8WnKdXwhLQvu:VeeIygP3fulzhsz8jlvaDioQ47GKf","tlshash":"5193f8ddb2c6702247a770ba007f510bf236199d684d8450f269d8e9bc78a4e827bf7d","first_seen":"2023-05-17T07:35:27Z","last_seen":"2026-04-17T21:07:34.019576Z","times_seen":2754,"resource_available":true,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":204,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//livechat.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //livechat.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 876\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Apr 2023 09:33:06 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=KSXIc5R0roBpq4U_KFdPLXRmvN_Zvq1zW0cfT9JgCzU-1776456237.2653155-1.0.1.1-WtqjY4wdLjXDON85xe2mimPG6YpqxPlqZTnJRCs_j9D70NDtNgxz8Mh03eiCFRgTo7Fsm5yRnT6rIKoaZeAgZbsJXO.jGnX7sFa1Dfeh09U2zlppMY0PYKe3Ezm7vTOI; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=1402\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093aed24b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":876,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3fd943c7ef4e87e7ffb66ae1d1ae3a1b","sha1":"ede68872809c0ff7a62a063dc889b961da200e8e","sha256":"8a8dbff878032e3ad32d7e087c77eb065b7ab5bce7f3956fc58d331bfe74f9a9","sha512":"5f9f21e0dd41194f02ed029a048a0e4c741b64d1e6ff0fce785f79864c2428a18424221e55dc0887068e0a4278bfd4daafa825ad5855c3f0f70ba01392e17c61","ssdeep":"","tlshash":"60116365970a4eec8283e8a68a1a09894f9920b2e45b295dd421e68bd4d74e6e02754c","first_seen":"2025-02-01T22:41:26.030981Z","last_seen":"2026-04-17T21:07:33.976632Z","times_seen":2022,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/sports.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icons/sports.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 648\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:50:59 GMT\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=TxD6WbFquPxnq25qnKyYxFZyI7d.8q1T1ki0DQPdP0c-1776456237.2665417-1.0.1.1-pZmfQB_oEJap66i3yC.oSBYGP2.MA7a7iQTDNXBjailwiiTfYYpZPOB2glV4R0ml2H4CDp0MwRFKkkqHL3qkF76Ma6DKsY20R5E0Jtp06UI1d4YoR6ZZYkt0IFhZF5dX; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\naccess-control-allow-origin: *\r\ncf-polished: ok, orig_size=3789\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093aed2ab51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":648,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d70a305bde0a2cd5afb3d14c5055235","sha1":"97b47a1a205c9c3759e2aa0e7d42a8eb8c94a691","sha256":"62675e8d3f1ecf4c407ec5d846e07f842347e69f44835c5612d23c61f0b59577","sha512":"7fdd2042c9efb3fcec6b93704328103112be80bf2e10030227ab1a5906ba6d30f4675b89f025d8186353a9e6a72ff3c99e3941ff9260d1e90a46012db530ca37","ssdeep":"","tlshash":"d2f0c280c300250f8aa41d8ca74ca42e4360ab82167c712e03832eb473ed10822b0270","first_seen":"2025-11-19T10:28:57.200422Z","last_seen":"2026-04-17T21:07:34.013672Z","times_seen":946,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/images/upload-Popup-20250712040113.jpg","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /images/upload-Popup-20250712040113.jpg HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 233079\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Jul 2025 21:01:13 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MC6s3Cq1XQmLASQKj9%2Flly8GupxHQUr3TSUzgUyl52PibBwc1stYizn8sbSMfKCaAwp3JUMFAquHJg%2FHrer%2B07CjRRFDwpeEQlnecT5ciQeJwp8hz3XMOdbwB5opfy6o5ZAUxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ede093b48605687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":233079,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2025:07:12 03:54:39], baseline, precision 8, 600x300, components 3","md5":"b446af484088445df9e39b07c607adfd","sha1":"bc13d4b6feba3852cd4566e8762e3d839e8beaec","sha256":"29b49c2937d74394be7a2b50cd5c1e520818b6838222485ef395c7e15c17a883","sha512":"bec4bb3531decca3f7becc697ccb0d61fd313a6f1e91972e7527fb47c767c086bbeb0d7a756c78d128ff0a7f6a6414755626ed03820df7819c38322a5f5028ef","ssdeep":"6144:QYPPYPdpL9W3e6iTByn54AV41/2RoNwu3YRuryB2H+MOZkU:QuPudpLqe6iE5HV41uRoNHYIYZkU","tlshash":"d634222e1bfb6ed4c2f847b694d0c7975a667f606207a2417c9c3e8af33926549023c7","first_seen":"2026-01-23T03:15:24.509832Z","last_seen":"2026-04-17T20:04:34.053516Z","times_seen":2,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":507,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/abel/v18/MwQ5bhbm2POE2V9BPQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/abel/v18/MwQ5bhbm2POE2V9BPQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 11 Apr 2026 14:58:10 GMT\r\nexpires: Sun, 11 Apr 2027 14:58:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 536748\r\nlast-modified: Tue, 19 Apr 2022 18:29:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9588, version 1.0","md5":"55d912c794126956bb1e8f41597c131f","sha1":"f7ade582dbe9d0efe97ae105cab313c6e45904d4","sha256":"8bea498aed7cc1366e8b966e467b98219c803107d728eab8a6c4c9b045def699","sha512":"e83f80f681e02894d4ea32f0829b6cf5d04ac2d8b66b4f9363d082e727d201d09f134a84efa27391c78cd61cc2b0b3b1650ace011e4e96b4a504a18df5b7485c","ssdeep":"192:QVZUvG+5fOvM9EHseAuFxuPoii+pw4Srov5nBbs2TpP+W31WAgu+VNne33/:QVEZgM6ICYS4JBbJlp1WY+VNen/","tlshash":"7812cfc4c0887700da1fba3a393c0f6b62ad6555e4e146664c004eaa66fe5f0e00d73e","first_seen":"2023-04-07T13:32:31Z","last_seen":"2026-04-17T21:07:34.034023Z","times_seen":6222,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":107,"dns":1,"connect":11,"send":0,"wait":23,"receive":2,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:59.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 16 Apr 2026 10:58:15 GMT\r\netag: W/\"b057293b718ae7060a9acc593ff83f67\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9ede0946ec01a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":324696,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-04-17T22:33:26.07601Z","times_seen":11825,"resource_available":true,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-nlc.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-nlc.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 774\r\nserver: cloudflare\r\nlast-modified: Tue, 12 Sep 2023 11:37:15 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=Lylb_.RHkI0ELS1Snkn4.k42TOB36lQVRPh_.LyaVEY-1776456237.2590277-1.0.1.1-5j_BY.wtq8NwkiCfzACRKJ5cBG8_f6D3c4etU6k_sAQOlPmR9b5WWeAuIV7_dLZjYDqXGGvgIwCSPadynx0EQXaByB40m542WD3i3ag7BqEs_E1fcmfRAyrypPwQsLnK; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=2880\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093add0fb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":774,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f4ae16030e39c50fe715acb250bc81e6","sha1":"df762228c672c2482bce767e507dc74a4689d238","sha256":"e9952f9e2cb2e5fee2a0d0f264d20279d98f115a0decf21dcd7cf1e9d674cc25","sha512":"deec0e6b366b45039d1413f81d5de62895b314de390178b82ea4416845176bd45b5c51e42d57ddb5e90b6ebd496589903bbfa4e210f06d7ec56a57576a74f216","ssdeep":"","tlshash":"6e01752112d154de08ad6dd7eb5adb2013c38b448433e9adfa73788a966c5b08265285","first_seen":"2023-09-16T14:18:22Z","last_seen":"2026-04-17T21:07:33.97841Z","times_seen":2435,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-opus.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-opus.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1330\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Aug 2022 10:55:33 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=bOPz4T1VAjdqgLHdBkGFa9g0n8PelvE5nJ9wf9M.FJI-1776456237.2441401-1.0.1.1-yyjEW.TjnVyAcN_UeZRNqz8zGfxGZ2g7ugW9w28CtDV16ORMj9KDwnxd5Sc0PLrUmqyygta3hsGMqFNZWqi0K3lIZKVqQAxrShFzO6d83N8J9DwXWxtPcsH3GXSwToEE; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=4303\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 6153\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcedb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1330,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ff58f7baf1903414b9e121fa194c01a0","sha1":"9686d2811e39d923e00d3573d187e84dda29fdba","sha256":"d68d2439ada8dcdb278433a33da32e2659f34ce90cc7c9023180bbd3dd92f54a","sha512":"a83b25ce5d697a2912ce51e8edd60e1d9f1385f2b85dfc10e69ae3b3bb006c8816d3cefb0e85846a85644b6e5d65ec4cc372f2383971d8ee9fdd4a9792ad0701","ssdeep":"","tlshash":"8221c874dbd1c52db42875508b966070006d50a63947e7603fa39f7d12920f547ff24f","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:33.986621Z","times_seen":2506,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/images/upload-Slides-20231025132537.jpg","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /images/upload-Slides-20231025132537.jpg HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 200561\r\nserver: cloudflare\r\nlast-modified: Thu, 14 Nov 2024 04:58:26 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p4ikfs0NIk7HK8FVhd60%2FrfOuXvIwc5xD3OdJZxEaZ823wsKRDCWdA08LuHNe9qy%2Fr6cwZpeJj%2Bg4NlNfepHtajhvZm1pK25%2F7rEUqFNxOIoO0yeXqoMLasATPJxqzEknFVDRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ede093adfd15687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200561,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Windows), datetime=2023:10:25 13:22:42], baseline, precision 8, 1900x380, components 3","md5":"8790417e76751243ac448b384e9cf844","sha1":"317fc297aee635d1e1b5af41495ca95b4b9920ec","sha256":"69ff09f66025072863b1388ada8d06f934ce514f43dafd8d025f3bdf911e4c7d","sha512":"8db55de3addc68cde922bc82df2b04d1faced156cc38c3aa0e0408cc135f38403c32f6c5daf370b5f1e6fd6e1c8e5cb7cddc79f471994276e443b4df4ce3ec42","ssdeep":"6144:/BmdqAQrCaRkTVttW6DLUhEcT4dQ1sldALK+:/BmArCt9FDLbO4Gjm+","tlshash":"491402327a240692edd27d335649cc2892716ee1129333a1fc6d2b1df79cfb22418a5f","first_seen":"2025-07-11T00:04:02.163124Z","last_seen":"2026-04-17T20:04:34.059844Z","times_seen":3,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":345,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:59.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://ori-777play.space/\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-pfd2\r\naccess-control-allow-origin: https://ori-777play.space\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Fri, 17 Apr 2026 20:04:00 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9ede094b5ef7783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T22:23:08.127138Z","times_seen":13876769,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":481,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icomoon/style.css","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icomoon/style.css HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 488\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 08:02:27 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nage: 6288\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\nset-cookie: __cf_bm=O5.aXf78DQqxi3m1LVKyHSycC0uRusnmvnFJY_eFWy4-1776456237.2329376-1.0.1.1-R1XJ43JNkWz25cutrRO5h10Bb3Jpqqa9YhvPWitNzw6iH_JXPkjoY_izJ0Wt4ut5_7p5_u5yH07tCKTkeMpG.XcA7c6s5giHJcIAZ6wLG6lYh2RquDEGdoB_Mox_VS2j; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncf-ray: 9ede093abcc8b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1247,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"fd841219e646258717d8c8c5ee8e1645","sha1":"3b11bf2731abad4ee4b4ed81923025aeee1779a9","sha256":"bd964175c358da3b2151572737f09a8b9b7a180b482ec1b379be8f05a23cfe81","sha512":"7854a76358116fb5eec3fde344bdafa933b20abf93bc324a0484a07188d16624c28e4146e573eb9c6d34041c4b04718385c5d67bae6f5f7ee54ab4a1c460ffe4","ssdeep":"","tlshash":"dc216dd0ecbd2851930194c833a73a20bf0c52159c4a6c9af7ab284cfff670592d679d","first_seen":"2025-11-19T12:27:30.570223Z","last_seen":"2026-04-17T21:07:33.952239Z","times_seen":944,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":29,"dns":6,"connect":4,"send":0,"wait":26,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-spad.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-spad.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1258\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Dec 2019 05:38:16 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=A16geOImWydT3LLnQK4lruvt4qIEVW.oicRGSXGMKoM-1776456237.248544-1.0.1.1-bjpF5XE9aebKGFg0tAK6QPQtj.VQTjENpXt4jrtxuMXkrMcmSc98eIamv.fELLMTquUrzZVftQ0PjpkYgRvZf5DdTuiwKWRDRkRF4rJMdm2V.QLPAF1Fozj6c2cz9bKI; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=4945\r\npriority: u=4;i=?0,cf-chb=(89;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcfab51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d6290e499ede13e741045d26dfbd95bf","sha1":"73a41f0d753bb0843be9bfb147e1999ced0e30d5","sha256":"ccdb75fdea9558a8454442831c45017f205cd8729bc2f0399b91e1fb2473cd89","sha512":"d298b607ea2d753ca7be21e5262482347db33424add9a27ac259675bcb197814fe2709b293e334c4a41cae6b178b8d010921f02444a1044788faa887368d290c","ssdeep":"","tlshash":"7421eabb74314115f4f37e1c9f757e0324c4c648f660d18876d259c2dad64402d4c36e","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:33.877676Z","times_seen":2509,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-sagaming.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-sagaming.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 810\r\nserver: cloudflare\r\nlast-modified: Wed, 29 Mar 2023 10:52:26 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=Vt4VAWUlH1CO6ZGRURANSS52p.YX8tigwmalpX6c71A-1776456237.243075-1.0.1.1-RZRdfkbqxdwaFfw5Eabl4EVtgW6sHSP9MmkibHq60nFGkt8D2LTjvZrk8EHeKMjxg2cVG.l2TtVJkD4sXdqMGBCCLu1gb05BpwlSG.YovDyksoKk4KDXFz._u6p_S3DW; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=1589\r\nvary: accept, accept-encoding\r\nage: 6210\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abce8b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":810,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"edf6fb693748c3b5b424fd6475014c9b","sha1":"c364c1f56ce3cd0cebb4ef30789dce88a4bc6b74","sha256":"0042c9b4af9d92d4f8823b8627445ec3a4c6282f31f048caac2d2f788815ba7d","sha512":"554854ed0a1ff2e89072eb8de3cf9d53eab3f8afd60de3ab6177b8338689ba82cf2c537c521d137caa7769914ac762c693ff9817886787f0027134069ca3300a","ssdeep":"","tlshash":"b301c5a970c8d59fe63fe0b9b10f3b039c8e47a516306f228eb0389443245530bc3803","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:34.026331Z","times_seen":2507,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-jl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //interactive-jl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1592\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 04:52:26 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=asTIOlWPxthBhT3bCVusFu_Jg7CZIx25SB7x4RKppDE-1776456237.2579653-1.0.1.1-UC4JGIGkevmJWjWERGRZRYXlqSHtTjoKpTPh.cp5Re.e6J1231Sa2WbjHanJdHOPmX3PdLG58TauwRyggieHfFMjmEbF5tj53D7THgtYedPIqZiZzl9JsTnwQrrpNws3; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=3284\r\nvary: accept, accept-encoding\r\nage: 6043\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093add0cb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47c5c52e0bc00c84f9b380658efcd1c8","sha1":"dcf1b5d9964abfa0485bb54a3ad0b50452ae4e54","sha256":"ba1abecfa157025ef708d23c2fcf8d59c8a869a32ce29f96e66486462ce3ae30","sha512":"0e10b9646f4d3b1148eb1e4ca399e8cc9cdf9f51a8bcccb6e1bf9b896cdbe306f893548919dbe0a63c6ae2b469e39e5cb5676123f6ef51c44a40da7fbbf306bf","ssdeep":"","tlshash":"2f310a2618c1497ea5b0e06af04e3224d68a04de52b95690ed7120e79245fbf5dc4701","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:33.887589Z","times_seen":2508,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-pg.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-pg.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1740\r\nserver: cloudflare\r\nlast-modified: Tue, 08 Jun 2021 09:18:38 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=M.O5y0XaayBT0Nq3ma.EYJq5IsRtWgolcXNOQN2C0d8-1776456237.2460163-1.0.1.1-vSrF52OKM1WquomNT1cqzaeYLN.PQJexFyZU5C5VYO7WB5LcXJ5QPGcKJdypKp.61iC4ntzLSZLbIuXzXuwr7c9w6EGG9Y5i_T.4Zf4to1AdcGFIz.CdXWHSeeWG3pEm; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=5084\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcf5b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1740,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"86ec152055228538f1a8f8943f179a97","sha1":"ef30830c693272695c7cf5f2ac12679c75a2db18","sha256":"a643c08a5d025958c4499731c62c3cc78663aa9c6bd2d567bbff38b4637b339b","sha512":"ae8080c64346011e314aff414514dffd14595c410f86ba018ef5da16cab2b1239b89a4b788dc24e9bffdc15d9d2679bb5753b420a0ed1bff138812ec744933df","ssdeep":"","tlshash":"09314d80628b9b5606fc60710230a4725d006ccc13f84a858d72af973147eb7ef9484b","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:33.950158Z","times_seen":2511,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//whatsapp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //whatsapp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2836\r\nserver: cloudflare\r\nlast-modified: Sat, 08 Feb 2025 05:00:03 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=XedtMXZHa.x2_8mZn5ue.b.sONK7Ss2h3qiQHKmxiIg-1776456237.2650466-1.0.1.1-QnDhzMXdmvKJcGX4uSFVUyMbJ_wjnNw.YZx516au7DMQqomTY4EwDGWMaq9Zm4sulPLKJAjaKOVaEy0qW6omvQq2BymqfUZKbZoO6xTr1yv1IoytpliFHRuc82_YBV_Z; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=3881\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093aed22b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"40e64453edc6a67b90ef4c57a48bc37b","sha1":"710b350b599a185717514a7e487819741d8c64c9","sha256":"4156ca22a91808f35d7fb2f49daf3a58db2e03489358b4998caf039210e28d27","sha512":"cdaf75fc547433774eb0c20ae8e35375ec0a3bc4fe1e5056b2fc5cc1210ecb6d215544c7d6a4a067bf3fbc656cfbcff56eafd9b5be1a8bf41026b2ac73b1133a","ssdeep":"","tlshash":"6c516be5d8f39ba8afbd0005dc3ecc1809b120810deb21079ecb03aa06871a4ba53c22","first_seen":"2025-02-07T22:02:30.786218Z","last_seen":"2026-04-17T21:20:30.65681Z","times_seen":1554,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:04:00.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/js/twk-chunk-3ea2c7ce.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 20:04:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 10:58:15 GMT\r\netag: W/\"52698c6dc96b5f2bd13e8f921334e398\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 119122\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ede09508cd9b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5504,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5496), with no line terminators","md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-04-17T22:30:24.777495Z","times_seen":27479,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/sabung.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icons/sabung.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 566\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:03 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=h7g8NAHlDBWpsrb2neScsDqaMXRB.6652p0agf5qT1E-1776456237.2671854-1.0.1.1-1.GSOsp4EqcqUmyovOC8u7D32xV7Th59_XI_WnSNz61ia17amDDcpiZQfeipfiDde3eWInzbERaXsk3t7blSqN8cvcVHnLqh1m67XOkMUgZeeZge29hFWEI0BecUFHDH; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-polished: ok, orig_size=3751\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093aed2fb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":566,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cabc944e32056660a317f51dcf4c8c70","sha1":"c2bcbfc855467f946dc5fa5b3b562e8895c7b4c6","sha256":"7969b5e6f41c00bb28d7882e001bc3859f49337dcfd9e3b2ab5209e63ebd92db","sha512":"cf590ece4a8161e48e395941c5046acdbea89c6fb8711599297aff86cce1d2617759b5b66e93c10734b4e33fdada0f24e3b126c23c3cec482170c66960d4b09b","ssdeep":"","tlshash":"f2f0418383f44326a600b0d457554504084d038610756b7a7f963c454635da8ee4430c","first_seen":"2025-11-19T10:28:57.237919Z","last_seen":"2026-04-17T21:07:33.935904Z","times_seen":946,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/images/transaksi.png","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /images/transaksi.png HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 218956\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 06:58:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j44Al90ESEYrkRZlNBr%2BdmW96NgXd19A0P5ykMvS4Txj7gufZYSPF4csKlkVXG9LCbHR0ANE3FyZlbRdexFpulQ138HXxn8SjmsrMpJK3Ze0C2Th3FUl80r4AwHW3zCDuuIRQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ede093b38505687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218956,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 400, 8-bit/color RGBA, non-interlaced","md5":"03ce22f06b6845b126003566c4b55a80","sha1":"b8c6630bf76a1e00e1d3d0f9a09b7111ae2c7b61","sha256":"30e1c5205987eb61c60d00f5826662814303555dbae1373a7dba34bd79c384d5","sha512":"a5d75c88c4cb340eb1c2dbab05873cddf2fe24d3b5e79c2c735fa0a868ea1e095374dec7604af778612c02acc5dbdc0b4872e6051f1d71feb8309cfbe6d78242","ssdeep":"6144:3V5YETujPZrC53dZePFe2+y7BYYvSOTEh:3VO5xu53dZyFeWJvSKM","tlshash":"54242342cd028f89f850bd35e1d8c796ec7ad7d935c9e1ae9221c4401fda89638eb58e","first_seen":"2025-11-19T10:28:57.311271Z","last_seen":"2026-04-17T20:04:34.065109Z","times_seen":806,"resource_available":false,"data":null}},"time_used":709,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":462,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/njmzRSF/whatsapp-logo-whatsapp.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Feb 2026 07:06:34 GMT","end":"Fri, 15 May 2026 07:06:33 GMT"},"fingerprint":{"sha1":"48:08:17:3C:24:BE:AF:E3:A7:15:95:2B:10:C7:81:6D:71:75:A1:79","sha256":"5C:C2:85:75:C7:FB:D5:BF:48:B2:53:D1:3F:41:4C:33:F4:A5:D7:7F:D0:00:DA:48:50:93:31:14:32:70:1F:0E"}}},"request":{"raw":"GET /njmzRSF/whatsapp-logo-whatsapp.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2048899\r\nlast-modified: Thu, 15 Jun 2023 10:46:21 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2048899,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 640 x 640","md5":"7d895953b2d97f615f3bf9efba9d7a5e","sha1":"beb9b147295e5fc36dc113209d40d508ceb60d35","sha256":"71e9ac16c3f9b75078117dcc6cd761d818e7c5e32fdd210a7a4cf0325d566696","sha512":"e364b389b6f5ae887dde2557d0092ab17960dde4d1a8c57172950be09bfc7c0891d40e6059ee157aaa4849dd06cfdff26ffdc27f783d47651ee9dfeff031a7db","ssdeep":"24576:bKbnoqHPGCMH2Qe6NMPQBgsixSNEBlK1ONamrqu3yzT:bKbPvfpQvSI2Cglwsamrqu3yX","tlshash":"0c25232fcc29decdf834aa3259970a9660f7bcdc15127ab36c7af46a338618c54507c9","first_seen":"2026-01-23T03:15:24.401794Z","last_seen":"2026-04-17T20:04:34.065606Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1311,"timings":{"blocked":22,"dns":0,"connect":23,"send":0,"wait":23,"receive":1174,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-pp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //interactive-pp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1564\r\nserver: cloudflare\r\nlast-modified: Tue, 10 Feb 2026 11:22:20 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=HKgn5QObJuXOJ6nHVKRPUYiaHf9U.nXQwf6QXJDBqt8-1776456237.2572482-1.0.1.1-vgayyAeEbyiTXnYtpwYgGY3QsFrlcEZPIMTbyJ8gEIfAzaLwINy84CeuivXKIfoBeyvdEyz_3J11rME.hyA009jlUvt7kyif0MO54AvHbwHyzLZUIMXeuw50Z9eviry7; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=2903\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 6370\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093add09b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1564,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"78e1cc3e477967eb0e5fd72c4c642afd","sha1":"8c76d2fe01ae98da934ab4e53f4d4fa1c5e9fe7e","sha256":"194f18fc0e595150274c827ae94ecdaa7aa01188b37b680007f3b439e3f4efff","sha512":"2c178de312d68b50b0656890955fdf98a5eab85e463d41853db28db02aa9ea02d3652de96e5e7a429671d208018435d418d5b7648aa3895f9d1a9b84d4ddeedf","ssdeep":"","tlshash":"7b312c2512bc1c0cf5c72298f6da5a3bf8b5b4a3f962c81404bc21d6629b8035344255","first_seen":"2024-04-18T12:05:46Z","last_seen":"2026-04-17T21:07:33.948968Z","times_seen":2445,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/images/upload-Slides-20231015074212.jpg","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /images/upload-Slides-20231015074212.jpg HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 442765\r\nserver: cloudflare\r\nlast-modified: Thu, 14 Nov 2024 04:58:26 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wfbvSxsQvb5sM5bu5LZeyr9itlMKE6OPMLDDJAriz4o8VYt4vvxvWydaL33XazafpyWAQUIpbnoFHRLOeg2SQ0IgXxTsDFN72qLW8EhVvyEKuzBWaEuomVNLXDjjmZubEz1nGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ede093adfd05687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":442765,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2023:10:14 19:34:09], baseline, precision 8, 1900x380, components 3","md5":"6bacecb4ffeab736258c9487cd01822e","sha1":"7aa0c5de45a9cd7d701a9e62fdffb40e186d62f9","sha256":"cafdeee1000dbec3f35530c4f7afcb285d9af2c75382f52b44cf4cdce9682a24","sha512":"dc071a0e6d22d2a0e3b508d9a53b5e0bdcd8f2c3aa67c89ac5035c1e10ba547344e5595dde5b546a7c0c891c9d1672e5cc9dcb6dbce3a4a1c326aa5c0efef927","ssdeep":"12288:mH3GDaDiyNUNpLkTayJ7ttmnQW8Txm2uX5G:mH3jDANJkTfCBSgX5G","tlshash":"f1942312e8834dd0e3d672b6f1d792e1ae531fbd1402d4f4b8aee5a4b3509492c9718e","first_seen":"2025-07-11T00:04:02.098401Z","last_seen":"2026-04-17T20:04:34.066526Z","times_seen":3,"resource_available":false,"data":null}},"time_used":879,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":619,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:59.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 16 Apr 2026 10:58:15 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\ncontent-encoding: br\r\ncf-ray: 9ede0946ec08a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-04-17T22:30:24.8039Z","times_seen":75879,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/js/old/jquery.marquee.min.js","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /js/old/jquery.marquee.min.js HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2B%2BU13wtr%2BBv5HLWXDieeN9G%2FropPSaGKHGshrU8DeYGTqxuyFZcsXzZ5GQiGqajD0V2thRvArjX8pJMJfNSvs4Zw%2Fs8%2F89bdA0j0FlOaoj2%2BZrj7f0OSBMk%2Bf8BCHBlDfIjUQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ede093a1eea5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9052,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1219)","md5":"fb33cf2aed11f9e6d82f325e3a59aeaa","sha1":"23269fefa9d4c96301289553b145f6cf2224dc5b","sha256":"98e6d279e0a953b3aed10af732b0144fac9ec784a386750259b6b03eb3f26d93","sha512":"547b353276af03a66bd61b1b4ae7a41bbf604c6c69be27da542a2a9473e9dc96095f5df9b7591e74f71a264cd69076b44353f9c1c104f7472cdbdea82bda1963","ssdeep":"96:zceMfHftw6RX2wUb6cJkLIoeUJZYfShCmxxAAFzYi0yBo3nNyJmmxfbgFlUOvhWX:zcFfHf5kJkLIoeUJB/N0yB0kbfb29Fm","tlshash":"a31220d2aa703194cb9703bf948b02864e72d931641d0d7fb4b38198be60648bb17f3b","first_seen":"2023-03-07T13:03:32Z","last_seen":"2026-04-17T21:50:38.542196Z","times_seen":491,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/k3bKhGL/1.gif","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.2","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Feb 2026 07:06:34 GMT","end":"Fri, 15 May 2026 07:06:33 GMT"},"fingerprint":{"sha1":"48:08:17:3C:24:BE:AF:E3:A7:15:95:2B:10:C7:81:6D:71:75:A1:79","sha256":"5C:C2:85:75:C7:FB:D5:BF:48:B2:53:D1:3F:41:4C:33:F4:A5:D7:7F:D0:00:DA:48:50:93:31:14:32:70:1F:0E"}}},"request":{"raw":"GET /k3bKhGL/1.gif HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/gif\r\ncontent-length: 465701\r\nlast-modified: Thu, 15 Jun 2023 10:34:32 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":465701,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 300 x 285","md5":"4c7a64ed6f369d353946741f7213e14c","sha1":"b77274966c96a7e73bddf6841791e273a03980dc","sha256":"1d2adb83d6b3f6827dadef49fa754825603b61cca01217f0f907fd6a866598fc","sha512":"ca7d2e9947aa5c398af865f387996adc95c7746c637e416b7af1454adead6ab0a189e1200a96da618c1f086bd578b58ae42a11f1de42c6e44fda7c455e5dee37","ssdeep":"12288:rWpJWWpJWWpJWWpNk+VH19OfglCh3u9qhfqhfqhfqlj:ip/p/p/pew12h+ohyhyhylj","tlshash":"4ca4125bc1b9c4cc24eb383afc82e6b57d1098deea88f3d3dc6564542955099deb2320","first_seen":"2023-08-15T17:22:55Z","last_seen":"2026-04-17T20:04:34.068474Z","times_seen":13,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":84,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-l22.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-l22.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1410\r\nserver: cloudflare\r\nlast-modified: Tue, 15 Apr 2025 05:37:33 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=5gJxCCXUmJhf2Hh300_m_ZdaScrFKXNxHSf3bXb8Tdg-1776456237.240142-1.0.1.1-30Ct8Yy3RvSRu6C2GJo_6MBy3KJp_85PYKvii1K.A28RnO6EZU0zWHG9If8CmtYwZfq.uZBqRl8pl_pKVGFW6HbBvPuM0kaepcZZv9JMSog0IEI63csafJfewrC.eSiZ; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2410\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcdfb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1410,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45b89f0c6420d854331da394e750ce79","sha1":"40b7d0ca3dbec643333db69e8418f851a84220e3","sha256":"8973ba339bd3e91614797a78d3bdd3b39851b72fea3ca7d361e5b57d667168da","sha512":"be63c0770d32b2909e12d918a576275d8b4ad5f10f30f3dfc0716996e07b3510df04a746a1624e7a51ec67b72b718ec1f956d46775324c00c614c1e49e9e9a5d","ssdeep":"","tlshash":"0421082b71acb6301ab0644531085eda9783b419f0846c11cbb178699bbce8ab6699f3","first_seen":"2025-04-15T12:52:35.808781Z","last_seen":"2026-04-17T21:07:33.971377Z","times_seen":1797,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/capimg.php","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /capimg.php HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bjHPpMhKHYspZ4H2yfadHScwarvoxsW4BOpeI3PSxa6TEFZGHhtJmgjJmoik95pf8EuOqAg0MKinjmi43acrrcZrQJpYrXtr4k7buAqBxh3JnOFKdyCbkKFPbkwb3FnRv5aoGQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ede093adfcc5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":814,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 30, 8-bit/color RGB, non-interlaced","md5":"f272b9beadffc8ebf715880e1506e3f7","sha1":"592967ebea03fae665b06766b40a1ce034a0035a","sha256":"d26ea2da1025910fc5d073dcda9a77328b00f76e4b4820a55f50778c489b2cb1","sha512":"9e136f622e74349656311a5a5ec455a8dbf9008d7092bacfd97cdb6e1ee9133ce0750d27f35c3a09632982397dc48e62ed3caa18f3daeaface1945d8b40fd5f5","ssdeep":"","tlshash":"950186d7b320c77546e6374972a6b428a00f4c4c266a6f01a0d1cc822eb71c100af47b","first_seen":"2026-04-17T20:04:34.06958Z","last_seen":"2026-04-17T20:04:34.06958Z","times_seen":1,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/images/upload-Slides-20210418180036.jpg","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /images/upload-Slides-20210418180036.jpg HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 194631\r\nserver: cloudflare\r\nlast-modified: Thu, 14 Nov 2024 04:58:26 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=plDRXt%2BHMPaS0O2YyAJ5o6mdQlfq31EYD5AOud8k%2FBM67mUtmshYIBrkNvfSuvpqsPKNYa%2BidkaMWcmD5oZBuOcSzI9wJ%2F7pVnKmVm3%2FFioy8y49%2BfyX3pX%2BtDJapnBCka5uFw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ede093b081c5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194631,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=3, software=Adobe Photoshop CS6 (Windows), datetime=2021:04:18 17:57:44], progressive, precision 8, 1900x380, components 3","md5":"79d6bf26ae2e83d6da2e5293000d9d22","sha1":"47dcaca0994ccac267cde4e7aaaa8ddfbb93cdee","sha256":"f7b845368cd41fc8250e6cb463a3deb860a7e74dc6889bb1632fbee8a6ebd498","sha512":"945e44ad6a59b0ae1fdceb75acb0c022d527c62705df678ac954a3375c4215739528d47c9fd84c143a459a77807db6f5dc72961cd4bbd2a18c7dbe85731835de","ssdeep":"3072:1KzqKzavBUWgwLJulwIzFXc4EsM6AWtZievIbr+q5nKplt+NFdw3ZF/8TMUNTtK8:IffItIep6ATe0rTKpGFMZF/8TMUptt","tlshash":"b91412462109db99d3e2f430a5b2ef0b33b65457fa3a072074edce927f627a44a5d903","first_seen":"2025-07-11T00:04:02.074146Z","last_seen":"2026-04-17T20:04:34.070561Z","times_seen":3,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":343,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/assets/hubungi.png?11","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /assets/hubungi.png?11 HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 6150\r\nserver: cloudflare\r\nlast-modified: Thu, 14 Nov 2024 04:58:26 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sN91FKpERaWas2Ur5E0QWtSZXMtc2WJOzh4ORQI9kF88KqzRM2gZwxKnhF5znriX%2Bn4V2FwDaptV8UeDjNxXxxs0HrGget3b6BiWsR%2BNA0VCo0TbcCueNvrqMeI8nvFEocjOtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ede093b38585687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6150,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 246, 8-bit/color RGBA, non-interlaced","md5":"889fc3f6fa14cbe1ea3fd8dda586bf7e","sha1":"e340f2fcee7e827285172f2120d00ad05575b31e","sha256":"e2f56e54711945f441ae0191957d648fb18fde319e9d77866db44683bcc7e2c0","sha512":"52dcf0114b46be7e51c166003ff072eb7323e9eb7f9f98980a35059b8beafa002576a471cf78d7731fe39eca43b72ea99b18d4736e47c85586b8c296245160b0","ssdeep":"96:UrjNMBOTlR7KEbZAWl5RMs7dPX5QyrXtqmg+MCoMGvhH3yfO8P5Wn:q2Ba7KUGwPPX5Bxs8P58","tlshash":"b6c19ee5d9e1a7fccd2667fc9a1b7b3a42f20a71b80fc991d36ec8519e4620c40062d3","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:33.937151Z","times_seen":2950,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/css/old/new2-style.css?1776341694","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /css/old/new2-style.css?1776341694 HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 10:08:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tumVAJBGV%2FKiMvUM35Qy2RbHdnYg9W0xeAMF70y%2FMmWz0Qd0F4yU2jHfkM4zEZvIAJSkrAAjmEBbgDYcDOc%2F5FtU5fuW6Pt0fi%2By4hZaLxasD8HE6T0nM11ZBJMpxRpllSG6Zw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ede093a1edf5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19593,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"01af7e767be5b793b9def25cc5708367","sha1":"f5e928588d0ac5fc97ca65be366db7e5a6a0c375","sha256":"9ecca6a6a96bf6f13b2f733e8ee84c4f6868ecd00a76eb261133bfba42128fbe","sha512":"34ba7ffe63b61df1052c6fdfdc759abbb81b4cdd353d890f0891f449ab718be1b23c3fddf748604d0a8e4bf2f188d451888b759dcab1857e61eb2618ca852611","ssdeep":"192:WoVF+jJSouRa9q664vDL+TRl4y5UCUmQkGyMA+AHFtzTFB5SbbewonOlnUAdhwj+:Pf+gxwq6691fMcDKTVf9rA3v/JZKow","tlshash":"c392736dd512209a2633ebb4af750b19e7698023cb06626d3fdc62844ff22799161fdc","first_seen":"2025-11-19T10:28:57.246484Z","last_seen":"2026-04-17T21:07:33.913214Z","times_seen":940,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-jl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-jl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1592\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Apr 2023 04:57:42 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=JtzvGNP.o_rSglKkih2xlmfqkECZXTblBCy.b1Q45mo-1776456237.2462978-1.0.1.1-WlCt1lob4sHfvqA2NqRU2L8c_63nrLy9xO6JcL4kCIUB4of.tjN6Jb3IsojiAnO27lkVslM0a9BqJ72kmoy8iaODA.sECYrqf6j0vA1JWJ4ew5j07vhWW_mLvSp0dRox; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=3284\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcf6b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47c5c52e0bc00c84f9b380658efcd1c8","sha1":"dcf1b5d9964abfa0485bb54a3ad0b50452ae4e54","sha256":"ba1abecfa157025ef708d23c2fcf8d59c8a869a32ce29f96e66486462ce3ae30","sha512":"0e10b9646f4d3b1148eb1e4ca399e8cc9cdf9f51a8bcccb6e1bf9b896cdbe306f893548919dbe0a63c6ae2b469e39e5cb5676123f6ef51c44a40da7fbbf306bf","ssdeep":"","tlshash":"2f310a2618c1497ea5b0e06af04e3224d68a04de52b95690ed7120e79245fbf5dc4701","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:33.887589Z","times_seen":2508,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//sport-cmd.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //sport-cmd.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1426\r\nserver: cloudflare\r\nlast-modified: Wed, 25 Oct 2023 10:43:29 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=1ELwJ2YLS3tFKdkVb0TEp7msMq2ouLc.BD0sxaU3bdY-1776456237.251086-1.0.1.1-uiCxEuXJryrhJ9QkcN3JD8rnyr5VEaox4b3VMvysIO5jBR.NKI7VqLhiCPNKAIdwIdmA.NfuViOcqu6hHc4tcKwmcRcUgN1SY17H_v.S0Y4InKBrosHLpeVbcuC2N9S1; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2527\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093accffb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"82295774a82a60a2bdf65e81aa06d97d","sha1":"ef420e886ce432d2dad7afae92992400eed77aa5","sha256":"532c5913a005178af2df0eeee8f64033b4ea49287a7eeed73b16b10d82b1b142","sha512":"d3fc69268e8c0e28191a4d5b5e78e81dde311ae00c46fe7d9a34ca60ea4c00295a765ebfa5fe914e9aaaf83007d2550b6253793e54ac9d64f63c7393835ccf9d","ssdeep":"","tlshash":"aa21e679bef8a5f10d167314b27ce200596394841c49d7e880e37b108470a5236bc1f5","first_seen":"2023-11-27T08:55:50Z","last_seen":"2026-04-17T21:07:34.008404Z","times_seen":2427,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/slots.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icons/slots.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 700\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:03 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=_Lee4m.zyYsEm4F8DoQgQUMGNMysr214eKug9E2.lWA-1776456237.2659588-1.0.1.1-JX.KY1cUuEAVNtXjL1ZQfcykBL_V5RnTmkk2Nl1YGbxi72ay9ymM7iv2hkp0v9ThD72ATYKnf9Z0mMeCBaFNhtF3htmR5c6NAuM4kz6o6DG1GnohqJ16sNiHXswr8Bi6; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=3936\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093aed27b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":700,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"49004475ffe1ab21bd1d1845cf3c5bb2","sha1":"5f1b45dbf862fc3b31fcf2995a3d79c85db7e1a1","sha256":"bde4902504d927b3c8f18a0000db9dfd665f16757368d3e225e9c6dffb366203","sha512":"24376af88f7a418d0b2f6b56dd003515b34bb927d5a946171aa0e11690d5794bb41dc524994ce3a67bd5b90861098ebad29bbf565d262d215e4ddf7490577d67","ssdeep":"","tlshash":"440199f8a7e855c24830b90965600cbeccbfc75d3142ec0a27e154c531213e0e81038a","first_seen":"2025-11-19T10:28:57.236453Z","last_seen":"2026-04-17T21:07:34.006658Z","times_seen":945,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-hks.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-hks.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1132\r\nserver: cloudflare\r\nlast-modified: Mon, 03 Feb 2025 09:16:22 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=OHH1cZkd30fUS43o8k0byv4zAivqYgHl04_rVFWbTE4-1776456237.2352118-1.0.1.1-643EILkSex15eHRRwsrBYzB0.5iNa1NQt82W1efPM2pFcp5IvgtaO74P7lfFITxXlMvc10H3kTe6LB.UTMeT8V_kDrvro5MWdMTYYmLbJS7VJRTN5v.6q_e4H3hfWppN; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=1967\r\nvary: accept, accept-encoding\r\nage: 6767\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcd0b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1132,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6600701766dedded2849ef673259f328","sha1":"12291bcde6d44cfeb812fde9451ffc7dcbafcf1c","sha256":"4089ec78c57a80637a24478bd1f0516324b1aa2634f23d51ee6794148dbe6487","sha512":"79e895659963d6c56749bdb32a13c0a626bfe8fd2897aa646102995d9bb17888679d7dacedbe7f461f3b13698b987f7a66d688f2e57fe96fea5cb7afe6944695","ssdeep":"","tlshash":"c121c630562add1c7c5f6f371ab6b44da74052005ba9cfb2a1e3401b013a2f5994a3d2","first_seen":"2025-02-03T20:11:49.968534Z","last_seen":"2026-04-17T21:07:33.932672Z","times_seen":1926,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":29,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-av.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-av.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 590\r\nserver: cloudflare\r\nlast-modified: Sat, 04 Oct 2025 06:38:22 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=mlP3.Z5SHsIpTDqxT38y5dfjhICrUBCeAiMjY8r7DZc-1776456237.2372532-1.0.1.1-T1SxPTtUJfdDQwAlycoEOayiOH9WGVc7QDRQOyLzux61mn0QyHyx10o1nasNdHTwodC9UV20s4kfxjofbIOWcjV6pOT0S.E0kmbiP_SQtMKDc5mS12F3tjoRjRHEUcIe; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-polished: ok, orig_size=1284\r\nvary: accept, accept-encoding\r\nage: 6243\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcd7b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":590,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"76044fc8943ec031dc01d35bf3ce3b6d","sha1":"8f280e5e155b32963cc71c6aa00e9c9c32a54120","sha256":"1f5a41f74224cc8954664489b76cc5553cd0c8d5dde133cc48b62a8af296e40b","sha512":"1e2916804e5e220f70a2f39a2184b97a8a090b1f827abf8732f81d9ed49df99719709d4d19887d8a3fbf5c47c3f36dacff1a244dfe2fabcaa90b14920567927d","ssdeep":"","tlshash":"caf041c577bea8940a2674aec642aa473843244cc1818b56ddc394906d43955e286c8d","first_seen":"2025-01-07T08:32:27.13192Z","last_seen":"2026-04-17T21:07:34.017301Z","times_seen":1937,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-cmp.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-cmp.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 886\r\nserver: cloudflare\r\nlast-modified: Fri, 13 Feb 2026 06:48:05 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=VPR4wW3ZWDCTU4hNddziZteO8bAbswXTfeDGHa82y90-1776456237.2379727-1.0.1.1-IAa87E_3DSTYSspebFSX15Tf9Jc8X8YbtLSo0X_N.5f9Qu12SoO.EqcZH0MHkqKhv9BMpUgAYL9__bTyALvfeyuIEmP1wdeNXaJXLmFW1FNvapkMJ5dapguQ08JrJLOX; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=1995\r\nvary: accept, accept-encoding\r\nage: 6243\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcd8b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":886,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c6cb4315352cd82704bcaecbac64ccd7","sha1":"66af4e4de0848500ebc2641527e5ee8755febead","sha256":"67f9d63b2ae81ef3a719dda19901f66528e948c662a58cd2822d679918ade617","sha512":"da4a2f79032ebdc382aa5e20354502c9ca759b7e3820e85675ece4a2f809818d221251a2497b04ab025465cd1e6e65d5aa82367bc6fce7c10d72da4981f61efc","ssdeep":"","tlshash":"b711e698978898aceaabe09d9774bc3a4c0c223ab0009109a4b20dd5520b2603864fcb","first_seen":"2026-02-13T23:33:55.556628Z","last_seen":"2026-04-17T21:07:33.940832Z","times_seen":423,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-wow.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //interactive-wow.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1524\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jul 2025 04:39:16 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=vqispkY85EDwWHc_Lv11GvPLf1Ot1ym2ElYILdO18Ig-1776456237.2637892-1.0.1.1-mttoggTSG1kSrTMKTj5LA.ZfI2.00sMhUzSzrb1Ux3D_j6pPrIAghlmeqHRUqBor_2pIh2VCeCoF5dQ9dx8OuJQbFpGZdnuKXKsCtB9HZ.hZuFMOzyBA_7YFnANcAgAx; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=2758\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093aed1cb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd89c6fc53324b91d4f2746583a3002a","sha1":"8b8f075dfa342e574363bd6b76a458d6086c99b7","sha256":"fd935a54cacbd272207c42ff8343623b713cda78225f0daf42b1159999632458","sha512":"ebd9389604965d479e6a38776964bad281fbb1bac1d095963e32eb38a88969c79b03079c399a09e31664106aa4609f9db157f18a8b0706a7b578f52e39338d1f","ssdeep":"","tlshash":"2331d70cda6d8badfb913ed61405bbd8b9ec30e004c055a53508e0be1d52daf9127702","first_seen":"2025-07-29T05:19:23.568202Z","last_seen":"2026-04-17T21:07:33.858436Z","times_seen":1596,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:04:00.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ori-777play.space/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 179\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":179,"data":"{\"p\":\"602065d1c31c9117cb76c075\",\"w\":\"1etv8rf92\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://ori-777play.space/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"DhKiwWagWU-ognuC5Kcn2\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-1fv1\r\naccess-control-allow-origin: https://ori-777play.space\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 17 Apr 2026 20:04:00 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9ede094e5f88783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1042,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"60695836ad543decd1d43111fe8c3222","sha1":"767483a59def29006bf40c7a1c8cab3c51cde366","sha256":"fea3f6c80514d189f41d39a88168f0c738c6f5c44a31d68e7df42d51bc44ee97","sha512":"f4222e43862d8e025ab509218190ea42452d2118b752e8f202500b67925e657e4d39b96bd272806df439e1d3ec0be80d8b3e2c75ce83915fbea03b948ab28e9a","ssdeep":"","tlshash":"7311a5194e4d2f3eb2ab77844eda7e0a26cdc5a63ac40544c0d04c1629e13bd1913cb3","first_seen":"2026-04-17T20:04:34.074917Z","last_seen":"2026-04-17T20:04:34.074917Z","times_seen":1,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-pt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-pt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\nserver: cloudflare\r\nlast-modified: Mon, 18 Aug 2025 04:28:44 GMT\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=RzrcAthF34b3CxImTzBtlqfniSgQGDDtnyVXrmJPq98-1776456237.243912-1.0.1.1-bY8sFP9_tjQBr.65FUhLdDN8hJbEzU.Bfdx6HhfpnWeiS14svpE6z4pRSTjVlPK9rgR_AHM4dcWs2vIMApnAw5DDZiond1RrkM9IRCcg4ujk7IApNm8NqQpb4PLcclP1; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\naccess-control-allow-origin: *\r\ncf-polished: ok, orig_size=2786\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcecb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf2e40a6c2bbd9b99547276f714a38b","sha1":"1504aae0b4185bd4f9a0eaae10c6bdd6c652d33b","sha256":"a4ace4b72b9e31666a708b47beb2c453b100fc613ff2c2da2d76693c7dac83d8","sha512":"d8b60b6158fc47b6fb606abb69cadc5bccb2a4e8cb482592b0d38c76c611e434b4c301cb78476a1f80c3c7de7e95abdc504ba7ff3e8cb460ac5777eaa1cb25c9","ssdeep":"","tlshash":"ec31c8d9ba4b2d5f027bb5bf23df5aa221c564376559430140a1668a3d8549332433b3","first_seen":"2025-05-04T18:37:36.957474Z","last_seen":"2026-04-17T21:07:33.944385Z","times_seen":1781,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com/banner/slider-fgs.jpg","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET /banner/slider-fgs.jpg HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 560758\r\nserver: cloudflare\r\nlast-modified: Fri, 27 Mar 2026 04:18:50 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=z_XftZIblym3tl5YfaZIXLaSUDlkt9Hw.wYQJd1zPgw-1776456237.3137598-1.0.1.1-3MuDqptIhxuswz8As9bgBmd4P28.Hoptyb3C1NCepaARQjJwVgugc_ac2ZZFfqegvUgZWxA.qXseNRh2HsPTYtg_yyUYpoa7qk3rs5xNc_lEJYIeGmvsO0KuCeW8dd2k; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: webp_bigger\r\npriority: u=1;i=?0,cf-chb=(267;u=4;i=?0 38609;u=5;i 236412;u=6;i)\r\ncf-bgj: h2pri,imgq:100\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncf-ray: 9ede093b3d6cb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":560758,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x380, components 3","md5":"ea20b6aebbc03ecabb85bdd8b752d0f1","sha1":"d5b53b42a6b06cce802f469bf7a9c4066234f8f3","sha256":"bb9d032b03891df0d7b8a64a09f08a4077c732e3410a0e17a8680acb6ca186d9","sha512":"b9595449e767e0bd609eea3a348a04402377fdd31d342d667850c64415979fe6b5f60b55bdb6e0428dc5667b89ff04b67f1dfe93bbfb5bdc16b87b5e6a1111b3","ssdeep":"12288:lgC7opoqxrUnsP9taSX/2Ap13G4nJjlP7vytVHlHNoIHHJcuI493HVAD:6C7UCWaU2ANxzvI/HliRY3uD","tlshash":"8dc423f4a94f2314d20b41e696e7518918d93b963b885645af37dcce3d313ae1a0f12f","first_seen":"2026-03-27T06:11:57.335117Z","last_seen":"2026-04-17T21:07:33.982689Z","times_seen":208,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Apr 2026 07:59:25 GMT\r\nexpires: Mon, 12 Apr 2027 07:59:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nage: 475473\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-04-17T22:29:44.758538Z","times_seen":13741,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":113,"dns":1,"connect":22,"send":0,"wait":23,"receive":24,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.10.3/font/fonts/bootstrap-icons.woff2?24e3eb84d0bcaf83d77f904c78ac1f47","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.10.3/font/fonts/bootstrap-icons.woff2?24e3eb84d0bcaf83d77f904c78ac1f47 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 1.10.3\r\nx-jsd-version-type: version\r\netag: W/\"1d9d0-F9rQd2iZrRvq2r0GHDTioiss3nQ\"\r\naccept-ranges: bytes\r\nage: 499428\r\ndate: Fri, 17 Apr 2026 20:03:58 GMT\r\nx-served-by: cache-fra-etou8220122-FRA, cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 121296\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121296,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 121296, version 1.0","md5":"7f477633ddd12f84284654f2a2e89b8a","sha1":"17dad0776899ad1beadabd061c34e2a22b2cde74","sha256":"966620f9e3bec428663687f9e8d67a6b8e35d79adebf6fb204e9b139eada7599","sha512":"b46baa2a3ea38512f8b539774c751004cc866d085a9739f4c25f2ade9d97c10d6f4b20cf87dcbb6a003e0df0ca2df200f9036a4c76a013f24c57d365981f6e00","ssdeep":"3072:Nodp66TvfwN7lvK/5hwbCuy3Y5vV1uXZKeufOdZMJgQoHy:Gp6gX+7s/5hwD1RvqufOoJgHy","tlshash":"75c313267cc162a8bf6dbcb2545af65c99b4c9ce6a802bacfd30db90c1075ccd910771","first_seen":"2023-04-07T20:14:59Z","last_seen":"2026-04-17T21:07:34.018901Z","times_seen":6057,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":16,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icomoon/fonts/icomoon.ttf?cobna3","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icomoon/fonts/icomoon.ttf?cobna3 HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://img.viva88athenae.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:59 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 2971\r\nserver: cloudflare\r\nlast-modified: Wed, 19 Nov 2025 08:02:36 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding,User-Agent\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=14400\r\nexpires: Sat, 18 Apr 2026 00:03:59 GMT\r\ncf-cache-status: MISS\r\nset-cookie: __cf_bm=DZGVfDONvjrW7q_hF60TmiM3IWZGp9tbbMl0ZaZZSAI-1776456238.8850358-1.0.1.1-aMRNfc6rVqx6Q6KM4ZhnqWROLxuCYE6_U52EXcWkD1ELYDNaGtn8vK1g50nTpyQKDnQ3FiymubNuUiqLN5yc9qDXF3w2kr3nvQ8_xVqx1ZUZMM_oNqrnTKixSHlXZgsc; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:59 GMT\r\ncf-ray: 9ede09450cb456aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4788,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"17755c1a595a6cfad8faf64d79bfb096","sha1":"9ff4edf4a135ad92d418eca49cbd5751595554c8","sha256":"6e24331ad054b14d877983c01ab24266e054eff30104645719b826988320b610","sha512":"3f96b5c63d673fa34d542c1b7e6b08b0a355e71529273f41928ec01ed594018f22cf3556b753a41c27719b9dc6c35a8cbeefa09859d9d657b22b21d93c77a0ff","ssdeep":"96:zwvCwULhT2cmh8bj6ZxQrNUGlSfcEvsR2oTbUjVl7ydkS/+nBvQmlPV2DG:0qwUMcO8bjGxQrNU6SUEALb6z7hS/gv3","tlshash":"8aa1e707c336cfcbc026e3b95c94d3824be1ee11a765d3a785484d45b61cba48d717ab","first_seen":"2025-11-19T12:27:30.59329Z","last_seen":"2026-04-17T21:07:33.953094Z","times_seen":939,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":34,"dns":4,"connect":0,"send":0,"wait":207,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:04:00.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/js/twk-chunk-2d0da3af.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 20:04:00 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Apr 2026 10:58:15 GMT\r\netag: W/\"40571ed967d847afae2cee3ce43c7ed9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 119122\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ede09509cdab4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14213,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14213), with no line terminators","md5":"40571ed967d847afae2cee3ce43c7ed9","sha1":"3619a4f5f89ef02006fc0a30f40c99995511fa65","sha256":"839295857f3f306fb85d55abb04d30ee37e5c614daf618346ab31914a1bb1941","sha512":"6d836646837bbaa3bd01ff3c7a96ee83946c3734f53e1ead24e38bb96ecfd046a204adf62abc7d4e8de3d767219581da9447e40c557dcfe501ecea56d6bf2bb7","ssdeep":"384:UJw/U5YK8Hx9KJCThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJCThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"8452c6a7b2a4782d42379712308f3205f33b7d45b215da19f36edcea4aa84c16056f3e","first_seen":"2026-04-16T11:08:25.276877Z","last_seen":"2026-04-17T22:40:53.092673Z","times_seen":418,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-wow.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-wow.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1524\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Jul 2025 04:39:12 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=sGb.MwV7B9QQhH5qZp9algbhVCOAzuI43pAtOZnsvHw-1776456237.2395513-1.0.1.1-0pR39cf1o8i.5hsJaxDgdAlVqHRVjkJxFsdN0Y5tTt8bEJVmOwcxrbWnSuxhA5TGoM.4qvIsM4PXFc4TyGo_lBgoC_4PhTU5YYq1Z8cUednzdrIYsETA9DLOgWJ.sJfm; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=2758\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcddb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd89c6fc53324b91d4f2746583a3002a","sha1":"8b8f075dfa342e574363bd6b76a458d6086c99b7","sha256":"fd935a54cacbd272207c42ff8343623b713cda78225f0daf42b1159999632458","sha512":"ebd9389604965d479e6a38776964bad281fbb1bac1d095963e32eb38a88969c79b03079c399a09e31664106aa4609f9db157f18a8b0706a7b578f52e39338d1f","ssdeep":"","tlshash":"2331d70cda6d8badfb913ed61405bbd8b9ec30e004c055a53508e0be1d52daf9127702","first_seen":"2025-07-29T05:19:23.568202Z","last_seen":"2026-04-17T21:07:33.858436Z","times_seen":1596,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/favicon.png","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:59.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c; _ga_J47P3ZG14T=GS2.1.s1776456239$o1$g0$t1776456239$j60$l0$h0; _ga=GA1.1.236874243.1776456239\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 22533\r\nserver: cloudflare\r\nlast-modified: Fri, 09 Jul 2021 08:05:43 GMT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=phvWt7isslEJAjJLc1jExzMQEI3Ijz60YAJwr%2FHcmU8lB9ijsdtqa3tR%2FTEdzYQHg%2BSDuPi1JBcIp2Mf2IGhkmQaKPMB63Vd%2FcNFIXuxWqtqQeOm%2BqrMqIWVoTEeetRSAKrKCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ede094a39335687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22533,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"773fc3244962d7c24f94a72ef73bb5cd","sha1":"942aa861796947b48477e32fcaab2188c016310e","sha256":"c1d23c029c92ad39975d664c37c4ca152bf728f7ea1c83e37996a6fcdf4c69cb","sha512":"aff8b7057d5838fa5c9b2807e3db9a48756048b8e3ab88f7a4e908e3f3554665d031297e293c5415673efc5cc547643b3e09050a3186849238b2315b6d6ab540","ssdeep":"384:gS/LdTtRuaEUPppBTpUvbYxzflIUWy2xyHF3K13h+E4axjsub5WVzO9T:gy7RuPCBTqExLmvxKlGhj4WQu5WAT","tlshash":"e9a2d08f53466c33d26a787954b923a3ec73e901a4749654744900632fa078d76cbfc9","first_seen":"2025-07-11T00:04:02.11564Z","last_seen":"2026-04-17T20:04:34.078386Z","times_seen":3,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":247,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:04:00.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 20:04:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 16 Apr 2026 10:58:15 GMT\r\netag: W/\"39f38fff97bceb6dd38d255228384ab9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 119122\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ede09514cecb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54016,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53968)","md5":"39f38fff97bceb6dd38d255228384ab9","sha1":"4f9d5ac34f834ec7f160fe555097691b45d47d39","sha256":"d9b57cfbaea5a38c3d279ba0a64a2fa0ccb499f94dfac8dc8845ac1c0f22f829","sha512":"cf1a36ed2530d962ee9a8013cfa3585dad4e85857e225c6a5670c92a574769d771b6a0f1ff2ae31c176ca078e7f747b704746996fe7dcbf826d906754e5545ed","ssdeep":"1536:fGUifm7kUdwddCriQiLc0Lg261F2BBCsEZf:J1V","tlshash":"cc3322b2f56710ccb363c22292d1f6bc202ae770d746ce96f427766c4ad12a63551fac","first_seen":"2026-01-16T00:46:03.995467Z","last_seen":"2026-04-17T22:33:26.023434Z","times_seen":20537,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-pt.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //interactive-pt.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1572\r\nserver: cloudflare\r\nlast-modified: Wed, 30 Apr 2025 06:39:54 GMT\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=ll.AUKFDHXCkVhGWLOCZd8TUf5MqfnAxl1zPkFOrsJs-1776456237.2634878-1.0.1.1-KpwyvKLS93.DunKV6zrTK3DsLxKo.8H4rz0OSh8id5h7hYmsyHUUadLJJzn0OaXUJzWAtGkGKfoiLoZt5kyxb0tg5o8rki8gku6bTvAz8l5v8AadF3Mn3bljnDvh8axg; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\naccess-control-allow-origin: *\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=2786\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093aed1bb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1572,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf2e40a6c2bbd9b99547276f714a38b","sha1":"1504aae0b4185bd4f9a0eaae10c6bdd6c652d33b","sha256":"a4ace4b72b9e31666a708b47beb2c453b100fc613ff2c2da2d76693c7dac83d8","sha512":"d8b60b6158fc47b6fb606abb69cadc5bccb2a4e8cb482592b0d38c76c611e434b4c301cb78476a1f80c3c7de7e95abdc504ba7ff3e8cb460ac5777eaa1cb25c9","ssdeep":"","tlshash":"ec31c8d9ba4b2d5f027bb5bf23df5aa221c564376559430140a1668a3d8549332433b3","first_seen":"2025-05-04T18:37:36.957474Z","last_seen":"2026-04-17T21:07:33.944385Z","times_seen":1781,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:59.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:59 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 16 Apr 2026 10:58:15 GMT\r\netag: W/\"a22fbe1430d56fb2a5eed7fa6af6abb6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9ede0946ec07a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"a22fbe1430d56fb2a5eed7fa6af6abb6","sha1":"3696567e9b22b652e731a2026551cea5a3cab229","sha256":"5a055b7bebbea5b3d7bf6b078bac808bafc52a93ff347ca4fe16971657168aec","sha512":"9a38d0362df8b491a5e827e76ef8ce99fdbb7e16d1a303ae91be28d639613e9fbdd02abfd6053ba7fbe62858c1cb22ebb69426a2f57fcc28678390da865c1576","ssdeep":"","tlshash":"af41b5d936e4f9ba834318e5043fa016b6353836487be8c0531dd8f5bc78c45821afb6","first_seen":"2026-04-16T11:08:25.271979Z","last_seen":"2026-04-17T22:40:53.066836Z","times_seen":454,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69e0c09cf0a/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"104.20.42.169","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:59.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69e0c09cf0a/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ori-777play.space/\r\nOrigin: https://ori-777play.space\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 17 Apr 2026 20:04:00 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 16 Apr 2026 10:58:16 GMT\r\netag: W/\"4662c7c182dfe30065936bfa05f8c773\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9ede094b4ef1783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11595,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4662c7c182dfe30065936bfa05f8c773","sha1":"d1f155c335c31be5947ef8ebf82be1eee2782fc2","sha256":"2d2d85dfc80ec4f42d12bea574d59879d269b5c06557cf888367fbfa9036fe47","sha512":"abd2530371ef02602814b0bed360225c0530615c5db002d61511bca5e8cda0d8da2bd288631ee02da5fbf952b31bd4380284dcd56838277b52654f7d13dc6229","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9svKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59L3Zwfi","tlshash":"ed323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2025-06-18T04:11:24.033166Z","last_seen":"2026-04-17T22:30:24.800391Z","times_seen":44081,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":149,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icon-togel1.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icon-togel1.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1916\r\nserver: cloudflare\r\nlast-modified: Mon, 18 Dec 2023 06:25:25 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=weKMgisZvUyWREAM_T3PcUiPeXVE_q6aHqI_rZ1YwjY-1776456237.2446861-1.0.1.1-i9yDt7OlbBANXnepOcbhufdrwJ2uFyT2GVkl_NY4fvnLQetC0X08KcZtlCYBKRtX0R1WAybAh_Bhg6XABdZ7XmBKCswWugT5aOFxIZY0vQfOhrOmcdJjMaSkRAAeEy7f; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=3573\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcefb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6b306d736a18621948e272f5e0fa5da4","sha1":"fd3152657117384a997cfce3748c52398a5bc58d","sha256":"b91d8ddbd317eef3393479d983082ba6a8161c4c2b36e2caf544530a23600ce8","sha512":"6ac579745dda219f72a9b5865ad164f0434b12e7134dc788ea1c8b830762c99d4338708c3910b55bf704bc9fab88357a20fda7498d473b06b00b82934870ddb5","ssdeep":"","tlshash":"7f415b40892c3564dcab700d82b2ffbb0bb00993668636985f5fb60bd4a82fd5c0731d","first_seen":"2024-04-06T22:27:32Z","last_seen":"2026-04-17T21:07:33.975443Z","times_seen":2428,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//fish-jl.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //fish-jl.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1592\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Apr 2023 04:58:17 GMT\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=Revr9FmVnej1S5WNpIhbGYkOKraEiKxHVbRQhMccxpM-1776456237.2517753-1.0.1.1-Rz0eir3VBxXu9Ozc6LvCPWJzpSLOn_Go8KJk3eBc4kKEVoJE8R2LgzmJd7TK3Uqv0yYvmqcAq7j1WnWuV5VFwpJmRFmUDlqKa0bESVoybMcOI5voKLiSuTwkn8qDTLaW; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\naccess-control-allow-origin: *\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=3284\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093acd01b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47c5c52e0bc00c84f9b380658efcd1c8","sha1":"dcf1b5d9964abfa0485bb54a3ad0b50452ae4e54","sha256":"ba1abecfa157025ef708d23c2fcf8d59c8a869a32ce29f96e66486462ce3ae30","sha512":"0e10b9646f4d3b1148eb1e4ca399e8cc9cdf9f51a8bcccb6e1bf9b896cdbe306f893548919dbe0a63c6ae2b469e39e5cb5676123f6ef51c44a40da7fbbf306bf","ssdeep":"","tlshash":"2f310a2618c1497ea5b0e06af04e3224d68a04de52b95690ed7120e79245fbf5dc4701","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:33.887589Z","times_seen":2508,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//interactive-jok.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //interactive-jok.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2000\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 04:52:28 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=Qbk50YUEaGx._Tu9pa9iBIHJf6OeyYV87wiBPh2n2fM-1776456237.25823-1.0.1.1-m0khhKtE749xwAhOfhYmEUlrzsZA6QV94PMSLJEyT9I7gVz9d6tPlL4rcNJu8kMzURvyUzkaJDwb_CForiUz7JJxRjFaL1U4F1SSXqNFFDoKAxoAkQTTnfAOMAKbwt4W; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(89;u=5;i=?0)\r\ncf-polished: ok, orig_size=7983\r\nvary: accept, accept-encoding\r\nage: 6043\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093add0db51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2000,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3d6ce73337d8098402370b95ce184d6","sha1":"f82824809e6fc6b5bc0696c7dce5942ab17abac5","sha256":"21cd86f323c17093d4d78ba1e98352a00c8459cb70d1135006cf1de90b0388b3","sha512":"447bcdd622151905e0d9085165a36f0d4db2045a0218684f9b5f26c7f30fbfc3e9718bc726fb5f0593b8fd88c1b43f2916efa6f6d1d4c34f199db271d148bf35","ssdeep":"","tlshash":"1841e461e62d124bb41fb12bde3322a15702c3ae74604523eaa84a30457ede1b05afb8","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:33.974226Z","times_seen":2507,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//events.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //events.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4764\r\nserver: cloudflare\r\nlast-modified: Wed, 21 Jun 2023 06:13:46 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=42UnOUBUO0lcAxm21XCD5iVbdfYPUa_XQ1Hq.mjfs08-1776456237.264665-1.0.1.1-kwUP6M8PGO40GqaBPRdFU2ZMIFIoZTH3L3WbVTRep_HdCpj5Zl5AmRtTtOwkYSoLwxk_lJ.9AqA4IoX1bBlfLnkzJrHlyl05c2tONG_E7x7Z13oUr2_0Cp4yzx2bFs0D; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=6850\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093aed21b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":4764,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6fcc8214161918b4a6454d0012185214","sha1":"ef1cb58cdb13c4eb20d829b0a1e5c0c7ad07f1a5","sha256":"50bd32098504e3e1e509c05915be1871628a9486e8d76b84f13384b27df09c62","sha512":"80232fa4bb935ba30c39608c09de8d0092f8a755017025b43466991cf82665d7da23e98170baec45aacf6de7b67e0a652e9e384404b2a1e1e44193a5f60d15c9","ssdeep":"96:5OAObmsqYZpT6KVsJjm5Odtk0HxVGBvC5wyJ++D/Vetw:4isqYbu9q5ONVbxJ++D/Vetw","tlshash":"0fa18f3e4236d24b80457babc61d963a7753358ed501feb40fc32752d1758f602816e7","first_seen":"2025-02-01T22:41:26.02949Z","last_seen":"2026-04-17T21:07:33.864642Z","times_seen":2004,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Abel\u0026family=Oswald\u0026family=Ubuntu:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css2?family=Abel\u0026family=Oswald\u0026family=Ubuntu:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Apr 2026 20:03:58 GMT\r\ndate: Fri, 17 Apr 2026 20:03:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8298,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"876cd04a131bcebb23e3ca9e135f5b2d","sha1":"ab9f5483809466de2f8db6a0026a1091508d63ac","sha256":"7a02050c74ed3a36454d0ece26dccc8fcf154188b3f212398e891cc5b25dde68","sha512":"168c97f7ab8d35b7f3bf125a6041046de689403bc5602bab3bd7f75cfac1706ba4209dbadd66ee811d3668b25808a42132e9cdf7c173a5898727b508eeace838","ssdeep":"192:eqZvio4MVfg8i5xq7eMVDUn5ZKdgWlR66HZ7H:r69aJl","tlshash":"5002e092045b9400eb474cc223cfbf369e8f61566445c5b66ffd18d8acead3a431ab4d","first_seen":"2025-09-12T01:51:25.641676Z","last_seen":"2026-04-17T21:07:34.033231Z","times_seen":1483,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":80,"dns":1,"connect":22,"send":0,"wait":33,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-mgw.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-mgw.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3480\r\nserver: cloudflare\r\nlast-modified: Wed, 08 Apr 2026 07:45:11 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=LYxAXYHfQeszmAb_pLmiMEVm4aquin32kGc7wZzFGWk-1776456237.2468584-1.0.1.1-kUXm_UPE8ywecbZjAcRimQZbjp6gVajmASp5lKipLscLOhwIfacPwkdSqRN8GLLFkkIaSBfyZgaanUwGTbmrlhRXMRObBFsQyM_lZQOHRIXL3DOoXpPBoJ5xPmuj6g2J; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=7223\r\nvary: accept, accept-encoding\r\nage: 6140\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcf8b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3480,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c52ee7efc7c3be0d76ceba963bb70b9d","sha1":"edafc0f83a5de4c1bfece54676b73a0b5027df5a","sha256":"dcf7a4ebbcbea218e650dcedf55a005d40cfa9b1a70c532e5219a421b2e13327","sha512":"fe6d8e0d5fcc715933a94e5c08762a62a45044bf39787d55c030459e19921e9dead2f988ace650a89240d5b492b2e309a3953c2f2424ef73d47dc3f062fe13a7","ssdeep":"","tlshash":"46714a1ef8723a281d4a1e16d507cb3f08bad1f8e9ec082f7316763002d75650a247e4","first_seen":"2026-04-08T14:06:41.767293Z","last_seen":"2026-04-17T21:07:33.95615Z","times_seen":74,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":27,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-fs.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-fs.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 792\r\nserver: cloudflare\r\nlast-modified: Mon, 22 May 2023 04:44:20 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=Rg64xA96bSnnKArJsxU17UZTgIdjK3iArkxDX4W_agE-1776456237.2593043-1.0.1.1-n5tPDcvgGJAlXDYgyWNH8GURBjlPFg17fbKwD5.rQXyExbd7HXelSAHbuZP5LFesm15PUJzwUia5gvbJgB802zp9RCY6Dkc5E_0yPQa1DiRZXf6vEYiiBGjzA4AJTWzB; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=1584\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nage: 6244\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093add10b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":792,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"516a01f7b1b3c95a9ecf44e325f9ee07","sha1":"1982923475107c337470ced7a3e78b685ac47c79","sha256":"6240f17a98bc571378a82e5112eed4635d7d5421ae012f54523623c3096d835a","sha512":"09f420e3a4a7472e7cd37e29aa959ed273d9ff721b4115e0bca13b9ad185c64afb58b862da9d9f68098ebdadb4b986c82a1dc5e4318aeb64a36d9443995d912b","ssdeep":"","tlshash":"8b01758cf2dbe5e681153311db113f789cd6ba4bad23c538f08238654da9856583803d","first_seen":"2023-05-22T07:32:15Z","last_seen":"2026-04-17T21:07:33.996276Z","times_seen":2508,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/lottery.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icons/lottery.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 954\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:51:02 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=CzcxF3wl9f6QI0B_VRGKjXLKNQYdwnMPBKcdRcDDSXg-1776456237.2655783-1.0.1.1-Un6HRmuVmyil6a07cfplFcUVQp0FOG2MPyNIRRLqkfOdQm1uoFirfBinMg4ExIz.7V9ajQHSiM2c6cotCZp_xLxx0Sxp_zfmZKOO9aEyPu1JZMqwk2rI_1AUTWsnLJr_; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=4258\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093aed25b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":954,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15c0c4be6639d6ec9ce5ddc983f2c4f3","sha1":"9e541e491ca202d9d0aa9e0b61d01198eccc9eb7","sha256":"61a773aa166745eb9f86d91f71494d72866355dc9d1994d3bfa7ed76a75a183d","sha512":"715c171b747e44b894b63e9c97688a0d2f85d3dad63ed25bf019fc59cb987d7d25b35452b974221358a6f6663ae284823b933a61bac6bdc9fcd115734bee9e29","ssdeep":"","tlshash":"0e11c85683756942f06f7942fd6c932848b4dc147247d4a79bc2060bb1fc2dca301578","first_seen":"2025-11-19T10:28:57.308418Z","last_seen":"2026-04-17T21:07:33.98776Z","times_seen":941,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icons/arcade.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icons/arcade.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 350\r\nserver: cloudflare\r\nlast-modified: Mon, 17 Nov 2025 06:50:59 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=LcuAi69Wpio.t4QzYC21whdpeyqPf4QE.mlooqtvT9g-1776456237.2668161-1.0.1.1-s3onKJd5oXvODEMK7VbiFkvsw0iFx5tKu1Mw97.63Xy3bENn3fWGD4LOXjdueml0A2kO.wchiLPlvG_JmE1ldYJij5h5riJZy5UtB4oMcJC0DA4a3d4ZaJG4dnTYo6Gl; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\ncf-polished: ok, orig_size=3280\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093aed2eb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":350,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b684e53d508cd6b31c7783bdff6cca5","sha1":"9ad973f643cc511319f32dd501539f6c223d45c2","sha256":"e5b50f69e6eea2b60cd5aaa8c79b05ed8a3846ff044ce8b9665cbfe56a821935","sha512":"9fd98539b171b98f674bfa6637ce289c851907b24447b6e964c1e9a8bc148eb2b6714446b2b2b420f75dc6f2bf18d00c675f2ee1be6747ff923d1500c24792b4","ssdeep":"","tlshash":"23e0c010ff04e6759ae728146839c95e1c008e5938c7cbd4070d06e1a1b43530b0295c","first_seen":"2025-11-19T10:28:57.335494Z","last_seen":"2026-04-17T21:07:33.889306Z","times_seen":944,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons@1.10.3/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap-icons@1.10.3/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 1.10.3\r\nx-jsd-version-type: version\r\netag: W/\"17579-AwBvMnkuAzSX6cpoNztsM4YwWTM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\nage: 3264687\r\nx-served-by: cache-fra-eddf8230113-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12937\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":95609,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"06cb502613f99040e534fec65fa725c7","sha1":"03006f32792e033497e9ca68373b6c3386305933","sha256":"e1172d3a0a208cf01dc066f0abeaf17f00264a966159a69f71947d6edcd4935f","sha512":"734faf4aff6d9c64b87f3c1320114f71d099d10c0ff9a4de3ef65e009918a5b8faecabd0e7e56b2630e1de58a5e3c2c82c9c6120241feba750f2dfc12723a8fe","ssdeep":"768:+qnm8OAL1Mzocm4KyH2CuwZwmij34k4RDl8IbgFVyMW:7Oocm4FuwZ5ijINRDl8Sb","tlshash":"9793feba914f05f9d341e4d92743634693aab93cd1813c7ad342399ee3c5a1c8ad72ec","first_seen":"2023-04-05T17:57:45Z","last_seen":"2026-04-17T21:07:33.972984Z","times_seen":5021,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":14,"receive":2,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/style.scss","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /style.scss HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FdWX8WtFDn%2Fczx4Mi3dgbEN14GmyFbqqwl0uXGh9tAvGuUlD83LBhe4j0fNx8xSGjvfrY0A9GvKVjW60iXacioNJsGpDwaLhuTVgzvtfaoT8Fanr8rYBAbRP5r005DYQRRs4vA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ede093a0ed25687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-17T22:23:08.127138Z","times_seen":13876769,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//icon-kupon1.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //icon-kupon1.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 536\r\nserver: cloudflare\r\nlast-modified: Mon, 13 Apr 2026 09:12:40 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=BJUxQnb9Unk9KZH2ATFdWhhQ54nmiEGFSyXfmMdWlto-1776456237.2450347-1.0.1.1-2WtHsnHmuEulsPiQDt0KhRpoGaxVmYiCKAMY96PFy4Rl8QvgPusEdhvV6dnM92kYHWXoaWMiSMcb0f9GBQerg1TCRf6Esg1Xm48rbYZaqLOLGSFFhlCBESoL46WcrsrX; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=1461\r\npriority: u=4;i=?0,cf-chb=(37;u=2;i=?0 234;u=4;i=?0)\r\ncf-bgj: h2pri,imgq:100\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcf1b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":536,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"675ca5eea33e82d22440358d48559ffc","sha1":"badb30484397d883881ade5782e22940b2cd4005","sha256":"10d939985e8cc3eb3aa7cde6b348ea339f3a320237c06a2d022031fc4f374cff","sha512":"2aa186d1268dc6c98b92cd6464fc9095fe06f1aa1fbc6f13b7e73936c695b3deba49dc88c317df78aba255c6741c23c06b0b8d148b72845d1a76f8e0750746f7","ssdeep":"","tlshash":"16f0202e37aff841df69e4045abacab3128881da860a6f3a52819baa20a0b00441350d","first_seen":"2026-04-14T04:32:54.911594Z","last_seen":"2026-04-17T21:07:34.006137Z","times_seen":25,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-cq9.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-cq9.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1182\r\nserver: cloudflare\r\nlast-modified: Wed, 10 Nov 2021 17:01:06 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=WDW859Rx_MrMchqf6SMP_s75QzIRbGdk3ouxUUPUaqY-1776456237.238935-1.0.1.1-lboIY69OvvzzbMjXefGxHZReMZyWlhR.xhQS_l4w7OMat21frGyrgEacEYuprFTWLZkaBj1N1LBVDENCra.LuZ3IO29gmHJnUrQpE92pWS8p7RxDY0bh5V6odrc.BMak; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=4157\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcdcb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1182,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c1a383f5c29c2a1abb0146f00f976edd","sha1":"d044fc1b18c28a0129ef1ffbeba52166614d057e","sha256":"cef9e6fabf6bc11ddbe76f0abec0e0f7106ba78a0b5499c3c640d82c8a7d6701","sha512":"279fb2c42ae9c6bd32b4c2828805923e1fe9a0f77f5502a62eba8636dc03367fa57174962395550b3acd4bdfcd8c8d17d722b38b69784cef18987476d75be2a5","ssdeep":"","tlshash":"a6218452943890c9da8498dc76c2aee5dcd5e99a4203e9964109d8e5a7b46b03820f15","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:33.951241Z","times_seen":2508,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-sbo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-sbo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 794\r\nserver: cloudflare\r\nlast-modified: Mon, 18 Dec 2023 07:14:51 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=8V.lrqCBWncm6fcHtiFqxh.CStcxIgsI_fLgZYEbsV0-1776456237.2404525-1.0.1.1-OoPz0cPxuTYbLoZRvhD20fPgr8ELEciX2JnTNTqSymFcTStHR_hH4NKfFEKowKx_pm6sRdpcl8LBCM7JZK9Yj_wnDozDJxEhznnY0PA24z23uRW_trr6Fu9RVPaa86hC; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=1595\r\ncf-bgj: imgq:100,h2pri\r\npriority: u=4;i=?0,cf-chb=(45;u=4;i=?0)\r\nvary: accept, accept-encoding\r\nage: 6153\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abce0b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":794,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"041b8eeed633afc9d95344aa6e28ed7d","sha1":"e42388794c68fe2b9282cbfe914b057c58fca502","sha256":"5a2a23b2d0c30c3938c1b279922c8fd42659a06a6a55f5f3f94b6f69f1ec544d","sha512":"aea1d59ae0cba007c99972fc9c18b389facb46c266af985b973e76b6c53bdedad4d38c953d59bbe080142870875bf2fbd202861b30560ec60fadf7599f521f8b","ssdeep":"","tlshash":"1f01419c2da5560e5e5434ccd774a0a0640d7e0551091da3bb04ea56200e50a1e49c19","first_seen":"2024-04-06T22:27:32Z","last_seen":"2026-04-17T21:07:33.865507Z","times_seen":2424,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-evo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-evo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1224\r\nserver: cloudflare\r\nlast-modified: Sat, 24 Dec 2022 07:19:19 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=K2qZR10slM38feXpHwk8TgPoxvIxJ6ndY32.74IjdEc-1776456237.2412372-1.0.1.1-fsozoHXUgFKf_k5BxCLKFnLJ8W6eGJyHj8sa.prK.djWgV12YNQOES4ortbOf3_m5AbkLWSL1I.z6PAI.pbRoS1UpJ7xUviW9uvbzdMsP2Fpvp4OY8W.Aq3P6DbypZ0.; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-polished: ok, orig_size=4930\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nage: 6153\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abce2b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1224,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a27aeaaf4f87ea70e9d8f179dab9c1d6","sha1":"acd3b82f10cf00f0487ca7fe1e22ad662d4638fd","sha256":"9d16857bece7fbf86f719af897f7a7036dd151d2fa4d31e2ae08f863e0dfe179","sha512":"c00bf7d196964621d8aa2659f4e940e3726d152367dd270948fd168ff06397f1e1aaafe70e563bc19bfe8268d8dde742520da92820a36fde5f1e11897ef6ba19","ssdeep":"","tlshash":"af21b46d4a900818694d3ad413260f2b3361e61afd47c8e266ad22e8b1228184e2b8c4","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:33.930788Z","times_seen":2507,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/assets/24h.png","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:58.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /assets/24h.png HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 11955\r\nserver: cloudflare\r\nlast-modified: Thu, 14 Nov 2024 04:58:26 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gfyRHPNAXjNdxJTbPbFLp5EwoggswzaBNt9CQSS1xgkXqPmkaEUsyCLVzTv3LfYhYcRLuHyTfSeplhR4BztSmwWhivudp4iUg%2FFJFaXNdRI8Vgz%2BKZkZxTRq4X7o%2BS0Tp7mwgw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ede093b385a5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11955,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 193 x 122, 8-bit/color RGBA, non-interlaced","md5":"5b0a3d535cfbcabd0b37960167c67ed8","sha1":"622c2616c39007e70e676009afaa68438482be94","sha256":"7cf851a08a27bb68c7b4176852fe96a0e09593d85e7704c2acd862660de8ca62","sha512":"defd5cd4950bcd971144bb8218911da30c97c94c51916a5e1a618084ffee88dc8eba8148b4bcedbbb8e76f0c52cbe0f1a08333a829c7200d195d5bcdeffe1044","ssdeep":"192:8wzGVKv+l9Db0bVj6ugjkiKAUjAhaXA3afkbNaV/8mmHT+8Av1z5lX:8wz1v0DYi1aOacukdg5lX","tlshash":"2e32cfae70e1e0f93ec0a87a806617837892e90695500bab43e4c1d0f7f7f648794cd7","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:33.863674Z","times_seen":2952,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/css/old/dark.css","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /css/old/dark.css HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Mon, 10 Jun 2024 11:19:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DB4iKVuYotoCCV5hVLkUJ6C0o0Z%2F4a%2BM8f%2BDMU6nxC7RlSUJonaAjwXcbXvpm%2B4Z74kmUfIUvib3uAPBXY8nkgFciBWV5Y0RqOg0GUA3dFmTXAlsR%2F6LjWnySyfTvqvfj%2BKPfQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9ede093a1ede5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":963,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"86d17c83b9f26e4e35110e1fa926122b","sha1":"4959ca9d6a847e49bc7ae81a92e7ff54e838dc99","sha256":"def6cdc4916ce9b9b2c47692138560782cb330f9aee6894243988858624180db","sha512":"f948d9bb182d8f2c5b84a2389c750129e97c073885cbc80218bae04dd1ae8bb0e2f40acf333877006aed6802d76433f22ffab13a64b5ff930327a7b12aeae774","ssdeep":"","tlshash":"f411bd79805f543a323fd8ea37dfe93ba270a85bc003ff15b6d470866f00298a222402","first_seen":"2023-04-27T11:32:09Z","last_seen":"2026-04-17T21:07:33.995661Z","times_seen":1519,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-ps.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-ps.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1530\r\nserver: cloudflare\r\nlast-modified: Sat, 01 Jul 2023 10:40:59 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=waHZIoqFdyWDoBjunLdtHWm1tqic9_r873N4jpEWeJA-1776456237.2361557-1.0.1.1-lBZJBqelEZ5EcBT8rH5fA6o6amS5sZH56dM15BIKbV9iMxaaUfV..CinJgNxvSm3uPcJtbdinMfrEQsOF6Mey0QBY3bF__L0nELdujTSLOshQU7_W6utZYegmlzNMjaC; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=2835\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcd2b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1530,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df12aa9d7e1aeea72834c560830ceb62","sha1":"de28dd2fbd5adab2e42c9ece29a5c259b4c52603","sha256":"0b474e2e391432c75c0f69f94d6a8107472863c03b441cdbab7cdffe483f6b79","sha512":"2d0dd11d755346446888a97065972b9dab95c89e033152cc11fca53eba1895e3be39c01c4b8ab49b418ddaf3aefc0fb279b06a213b355d9d22088d675fcb1097","ssdeep":"","tlshash":"6131291819cfbd715903742c3e59b404133a2f8ebd31e7b0eade277991ec88001e6d85","first_seen":"2023-07-01T17:54:16Z","last_seen":"2026-04-17T21:07:33.955443Z","times_seen":2508,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-ion.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-ion.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2434\r\nserver: cloudflare\r\nlast-modified: Fri, 26 Jun 2020 07:51:41 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=Q_dZ2PyItd1Bda5n6h8mG.mee9LkgECMAUYQNn_6FwY-1776456237.242217-1.0.1.1-CZJd6s2dpuJx89N1vz.O6FFLIGXnj9jntZcilX4kWRF1ZfQqsNDZBlHt9m8jum7fP1bZcWs2wYeg5Zm.KHJ2vv_7GaAx7fXf9juoeEJTAI5mljD1kj7qpdPujUkJAnP5; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: h2pri,imgq:100\r\ncf-polished: ok, orig_size=6674\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abce4b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2434,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a48e4a72414e5587b22eb4ac4ae959b","sha1":"a3ac92a04917abab71a98503dcfff52be3af7cdb","sha256":"e48ccb777ed57ca1eee701da53a8fa2d85b64639d0b8210e3160678e1753b144","sha512":"5310124afeb9ff22ed40757c3612d38a85cc104962992a003f0d26e1565d7d1db3ca16be7f898b4634f3c8c0c611ac5198cc3b1a5e1b2a5adaa2212e17f93b93","ssdeep":"","tlshash":"b3413b6c6fd4525dffa807430e46e385a2091d61c82b3a5c01a200a72113183f9fc82b","first_seen":"2023-05-01T19:31:55Z","last_seen":"2026-04-17T21:07:33.985969Z","times_seen":2507,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//live-sbo.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //live-sbo.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1316\r\nserver: cloudflare\r\nlast-modified: Tue, 14 Mar 2023 10:02:25 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=aSlF_pP0J4RELquT4d_u4PEOt7p.NtFrJcqdrhOYRGg-1776456237.2492037-1.0.1.1-Tn2FPm2IfRC.I4t3qToyW._vEDjdO9RM6KartpQMYK5Kne.7zH.1VDTXXqSWDKQbaPrA2HrqiXE9zLzdNc7U3B9VqFthnfYitTIa3jL1dT69VGMRLvqA_QDTS12G8Z5d; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=2322\r\ncf-bgj: imgq:100,h2pri\r\nvary: accept, accept-encoding\r\nage: 6153\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcfcb51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":1316,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d82d79c98d9d30be3526d638e7eb2189","sha1":"3c1054d400925292bc9c0bdca6f9d6b4b8cc7d50","sha256":"1f379fc8801fe0287a907763ef57ebcf097aef6dd3773500df5f938aed097dc9","sha512":"2d2d3ca97dd5e68354ba0cdc97df4219597405b141f5e55d00597175403e4216a3acef1bd2cd99345b86e88b4cdcc5e72d8639508f5b8cf3b01faa9c802a1db8","ssdeep":"","tlshash":"c1212bda91348d65770b74b143f4a86abda90132075668711149c5e4df8ce2002d8980","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:33.866641Z","times_seen":2508,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ori-777play.space/images/logoweb.png","fqdn":"ori-777play.space","domain":"ori-777play.space","tld":"space"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ori-777play.space","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Apr 2026 15:45:41 GMT","end":"Sun, 12 Jul 2026 16:45:37 GMT"},"fingerprint":{"sha1":"CA:58:18:90:48:AE:0F:EA:72:9D:4C:32:19:4F:21:92:D9:85:E7:85","sha256":"30:FE:EA:83:EE:2E:53:97:6C:3B:21:95:06:DC:BD:33:CF:C1:05:BE:3E:07:09:E4:88:15:CC:1F:1D:91:DF:DA"}}},"request":{"raw":"GET /images/logoweb.png HTTP/1.1\r\nHost: ori-777play.space\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nCookie: PHPSESSID=8008af01a30ed4a74e23ef25ccf2a41c\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 50689\r\nserver: cloudflare\r\nlast-modified: Thu, 14 Nov 2024 04:58:26 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r1qklsa7Qs%2FyuyxLY6dpZU%2BLCDTV%2FuyQQhrvFBRKF1zUC6pejM4gGAI3DKJlPpbf6q6MIxPTv5c6ygfK1U6sq6UqsDOddA%2B47ih6TUfHqln4uwXLqLkuAbop8qkZi1UpaQaHmg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ede093acfb45687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50689,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 112, 8-bit/color RGBA, non-interlaced","md5":"579262714c94d956aa824820c0216543","sha1":"18180acb77554bc4b125682a9c8df4e371e10d4d","sha256":"1b60d4f8d5e462023efde9cfbdfe2ed8aafe4920dfb00bfd9399380d7b53ad97","sha512":"685c8e3c1631fd259191a43b35b7b6550063c163d800d56ebc59b34925b8a0e84f98f57974b78a87bcf28001db980a3b7680822303050fdce01734101c608837","ssdeep":"1536:kHuQYvcTSL89tw2i1DKlUkvJ8cPAX8Lg5KH:kOQOhiyrFqk56","tlshash":"6b330254d83ecfa31a3d78473091f3d309daee940152e58318b729542eac9bb8d3e239","first_seen":"2025-07-11T00:04:02.093511Z","last_seen":"2026-04-17T20:04:34.095418Z","times_seen":3,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":265,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"ori-777play.space","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.viva88athenae.com//slot-hab.png","fqdn":"img.viva88athenae.com","domain":"viva88athenae.com","tld":"com"},"ip":{"addr":"172.64.144.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ori-777play.space/","date":"2026-04-17T20:03:57.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"img.viva88athenae.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 05:19:03 GMT","end":"Sun, 05 Jul 2026 05:19:02 GMT"},"fingerprint":{"sha1":"F8:E7:28:81:16:CD:5C:05:55:D7:5D:43:F7:43:05:8C:E5:DD:0F:80","sha256":"77:7E:1E:2C:3F:F3:35:CC:39:73:1A:CB:AC:0C:3F:B3:89:E1:ED:64:B0:1E:D1:8E:66:C7:6F:85:D2:AF:FE:A8"}}},"request":{"raw":"GET //slot-hab.png HTTP/1.1\r\nHost: img.viva88athenae.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ori-777play.space/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 20:03:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1888\r\nserver: cloudflare\r\nlast-modified: Wed, 18 Dec 2019 05:38:14 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nset-cookie: __cf_bm=PQVc10gDsaE8wzVAd6j0HenElky0joUPabsWe7bswZk-1776456237.2472117-1.0.1.1-9pXFj9CxFQ5_UbyunhEPj4XscTqHARyZ5K5kKv05sBQkFNm06xFiYsGz5lfDAFDdlGZsy_r1mT91KsGh_Qp6tiJGxwSarDb98RDk5mAlpPxM4kh.BFJG6zkeGxIY8EJs; HttpOnly; Secure; Path=/; Domain=viva88athenae.com; Expires=Fri, 17 Apr 2026 20:33:57 GMT\r\ncache-control: public, max-age=14400\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: ok, orig_size=5768\r\npriority: u=4;i=?0,cf-chb=(89;u=5;i=?0)\r\nvary: accept, accept-encoding\r\nexpires: Sat, 18 Apr 2026 00:03:57 GMT\r\ncf-cache-status: HIT\r\ncf-ray: 9ede093abcf9b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1888,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"158c1eeabbd166126f46035ec5e6d457","sha1":"83fa7159d10da9989fc9853ee6f96ab57b065e83","sha256":"11bd40a973e0e088856ced2e923bb0badeb4291c9ea0d11386d9a469817eeda0","sha512":"457d8ae758976d87cfed9c13e6911a874d712790eea76995846aa183aca261c1bd7b0fb5436cc168e665ef490ce7cc2a36a3dc58ff2c1e263c7e511c885320c3","ssdeep":"","tlshash":"ed413b6071c9712115b952b2d860a7ef0e34f77d7209ab714686208d63131c69366150","first_seen":"2023-05-02T01:48:25Z","last_seen":"2026-04-17T21:07:34.029468Z","times_seen":2510,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":36,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}