{"report_id":"38da4dc2-4c1d-4ee3-9e5a-0874151f7580","version":0,"status":"done","tags":[],"date":"2026-09-18T04:31:02Z","url":{"schema":"http","addr":"diwinplay.top/","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"diwinplay.top/","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"title":"DiwinBet: Online Crypto Casino, Sports Betting \u0026 Prediction Markets","dom":{"size":240921,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (45271)","md5":"ab69a8e80c808af9f4a9fea76d073acb","sha1":"91c1582bc08e4c3a52f4e78071d00435edba98a0","sha256":"db0231897e7f51299deafa2bafc6f8a6d129a8c482246e9b5ebd8349d1a63fec","sha512":"e503e527b3794b154f21fd1c474c0bec3f39e68eaa1f8c8bc8bb1a7483b6226a8eadc611f63b282b01b090039167344a4d7906ba362e836c680fdaa43944f4de","ssdeep":"1536:2pQvLebx/c64Jysq7vaeh2hO5CLV5GnoN39UjmkFmdhq741IEHeRHe+HeuHekHe2:ZeMKmMmdhq741hqjrxgP87wClWrq2gpl","tlshash":"13340b741202057d602743d0f990f79fa2abd245ea97c90db3ec82d71bc6c94deb96d8","dom_hash":"domhashbb3e60a4e620fee11182892036bb7adc","first_seen":"2026-09-18T04:31:23.531327Z","last_seen":"2026-09-18T04:31:23.531327Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"diwinplay.top/","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-23T04:31:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"mycasinoapi.biz","ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-04","domain_rank":0,"first_seen":"2026-07-10T22:57:00.871632Z","last_seen":"2026-09-18T04:26:19.396085Z","alert_count":0,"request_count":43,"received_data":2896635,"sent_data":23862,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"diwinplay.top","ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-05","domain_rank":0,"first_seen":"2026-09-18T04:29:11.326796Z","last_seen":"2026-09-18T04:29:11.326796Z","alert_count":0,"request_count":22,"received_data":2680994,"sent_data":13007,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"op-api.gambl.bet","ip":{"addr":"172.67.140.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-10T22:56:41.726368Z","last_seen":"2026-09-18T04:26:19.369506Z","alert_count":0,"request_count":3,"received_data":3595,"sent_data":1735,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"diwinplay.top/assets/kit-C4Umz-46.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"57d24ba2c0340398383b341fa9ef0a24","sha1":"3ae8f7406e64f7e2f9e424e570b94c75fb0d169d","sha256":"4c88540cc772b972e61e656ab34bca146bb2ffe9b8070e069096fd536241f5f0","sha512":"46c0b64a6ede41f998f8153d0a893212281229a6a56c5d6184aa6cec1146b284f43a09d28036b5a9dc85f0a9dc4e7beb99bef915aa4148408b2d8b0be75475cb","ssdeep":"1536:ZOy0tNo455wjcQLgm2r8RDkGeP3BkTQMR453KTA3RDesHabWNsr0ggyvx90hFvS0:ZOy03o4PwjDWkUMWMAcqQ07yJyhAv8","tlshash":"0cf3c8f73640a72775b13b188e0ae28f6f9c9c52ccd8a44caae7cccb995186170bd715","size":169331,"data":"","first_seen":"2026-09-18T04:26:23.273571Z","last_seen":"2026-09-18T04:39:46.110015Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/icons-GFHLn4ny.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fca967d2dd597e3d5727784009cb1054","sha1":"f3ea5c6bd761c83e0f41c17ad6ef02cbcc87a251","sha256":"8277498b4bac55d6719daab91090d716ae959e7b0681ac2fe3740b1ce7679174","sha512":"f8844ffe14821a1f78697ce100b83f54cf9601fe3a158b75c13312d66edf05d2a9550380f782e188f746ff21af834d98958553548f69ea1767a5db9d83a403d9","ssdeep":"384:HmuQoAlifjrD+M+5ePmAqzJ8gKavOwZNMSn/XQ6afdLOxIMyAwmVo9W9qVGcH66n:HVAlifjP+M+5enqzJ8gKavOwZNLn/XQR","tlshash":"7692b76f8f88169e4802e68d1f67b0111fed53bc369a8892f64f9536eb52443dca3f41","size":21111,"data":"","first_seen":"2026-09-18T04:26:23.225937Z","last_seen":"2026-09-18T04:39:46.037966Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/vendor-query-D2GKGktG.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52becf48047a6525a3efe0a08e2f1d96","sha1":"5a2b2c2e91ef33e5038fb426fbaf032ffddcb415","sha256":"5ba0377ec0d40321f3cf6be6323b13ce1220e0f0d6d11e3668acefec46b2027f","sha512":"e164f8278e5b57d71b58e19fe80955553e57ef21d8688f53c34fcc07b252df43448d24e605c9cd31335ebb879e7327c24c4ae12b9fb48d0bfecde4323b930010","ssdeep":"768:sfrxg3hap4aM9hvUmU2yIpof9XP6Iv6GBk6Dr4WIsCYo2BUiEkFREQpiO2Lf+18q:eWU2MFoOE48Xzt9Sy8V","tlshash":"f503b8d67142e2273ad18191dc3e4125e2356914340ac06cbabcade7b963ccff5bea35","size":40820,"data":"","first_seen":"2026-09-18T04:26:23.189771Z","last_seen":"2026-09-18T04:39:46.032774Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/vendor-i18n-uHMRTU-B.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220575d9f465bdfbb7f82bda604330f0","sha1":"849644fdbdb312c4c0af8fc5d5c196175c4f8ee5","sha256":"7f9f4e1f26a795cd512ed330bb3dfe5e8fb0c0db46dedd4bcef52806b31ac7f0","sha512":"05715ccd0a0ebf3a0dcc2eba59b86bbcb0bfeb59aa63431c1ec9ac08a47211587c186d6a531b7982e1c606c65bef1d60e083d6fd43992f7ead2349da7e6f9d43","ssdeep":"1536:tbi7OVOGuNi+6EOl6ZG8N42fLm3NfLiaphW4:1JV4OcZzN42qM89","tlshash":"005319c971faa62643da40d530711408b739ad583448644dfe7dafd6e8d3a0a92fbb34","size":65350,"data":"","first_seen":"2026-09-18T04:26:23.261272Z","last_seen":"2026-09-18T04:39:46.05626Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/vendor-react-BggoXGQP.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b863726bd3dc5e2dbf155e56cedecc0","sha1":"037c8efd902070937775ed233dae947768b8ed1f","sha256":"61724c54eba9beec4961bf4e1059427a47fc260652f43efb348232fbf8e1f8b5","sha512":"c3a9b9c97c3d6e2bbc40addaeab466242c49cb09ca06de6b30884e6053caff4ae1fed22924cff5d0784f35f95ff7ef0810f33dc1f1a94dd08143b6bc69f0c8a7","ssdeep":"3072:zuHaZ+QRjAcwFp7JHTZmSjttXnHUZfmOmzMRMwLfcc0S6IUinO529oaLNtET:zuH8+G801ZOOmKv09d892","tlshash":"d7543ce831adb5265fb312f540af010772782c37185d8860b154eeae36b584961bbffd","size":285095,"data":"","first_seen":"2026-09-18T04:26:23.218482Z","last_seen":"2026-09-18T04:39:46.053612Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/index-CVwvSGG9.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03de5c76bc984df8b89cb6161761b1f9","sha1":"57a7d6d980392239c5838ef04975c0376832973e","sha256":"24a5f4b374ed3783bb86aa6610e330a8f26c940056b7350021044d63c3c61cb5","sha512":"a6b8edb994348bc7d979498e80ea25f3df04b1361ab3470185f2ee9f11d39f078910a8a743e745788e6761daba8abcd77eaa5757d60c1efc2d83f166a4a37c10","ssdeep":"24576:Y5wHfHYMKM0visuagpGRLTJ7tR/og3kFIvTBBMe:Y5wHfHLKM0visuJpGRLTJ7tR/og3kFIZ","tlshash":"1c156b84b181b9fda7770bd564af9029b13e2f24f91ec480f2bc58253a69041b667fdc","size":919921,"data":"","first_seen":"2026-09-18T04:26:23.201868Z","last_seen":"2026-09-18T04:39:46.069174Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/en-wHC-uAN6.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2ba7c5a110181c74804781155ea369d0","sha1":"413db40eb0542f4bf39ee5135c4e77619678e3f6","sha256":"5ff607b5bcfd6bda50e6f47ba87a7bba0a560f7004357d7650f21f82c870dd75","sha512":"8125ca427b857eda8c2e443eacf0372f6672e69b7fd246a66fbb9dc75a1c20f057cc48c0002f8374af0a7afa86919c93d881a5b060cd7932ce78547b1695c2b0","ssdeep":"3072:oy01C7JW0A9+r6WEl72GngKhnA8VcM6KvUiuuwW:Kz9+rO72TKhA8VcMXvUiKW","tlshash":"fcd33a0b871526bd0aa313643ace3ad577784a25d1e2c455ccdd822c13b796ee13fbe8","size":138853,"data":"","first_seen":"2026-09-18T04:26:23.250704Z","last_seen":"2026-09-18T04:39:46.077899Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/ChallengeDetailsPage-BqC0TjNr.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e75c5d1c77323aca5b4ea270d0be694e","sha1":"86dff24ab23a5fbd13fd8393573c7ac096020aa6","sha256":"58e28cb49a639dbb8f1e942021e2f451e3f147fc989f654c163e95dd4c3243d0","sha512":"cd43d6b687b768685105030186f6e5d875277dc9ee12f61812f26dad9a1dd258b3941f5f7dde8adeedf3fe7d79a0b4ea187083f0ee6fe947a9604eed805f1fa2","ssdeep":"768:zPFuN0dEbgSdTZKe+hq2hb9yKj7iB2VHbBBLhNiBPP9yOwQ6701TuHAzE:EaaYOK7nX","tlshash":"e4e2e86c9042bafee93b8dd2742e745970352728ee3ead81f4be70216d9800535d6bdc","size":34178,"data":"","first_seen":"2026-09-18T04:26:23.270413Z","last_seen":"2026-09-18T04:39:46.111652Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/country-catalog-C1fbRvH_.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e180855c561c4200851aec17f6f5e54","sha1":"fd28ef2379755feb90da105219a314d279c42432","sha256":"d641a63700629b76e81ae830ee4d7f9a667e27e484a0e87aeccf68749e8839d4","sha512":"80ce4eaa6e5e247d1c4965e68857aefc254f96b2f3e5cb6da3bd71eb3a80da5d50e6e7a28b9ac9737349b66a9248241df08fbd25662056025a1ef14c86387c13","ssdeep":"768:KGg4iTHQZr1GQUiYMfZqKwOm5LErHRL8YgtNNrsrc993pI6i5n1ZXquMvwV1AzHH:TO0aYgFrsw99K6fdwcvuEWv8qJaJl","tlshash":"f273b6faa0b9272e5f3b3971b09f8b955b9c1a01b485cf8664dc0f364e21da021b5d3c","size":79559,"data":"","first_seen":"2026-09-18T04:26:23.19113Z","last_seen":"2026-09-18T04:39:46.061886Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/SupportPage-BpYLRYaH.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"968e75d6d00618fdd8eaec719b23e059","sha1":"3d598328acc593f07615374940ef123043d33405","sha256":"34d05310ebbeb4701204def88fbdc8379a8f17f5566401c79713a9d5475b5318","sha512":"1663b6551581ddc4d5ee1c5c8ec5a05c0a0953db3c197f7e26fc1554a61a55dfdc032961ccb7488bb0b7a4106f280be246fb060a78eaff10e64f0647d052fbc3","ssdeep":"384:gfAtVTWW0CpP/wYjT7LdpLpLAAl/MMpHxw:gfAtVTf0COYjT7JpLpLAAlMCxw","tlshash":"de82a540f152afbefb371e98fa2ee00971190f54ca2fca11e0be742555581a1b95a7cc","size":18179,"data":"","first_seen":"2026-09-18T04:26:23.294288Z","last_seen":"2026-09-18T04:39:46.120269Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/TicketBalancePill-C7eK8DN4.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d736964c744d864bd638a537fc6a327c","sha1":"231a93e7e8a21f18da35f9e79818af845f76d3f8","sha256":"244eec454e5bdbb512e73b8a1bff152b86455276c00229cc7fe7334510b7968b","sha512":"333d1012d00c468270cf872b98ae2ef4ce55cfaacdc728884cb93acedccfa87e4987ecc9b39ba7fee7607638619f7e7395a737cbc026c917e27a758131c185ee","ssdeep":"384:UJzY5qUIvXl6qa5ITYIA33gq6lJKxZmMIQ1SqjyttADuWh:UVYMFPl38ITYIAHg3lJKWMIQ1SHtiDp","tlshash":"79829644f182abfdf93b5fe0b41d6418701c1f64eb1adec4d1b9e8201a68199b997bcc","size":18128,"data":"","first_seen":"2026-09-18T04:26:23.28496Z","last_seen":"2026-09-18T04:39:46.107692Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/WheelsPage-Devdj2zj.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fb163c7f6e9e853f600da1c2fd1d7e1","sha1":"059db17350d2ab203ab18bfd2f03c13169a0c6f3","sha256":"7802e2fcddfd83a255ce5a4e4de17245225e17db11d2f34981de920f6eacbb23","sha512":"de520710f309fd74217a6cf750edd5d75f72ab51bab8bf2c82c4a59260af4e1ab9c413a86970d3479c4816334f80a1b79f7ccd9b75b8b186a4fe938a5b9f0ec5","ssdeep":"768:ZpydcqADRibviF2TES67WRKFKvhfoCbztmSZlHiDhlC46l:ZpgqzSmWRPhfoCbztmSriq4e","tlshash":"7fe2c704a102fbbef9372de0fa2e9409701e5f58d22f8954d1be28112aad0d97757bdc","size":32658,"data":"","first_seen":"2026-09-18T04:26:23.282085Z","last_seen":"2026-09-18T04:39:46.114118Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/GamesPage-CHWONtI4.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3811973c9cd9a78e8584124cb3d0fad","sha1":"c0c947adda4037f493e2c2e4b7c17c8d6de3814a","sha256":"d635a8fe096111fb04de53efc42aa6796521030d6f9a90059610902e73591949","sha512":"2909cc1761aa7a76cdb10825431ae3c2837f2b0a7353d54450ae4e10ec4cbf005a17041ee55a00bc1ff8a9aeddb756d12feb4931aa57c23eeb2c4c2c4db63000","ssdeep":"768:Ygz5oKj+qZkyUWKPHMuyo6V+CUZt7VdrqLMVbZaqglUEXbR1nTG+7T+LGXw0KbV9:RxbUPKqVEHQPX","tlshash":"68e2d944f191fbede97b0ee0fe6ee01470190f68eb2e4894e1be281119641ad79277c9","size":31287,"data":"","first_seen":"2026-09-18T04:26:23.268734Z","last_seen":"2026-09-18T04:39:46.116976Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/AboutUsPage-f7j0b71K.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e030cc56143320f47d0496e363d67ab1","sha1":"41fe1cdb74c367b39e2be8c030c19dc959048469","sha256":"86a74ad3c5918e3fea31d4e95401f8f1956c316d99f961020432ee6e36d6a6f1","sha512":"2f5642cd1ee214feb19da7d1d4ce7b9107643336a17ed4fae79a3115924596c5c65256e1721d549b381522b88e7f01c0ff9106c8ba9a35c09cabb08c4e2cb119","ssdeep":"768:mPL/YynKQAHRTsX8/WhcU0m0VLf4Ftx/e5a+cuHB:mbiOMVmxGR","tlshash":"68e2a77ca000aeedf93bcd52791db008b02a2b69df3a8d44fafe7011d9a545139d67d8","size":31274,"data":"","first_seen":"2026-09-18T04:26:23.283392Z","last_seen":"2026-09-18T04:39:46.110853Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/useGeoCountry-CNYSgs8F.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5907d35419753354864cdd2cfd3b3700","sha1":"fb353842e97211483e22c50b159ca1f7ea07dbf3","sha256":"537035d257f0e5233e01df1a5c6bf29716162552eb96de51a462d5daaaac6a09","sha512":"9989d262d62219a0310996af496842a0aff18bf9d8fd906916a1f119b3935a60d97b2bd5f2b588e8e578ae77b7ca510f14f0e1159e72c37a1d936b5ccd76047e","ssdeep":"384:Lc/LN/4D3EwCEflJ0zfjMaAJWECyeKxh2hZ88yBwvQPrbMxXJUpSMxo40gmqZcrW:LEKIyflCzbMa2UKGhD+wIz4XJUEMn0W","tlshash":"f8b22a44e105befef9374ec47c5ee018710d5f18da6e8ca1e1bdb8215aa889675a33cc","size":24630,"data":"","first_seen":"2026-09-18T04:26:23.286591Z","last_seen":"2026-09-18T04:39:46.118278Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/BetHistoryTab-Bhi6CD_h.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d2ba2b39b2e8e52956788b28d89def6","sha1":"3ea2c23e223187fed28a1e3d13f37b41da840b2e","sha256":"061d6c7e7a85690900d1cf819f95ee04aa6d4e6c2a1390ed2dfc059246e4f176","sha512":"8b4cdad7fb530e6de8af0a16f90dc91d802ab910eb8518b7821d4705a3c2ab8093cfaabdd5affe3d491f38c28227036235b34b4a0d3f9f0e6bf9ec20a820817b","ssdeep":"768:VU84gc9/g+akfSoOT+pDxqQKkb/U+mDPwJHyir9CKILHDxqpgSg:VC/g+/Tq6bsraHrwKILlqpgSg","tlshash":"c223c740b042bbfdbf3b2dd0f92de00c711d5f98d92f9994a0be68211aad0557a567cc","size":45626,"data":"","first_seen":"2026-09-18T04:26:23.290771Z","last_seen":"2026-09-18T04:39:46.108403Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5fb16286dcbd444a866573017125e001","sha1":"90d0256d8d59ce786cabf3834b7418c8d4953961","sha256":"5aa2548b526d4036503af6bc1316037dcfed28206e2ab9ac3728d0a15bc00046","sha512":"b0871bbb37283222e1a8dcf1f59271b7e34d398a4a974213c1988086c1d750fac1f9c87438b3577295304573ea8e6e880537fa3c6b0462c32f81779bb246d7dc","ssdeep":"","tlshash":"17215b44ebf569e5013370380a0f2404e6209467052dbeb07f9cd9a16f9452d87eeb55","size":1132,"data":"","first_seen":"2026-08-03T05:12:55.574985Z","last_seen":"2026-09-18T04:39:46.109322Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/SupportChatPreviewBubble-HSCm93Sh.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"163e97b102ba3f9375cb150f56eb64e1","sha1":"46e4a18a63fabd239f53e7a8e27940373074df7a","sha256":"053d15400992299ada5233c0c7e088475b1602d0d378ee1b243988a35dae442b","sha512":"f61c678c65502e7e3a43accc963b79a30ecb670f9af043fe299b71dbe4faa5ea5202d813735a2c015ba916814e91cb800707318868244613f02ca6d13494a0f7","ssdeep":"1536:AjCQeZMS5TKs+jG1ZHhecTYl3Frze2c7XFLO4mSYNDMz9HC:AtbSFKs2iAcyJe22YYC","tlshash":"1cc3d7dc788178a9639b44a590ff500bf27d6d4b700c84b0f1689dab79728696263ffc","size":124755,"data":"","first_seen":"2026-09-18T04:26:23.289014Z","last_seen":"2026-09-18T04:39:46.116277Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/ResponsiblePlayTab-C3u0re5A.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d65df3e3aac187c7d810671ce5e2a34c","sha1":"4b5904e6e9669d8acec123b3beab8f1e4498bf40","sha256":"357b0e866b1916c9727e4a39c95fbab84b3c6ec75eb49f48fcbd089e15ae1d91","sha512":"a8fcacc80230a266c352c847eb79c56b55a771d401c88f53c3063a841baf4fd6e2488025eaa11f1932c8efd5c7101a5be80de5236562b7631824da7eba0337a5","ssdeep":"192:gCGd28M9JqsRLsHci0F2+tDHagysr6vHExyMOJ1riJ63+ldpCJ1N3UxvV:gRdvsd11VHjysmPERi1riA3+lk38V","tlshash":"5372f944a005befebe3b6ee4b56de418301d1f80e61ed494e0beac212a580067977bdd","size":16130,"data":"","first_seen":"2026-09-18T04:26:23.277893Z","last_seen":"2026-09-18T04:39:46.123546Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/ProvablyFairPage-D60eHsMc.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00b327528a248553623a86c021e119c7","sha1":"28db4f3423b93d649279a249305e7104f29b5dd4","sha256":"4cb55076d85f10ebc27fb4bd9a6fbe9d67b03676ded3ee5dd6076abc908611b9","sha512":"49e66dd1d1d9aaefe368c7074fcd372f9e32d5f82eb122ccf3d29ecb59d598ab50d5c34ec531bab27bd8907bde95fd0c1a9235e1aa18322eab40b23fce0ac1c3","ssdeep":"384:UVwI29kXKBkmVFfqUr5uAANHz/At/DKi+Y27ZslZD1:dI2mXQkmVFfJrfANHz/At/DQ7ZeZD1","tlshash":"b742e861d081fffe29271ee4b92de19cb00e1f6cda2ac590a0b41c051f6d066ba037dc","size":13029,"data":"","first_seen":"2026-09-18T04:26:23.272221Z","last_seen":"2026-09-18T04:39:46.117631Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/VipBonusesPage-COEHipD7.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83f37ee019d943b482ac088954eaf933","sha1":"66b0941dc01c70df43822d0b4d1b4565808cd7d3","sha256":"e6176c155e4fe5afd218ba8eedf6bff0572f6a8802ee736bbd32f5301092e56f","sha512":"82af0b8ce0b41e0f428da9e32f879730a9ff01eb93ac818f55a0f47048dc1493b5646aac02d75e46a84c37e0e25349d188e673621bc0373efd6f7de0f9bd9c94","ssdeep":"768:6lqaWBZ59oRZbaEvO1CsneITl/uwTNtn+aVKZ7nKfjU0c0uU5eVX/2zz12M2pLyC:6lOBZ59oTaEvcneIlNn+aVKZ7nKfjU0s","tlshash":"6ff2ea446140f7fdb9371fa0f91de548702f6f7ce92bc8a0a1bc58141b981907a9a7dd","size":35548,"data":"","first_seen":"2026-09-18T04:26:23.280604Z","last_seen":"2026-09-18T04:39:46.118909Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-09-19T13:42:12.668506Z","times_seen":418378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/SupportChatPanel-BdLZUGY4.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13ad0491a02f0d18f070cfe539a7c9b","sha1":"29b015fae4081151ce027fb84676a01f9f39fd4d","sha256":"0555428dac7a11a11a3b065a669f794fc8430b6db4802a6ba34b406634abd7e1","sha512":"9927e45b7ad91c9a7d9367920d8f8553718cb1a6ee6c3eebc3e986cb817d974031c9d4ae49d99f1ebe09e964752942854fa9aa97b0574586ded6c7ec6d77c461","ssdeep":"192:9sLRUK0ix1N2pWFMLBVnHrIs/sfG71Tue068NnTJr2yBctpJVFNRAJx7wOFD:GyK0ixv2pWMnHrI3e7lueWnTttBctHVm","tlshash":"3c329504a002af7ebb7729d9fe5ed008b0194f98d76e9d11e1be342226890d5bd673cc","size":11613,"data":"","first_seen":"2026-09-18T04:26:23.27511Z","last_seen":"2026-09-18T04:39:46.122563Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/AllAwardsPage-c3YKtZs7.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd6004d181ea813914dec6ebfd541ee8","sha1":"2299bac800713a2870310696ec5c776832f4ef24","sha256":"de7994d6db9056fdf958bce5e560ae06aeae5da8d34992c379a8e1fb9c2a557b","sha512":"39244429f86019534a98842d8a5d53b05f8ecfb9253dacf73d8f70a6211d18b4981e46caf796e17cb185263b5d0575163177958c0102b19803cfa0e0a06ffb84","ssdeep":"384:1SJ5teyHtfIdNaVHiFUo5iJCGMZcW5FDqE51TamHmgxmYcgubS9Jz:18nfIF35V3ZcW5d1TamHmXVgubS9Jz","tlshash":"2972d91cd141faade9378fa1795ef049f02a0fa8ee3e8980f1ff701558a115066a97dc","size":16415,"data":"","first_seen":"2026-09-18T04:26:23.276343Z","last_seen":"2026-09-18T04:39:46.124402Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"info","text":"🌐 i18next is made possible by our own product, Locize — consider powering your project with managed localization (AI, CDN, integrations): https://locize.com 💙","filename":"https://diwinplay.top/assets/vendor-i18n-uHMRTU-B.js","line_number":1,"column_number":33445}]},"http":[{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20olympx.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.619Z","timestamp":1789705829619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs20olympx.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"7606-19e87ec8ba7\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:26 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007884\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=02AU%2BiWnJxQ1XZ7BeTVfJZtbz8BjlbEIk%2B%2F2UrfV2GP8zo7Fk15IAuYnfX2AtX5yEpRcJ0jpotyVKYlTxgb9ILLNIBDjPvb4RVcBoH%2FwWitAAxOaibrWEzctBV6mc5enUKI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b2d9b5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 30214\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30214,"size_decoded":31666,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9514f4cf62ac519e1be2aa9c0c76aa36","sha1":"6e303bdd882e0a4b82139db82429a5282f6e303c","sha256":"d3ff28472bdabcf09e6429242c9320e819e993cbe0119c667e11a834235ae783","sha512":"65afd430152c1f5e3aa462ffff635e36653111d1d61b0c22d5675dd7eaab99583ad3392a2b7ad63daae10f448ede601aabb7603e041c61fd1c2e459fedc4627b","ssdeep":"768:PYAFoDRfzqaU0msv6kboS2FA+2DMAsKR5FucxI0c/liV:DFq+aYsSQoSH+2D5qcaj/","tlshash":"47d2f1c1a9326d244f05ee992bab0939d8c03e25b5452ccde23bcec6735d6f6837125e","first_seen":"2026-07-10T22:57:05.857918Z","last_seen":"2026-09-18T04:39:46.043163Z","times_seen":69,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20starlight.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.622Z","timestamp":1789705829622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs20starlight.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"8a02-19e87eca807\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:34 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007883\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQIHWhxb94OZ8BAyFDhdEMorvt8VmJYc%2BgOp5cThToPys06eh%2BC0PxprQMGcNESSpeumM1qY7KScdLyPD7B9T8fh9iZojrQkdeKghqC3FM8fSKLuiUYi7IKxObXsvB2%2FigI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b3da05697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35330\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35330,"size_decoded":36780,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fb70ba24f84087137f07fd3cf86867e2","sha1":"6386b0c6ba2cb19855f820832bd93519e0681bd0","sha256":"779f8d03af2585cdd3584a77c86785ffbe20b691ee740d604aa92bf33abc2c89","sha512":"22cf4a6685a034663d99dc36632d8b1013cebcaa19ea5f6cfa3ff3a3b4851bf3ef6bea86a8768af559b15fcf6456cb630f39258d5042639ccd814affd0d6d0f0","ssdeep":"768:YW2SZkHXcFP2HKuzbO3poGubgpsP08oOFSGIw2rMO/7F/fceme:LZiXcFeJY1u8AoNGIw21DF/f7","tlshash":"51f2f1d48b4ca3d1ac94212e5e1f943232cbd78646ae4e90412b63907f2cb67673b9c7","first_seen":"2026-07-10T22:56:48.046937Z","last_seen":"2026-09-18T04:39:46.039576Z","times_seen":79,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/mines-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.629Z","timestamp":1789705829629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/mines-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"cb6a-19fb30bc3a8\"\r\nlast-modified: Thu, 30 Jul 2026 12:42:00 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007883\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZaCmjlR%2F7V1jzFr5ArGtpySrbK5SCNDnGwiPkt%2BHpz3dvRUrNkaiidIggP63AtVafl2bm5fa59WK%2B4KfnRd7NQhLt%2BzsrG%2BGlO7unf9vdAgVQloCHoSgN%2BFv7EUruwS35DU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b3da45697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 52074\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52074,"size_decoded":53530,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6e6dd7c5d9beb5bf6c03482540c5fd84","sha1":"dab2e778a18045a007d7fd1bfcea317c2cdc2996","sha256":"557723694980cfc077065df089e3e1353ae359d284052fef12785ca9769e9dd4","sha512":"76181aa202b53d72e2dbebf89970442ee3daa78c116f0e7c247a826fe7257dd875f58e69148cea7def4b84f67933e262cfe63a36a7858abd728bb033ea26ff64","ssdeep":"768:7Tei0rT4SJCfjAyXGrQk7U3xjWBZM/ZS7CkkzkD1G1yr+v3NX43hCV4lAouCsY0C:ui2CbNXoQWM/hDzu1G1yOQo6r","tlshash":"42330248edb40b80c272ee7d469177b1cb24ff69ce4ba85f6484b39b307d5a2d863854","first_seen":"2026-08-03T05:12:55.403392Z","last_seen":"2026-09-18T04:39:46.065232Z","times_seen":41,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/country-catalog-C1fbRvH_.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:28.196Z","timestamp":1789705828196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /assets/country-catalog-C1fbRvH_.js HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nCookie: __ddg8_=Dy659alI1FqP3scG; __ddg10_=1789705827; __ddg9_=162.158.222.83; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=dOzlYAOfZgR5HXiB; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg9_=172.64.209.56; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Fri, 18 Sep 2026 04:30:28 GMT\r\netag: W/\"6aaa9c15-136c7\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V9%2BxsQ8hDJ2sXbzaFaGmZIoJKVKzDsUllXfJZzwEEhvnl4tFRsDA3do5pSmsfwbH4kx3LCwYss%2Bt%2B8yibH6RR0LACpQn4m%2B7iRwxq0Evc0qJJT49SroWkjWshmEdYWUR\"}]}\r\ncf-ray: a3cd9d923dbb7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23270\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"dOzlYAOfZgR5HXiB","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=dOzlYAOfZgR5HXiB; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg10_","value":"1789705828","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg9_","value":"172.64.209.56","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=172.64.209.56; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79559,"size_decoded":24402,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64808), with no line terminators","md5":"6e180855c561c4200851aec17f6f5e54","sha1":"fd28ef2379755feb90da105219a314d279c42432","sha256":"d641a63700629b76e81ae830ee4d7f9a667e27e484a0e87aeccf68749e8839d4","sha512":"80ce4eaa6e5e247d1c4965e68857aefc254f96b2f3e5cb6da3bd71eb3a80da5d50e6e7a28b9ac9737349b66a9248241df08fbd25662056025a1ef14c86387c13","ssdeep":"768:KGg4iTHQZr1GQUiYMfZqKwOm5LErHRL8YgtNNrsrc993pI6i5n1ZXquMvwV1AzHH:TO0aYgFrsw99K6fdwcvuEWv8qJaJl","tlshash":"f273b6faa0b9272e5f3b3971b09f8b955b9c1a01b485cf8664dc0f364e21da021b5d3c","first_seen":"2026-09-18T04:26:23.19113Z","last_seen":"2026-09-18T04:39:46.061886Z","times_seen":12,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/public/currencies?domain=diwinplay.top","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.149Z","timestamp":1789705829149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /api/public/currencies?domain=diwinplay.top HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://diwinplay.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"151b-S546kaTsd1lK+hDpXG08pOQjfRI\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8KRQTw92MfVFQj3Pm8Pdl8E%2Bw9%2BmluWTJJ7n7tFOFbkNrSnO9gDa77Qbamrc94%2FCk2c8OwwvMqD53S6TymyobjYRfkCabloJy1JPfB1mh0onyPdhObtxNB0Ce41PkFeIFXg%3D\"}]}\r\ncf-ray: a3cd9d983d635697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5403,"size_decoded":3023,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"78a7a4ac684712c5d6e4f195abc54818","sha1":"4b9e3a91a4ec77594afa10e95c6d3ca4e4237d12","sha256":"7922ee37128446ec1c45d5ee5130f320b6293e7b54db600d61ed9f216f643618","sha512":"7edd66592a72b57e93ebf76c55a57dac8123334696358eb71b9f2287d4b9a2e609739b682eff583ccd85237e6e88c2ce152c43a6d381c6d0046a0a1dda3ae0f9","ssdeep":"96:INaZmeQy/YfBz5QZtQwvM18E+gVU7zP6S1Rtuy1B:IgId5SQT5VUf71ruyv","tlshash":"6ab154af782d9e6f4617fce2104f4fed6639648200cd5ca96ed90a7c4382af4426b774","first_seen":"2026-09-05T00:59:11.942421Z","last_seen":"2026-09-18T04:35:19.684053Z","times_seen":6,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-new-year-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.611Z","timestamp":1789705829611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-new-year-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"1730e-19e1889dfa0\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007884\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=52yTqOLFcSMj2jiHsiUBltaINC9YZvQigrOxbxrrHT0K%2BvQS04PzzeSKHUwOqsX36jbXGWsS5lxDia4cF839JkeEm5rB0ptu2RhfmVI9%2B1UyEhj1%2FoEIO419MRVB7Fu4Vi8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b1d995697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 94990\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94990,"size_decoded":96441,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a63fdbefceb85fa12b3fbe163536ba21","sha1":"1aa6d1ce85bed8959bce57748684be24725ddfd5","sha256":"372724c2ec10fcfc1068d6b19eb189f5f55a977ea9d7c559342e40282cf1d71e","sha512":"3a710b036de4629febd15903a03c98ca13002a4368cfa5246f7bd983b6269acfe02f20408d6eca115b29027ee60175dad8d0f78ced875fbeebaccb1addd5d528","ssdeep":"1536:VdFXCx/pEG1NBLws9R9tuQcpEkCTnWZf1Qs3D+y6yRCPXB9jCbNmDOmTCSedWViU:dXGqGNLws9P4QcpdCLWZNh3DP6bB9jg4","tlshash":"95931255ef9d5db1ef56df39a494213ffaf3247a8f980149904ca9d0a0018ef304d6ba","first_seen":"2026-07-08T18:54:53.805092Z","last_seen":"2026-09-18T04:39:46.058636Z","times_seen":99,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/mahjong-ways.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.639Z","timestamp":1789705829639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/mahjong-ways.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"286ee-19e9f372430\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:11 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007882\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cwuyndVHxmWF5syJ1baaht5ykLxcQTKl4TFfmb7RHBygFhgr4SIBSQDMFOixeZtqVQcKabX2PeC8xOksNZV%2FPlqvgK5yi3Ky%2FCz3zURqGa0MKE61KzhuUXee09tOZJozB0s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b4dad5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 165614\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165614,"size_decoded":167064,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"95d68880948c873c58ea66e23474ec69","sha1":"6631b75dc45db3bcf97429f32a1ad56bc107293f","sha256":"7205c06940e908eda5afde23f70c4e6fdd86c1a2cfb6fc3630af5a1471c4fd87","sha512":"62090b6c01be59590f4c5c87c95229dc16dfdbd58255da020214914ccd661c07e97490a4d9556a6fb7439db81e22e66623bab1041f87cb69dd09198aebe92624","ssdeep":"3072:bJ8tGOuljN80yHozDPYzZHgpzv0sWptTY5twl2prCveK118JQtRyvunMU:F8ghljmo/wJOF2RiwleILymMU","tlshash":"d0f323c1f4f81af8f653986680cdaa4b5e66a9b62d1bd111bc429b2c1ec0867e3743d1","first_seen":"2026-07-10T22:58:17.931148Z","last_seen":"2026-09-18T04:39:46.096944Z","times_seen":32,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"op-api.gambl.bet/track","fqdn":"op-api.gambl.bet","domain":"gambl.bet","tld":"bet"},"ip":{"addr":"172.67.140.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:28.794Z","timestamp":1789705828794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gambl.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 14:50:16 GMT","end":"Tue, 01 Dec 2026 14:50:15 GMT"},"fingerprint":{"sha1":"BF:D6:9E:0E:84:B6:96:D4:23:02:C5:FB:A5:C3:05:BA:EB:8E:02:CF","sha256":"0E:9D:A4:F9:F6:A2:D5:78:C0:87:12:5E:84:76:3E:11:68:10:54:21:F0:F3:85:49:6A:EA:32:25:9C:BB:44:98"}}},"request":{"raw":"POST /track HTTP/1.1\r\nHost: op-api.gambl.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nopenpanel-client-id: 3ad6ac77-f30c-4a99-95ca-7c2a88051ecb\r\nopenpanel-sdk-name: web\r\nopenpanel-sdk-version: 1.4.1\r\nReferer: https://diwinplay.top/\r\nContent-Length: 395\r\nOrigin: https://diwinplay.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":395,"data":"{\"type\":\"track\",\"payload\":{\"name\":\"screen_view\",\"properties\":{\"__referrer\":\"\",\"domain\":\"diwinplay.top\",\"app\":\"client-new\",\"app_version\":\"05ec5587\",\"build_time\":\"2026-09-16T13:39:00.373Z\",\"is_pwa\":false,\"viewport_bucket\":\"lg\",\"dpr\":1,\"tz\":\"UTC\",\"sw_controlled\":false,\"route\":\"/\",\"__path\":\"https://diwinplay.top/\",\"__title\":\"Diwinplay: Online Crypto Casino, Sports Betting \u0026 Prediction Markets\"}}}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=rVnK47t6QNjeKK6H; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg10_=1789705828; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg9_=162.158.222.97; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg1_=8IhjJao2uP0nLtgZ5F5E; Domain=.gambl.bet; HttpOnly; Path=/; Expires=Sat, 18-Sep-2027 04:30:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 18 Sep 2026 04:30:28 GMT\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rbYjkcBjzhgB3v4yvgPgLpNen8Ebb%2FSAP1Rt9aMj8sfV0ejzwrxHMC9XiDhZfw76QYtC1PdcpIK9Be2Pyy6n%2BCusBUJJXaY%2BMoK%2Fd%2B0%2FS8%2BWA1Fe8%2BdYbq%2BNLjLFTOyuH9tM\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: a3cd9d96cef656b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"rVnK47t6QNjeKK6H","quoted":false,"path":"/","domain":".gambl.bet","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=rVnK47t6QNjeKK6H; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg10_","value":"1789705828","quoted":false,"path":"/","domain":".gambl.bet","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705828; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg9_","value":"162.158.222.97","quoted":false,"path":"/","domain":".gambl.bet","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.97; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg1_","value":"8IhjJao2uP0nLtgZ5F5E","quoted":false,"path":"/","domain":".gambl.bet","expires":"2027-09-18T04:30:28Z","raw_expires":"Sat, 18-Sep-2027 04:30:28 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"__ddg1_=8IhjJao2uP0nLtgZ5F5E; Domain=.gambl.bet; HttpOnly; Path=/; Expires=Sat, 18-Sep-2027 04:30:28 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84,"size_decoded":1208,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6dead23d2cb9a6398da2374f0f924ab3","sha1":"3bdb10cdbfc55a6663ba786f8b98d14aaf9360f6","sha256":"cb247b8f6357239fa9e7fd125400dc7273558576f4f4306935c5c1f2bcc5eb89","sha512":"6cafe02945c339eaf058de437ae8b399d082c2c136d3a86e3c7ad674dcac036f28f988cd6fc3c87b7bca9ce15838f9bd6b5ab5415c24b74cfd8b30fea5aaf681","ssdeep":"","tlshash":"eaa012c011c048f90c1440043e540130787e810062b051d041f9c108065458059106a1","first_seen":"2026-09-18T04:26:23.188504Z","last_seen":"2026-09-18T04:39:46.106167Z","times_seen":12,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/claim_reward_wheel_collapsed-CjB1xrxx.webp","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.124Z","timestamp":1789705829124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /assets/claim_reward_wheel_collapsed-CjB1xrxx.webp HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nCookie: __ddg8_=qa3PEjUDRhyhuXZO; __ddg10_=1789705829; __ddg9_=172.64.209.50; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=bagmtX2PUs03Ktb2; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg10_=1789705829; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg9_=172.64.209.36; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: \"6aaa9c15-5032\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VF0gN0y%2BI%2BXQJ%2FO%2FyTnf815i1Myqge2Ke8GkM2Aub5emGQC5Bz99Wqkc0eMjuMrBu%2FZ%2B8CFURbJUDs91z3ayvwOgHIOuFHDQUKC6BRw14UAk%2BC6HGMWBlYtfOIvrmwYt\"}]}\r\ncf-ray: a3cd9d980ded7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20530\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"bagmtX2PUs03Ktb2","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=bagmtX2PUs03Ktb2; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg10_","value":"1789705829","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705829; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg9_","value":"172.64.209.36","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=172.64.209.36; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20530,"size_decoded":21627,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e82170d3185fe5797f5601892a2e68ac","sha1":"780765becc3b0efb388c6470981c7f3cd4fa3ed8","sha256":"7a20e9592f3cb2efc8d490615c6bdd6e8813e8b603a5138b98b17d9afd5fae5b","sha512":"da601cc1d2988b1fff57ce36ff157411611bb9911396982f58e0f84c55546f7510a428bb241254edb0d1b15544a838e6543bb6338afcf619185a119633b90db5","ssdeep":"384:BfIFo32fA3xAL0TX7eG9YGd1mxX5l3s5drsN9piGo8WHstMBtFDiIy:BfIFYwIn9h0p3s5dwiwtMBtFWIy","tlshash":"4a92e10e4a02ed2c358a798f5a9d1e0e64f6df4133394d8e647fe32488bf8d1d5a1279","first_seen":"2026-08-15T05:35:42.919832Z","last_seen":"2026-09-18T04:35:19.596366Z","times_seen":19,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/panel-bg-DTJMRmhA.webp","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.132Z","timestamp":1789705829132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /assets/panel-bg-DTJMRmhA.webp HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nCookie: __ddg8_=thyrm6erndomSytD; __ddg10_=1789705829; __ddg9_=162.158.222.77; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=eB69c3s5YrP72Yyo; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg10_=1789705829; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg9_=172.64.209.60; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: \"6aaa9c15-7c92\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XpnKZFzIu3qj2T0PQ7t98E5S%2Fz39BXjRru1MEvy0vGDiR%2ByXjxvavRRC6X%2FMUw3GBy120uqHgknzXJZq7CqX%2B2gTeXMsO4s6T9Zt%2FZBiRCeDfbypwzj5dIcv7BAm31AK\"}]}\r\ncf-ray: a3cd9d981dee7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31890\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"eB69c3s5YrP72Yyo","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=eB69c3s5YrP72Yyo; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg10_","value":"1789705829","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705829; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg9_","value":"172.64.209.60","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=172.64.209.60; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31890,"size_decoded":32983,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a56d6addd254e936486aaa20103cc39","sha1":"7fc2d22b0532e5463ed856fd2da24b0961538363","sha256":"005b6212026c79d26c2a330231c97e9b1f583c3c529857e6e9d629b0b0886c37","sha512":"8f478c05f773a4c58e9f3b3a2ae53b073a321f3db0ac0cafa8065e32999b401595977f014c8a6d8987d089b8683ef9b5b69aa46d301f7ae868daa3427a9a6d8a","ssdeep":"768:djkpp4mkq+jd+jpG/Gpkpp4mkq+jd+jpG/GpkppIyZMgiTGmPD:2pPmjd+9G/PpPmjd+9G/PpKkeNb","tlshash":"0de2c0354c2fce2fa8a2df8e86a5f45562835d39c14ae5696f0884931c8cf4d6e077ec","first_seen":"2026-08-15T05:35:42.810902Z","last_seen":"2026-09-18T04:35:19.673594Z","times_seen":7,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20olympgate.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.628Z","timestamp":1789705829628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs20olympgate.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"6cae-19e87ec872f\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:25 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007884\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZWaS7a30N1Yp6Wb8lRg%2BKn3enEmDFXKfpHoOOksivDnyb%2F6dJPLFoQAG%2Bzw7958Iv6Oqj9TwlTO6GLYrtksnahuTjcL2efm%2FEtV27X%2BtoCt%2F1pkmsCAum6PrEUG5y1nL6R8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b3da25697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27822\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27822,"size_decoded":29278,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"67a9f14667062ed7354e711966e13f6f","sha1":"df69b5e3720f0d72981cea8b6b242ae18a9087c8","sha256":"8fc1a0ae668b1bcfadd45af5b0c9184a82c16e186ee88db6b014cd58e893950c","sha512":"5740b95c0ddab506d7eecaf3d558766255036bbe35f15623dd226d1a6fc71e97c0103b8045436c8c50266a0ea7251f7ed92dbe9da176fdee6cda78ffd6ab5066","ssdeep":"768:rSI0kwqIQwzv8jgHqYBpvaphCvCV5wDH3bF:J/wZHTVvCVWDXb","tlshash":"fdc2e131f92236dacb45f3f584d1c7c0123f1191589e2316ae9921b5e2f87ea7c5239e","first_seen":"2026-07-10T22:56:48.1Z","last_seen":"2026-09-18T04:39:46.096284Z","times_seen":81,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/fortune-mouse.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.638Z","timestamp":1789705829638,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/fortune-mouse.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"2d5b6-19e9f374783\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:20 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007882\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LLV5fxQ%2FfFJLGRPW0uELDX4nVAgtQFMCDQz58w8%2FJl1jG63qfqctxvt1ULJ0OHPLJp00e3%2BnQ%2BLZDsLhoJJycKlf%2FFqayhKFBekx2dKXQuhoYaFc2dUs86c37i%2FF6%2FHCJvk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b3dac5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 185782\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":185782,"size_decoded":187242,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"87ac16814336141ac5e165fa0b6a3fa5","sha1":"727543093d102af9d3edabf2455a73337fd08060","sha256":"ff5a8367ce6488c9e91b2b63d0866494a7e74f2bf88813ebea1f397623c48765","sha512":"0fbdad1d1d392617e8f50bf38e9c1ddff82b93f4d99e1d53c79bed2c798c1fe3e5b265b6dddeea4cbfa9ee6a6df964c2ffc901e2575f4c079d3997b108c5e5e5","ssdeep":"3072:Qs7NdPtcNjxqzdYshF2IfvQirScUITN34lGnYI9SOIsxtK4xHrnTDnGlC4/Qd:vrP0VqNecU0Z4lGyOIFIHrTig4/Qd","tlshash":"6f041286650f316d7d70eab0b79d641b8a09ea9f7d14083187f35ab949b932c4d322fc","first_seen":"2026-07-10T22:57:09.656842Z","last_seen":"2026-09-18T04:39:46.068542Z","times_seen":35,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20sugarrush.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.651Z","timestamp":1789705829651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs20sugarrush.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"74da-19e87ecb05f\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:36 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007884\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IOB7n%2BvcAV7WPio4VDaWCdWeNeA0QT8XzI%2BsDwdMobkWAnXGuUSW9UUsGDihefaP9C0HK31pwF8Mc%2BStoeOyLj0HrNIDPAOBBXxK7SNQzsrtxoeAyDXIf6938RNPE5ExPRI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b5db05697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29914\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29914,"size_decoded":31364,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f5d34e92022a20b828fc43e0f5325f88","sha1":"84d7c51ff977d6dc7cdd6ccadb5524c617720840","sha256":"05f2eefbc3a7a73ef1cc83b31710ddd700b1e3f3ff4a23134de10b7b06d12a3e","sha512":"2c9637ef738349f0817dbb21371d276b68a06ece886665218e45d004fabb277af7e9b742c146cded525cd5443c243ac727041f08a0b1e5cd1552405f6323acb2","ssdeep":"768:bfrq1WWjyHPGdsVtCOsirTXlW5T7YujH5JazIUo8iVA:bzqUXHPGdsPCBOTV6TVaMR8R","tlshash":"6bd2e1b7010bb490789250d8e1129e9dc1f31bb5562757389cf889a318f6c727d26fec","first_seen":"2026-07-10T22:56:48.118862Z","last_seen":"2026-09-18T04:35:19.607924Z","times_seen":79,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/fortune-rabbit.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.653Z","timestamp":1789705829653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/fortune-rabbit.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"2d59a-19e9f3748fb\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:21 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007882\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZFXdUsh0vLK9kZax5Lnw4GX%2FqcbeaPdAEcAPD4Qz6tP7bqvFT1YfTlJWpk1Mpx%2F716PWl%2FBddag2dRTRQND7oRhCuY5lEVZOqRL4NkI0lt7H1lrOqe7hWzxP7z2YeiVQiVg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b5db15697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 185754\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":185754,"size_decoded":187206,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"075ff53707f684c709abb5393a2636bc","sha1":"123d8856016a2ca8b4aba076021900800804b980","sha256":"8e29281b801df1ba8565c3f00bb9b75da8a162d11370ac1445eed1aa464f8229","sha512":"20918c13acbdcc9aa18a99dc8e73c61630d03b2f5f552a967002058c48c9cb2ef41c278bfa67e88a6c8d321ffb402c1766860516ceff36d33068cfcddf95fd1f","ssdeep":"3072:d6XRQuxc6H3qe78QJA1r0JUBdyMuo4tFotLM+vCGpe1PZILjGVOQUD9WmgFcUuCY:d0RQ6+QIZBdXuozCGpiPZVAQGkmEub","tlshash":"f60412c0e05e0660b59c7b77f52fab490d389a29aa3f43676a83d0ef7d94a0d2244c95","first_seen":"2026-07-10T22:57:05.841138Z","last_seen":"2026-09-18T04:31:23.543247Z","times_seen":44,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/index-CVwvSGG9.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:28.186Z","timestamp":1789705828186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /assets/index-CVwvSGG9.js HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nCookie: __ddg8_=Dy659alI1FqP3scG; __ddg10_=1789705827; __ddg9_=162.158.222.83; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=MferTlhZWGom0KGj; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg9_=172.64.209.22; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Fri, 18 Sep 2026 04:30:28 GMT\r\netag: W/\"6aaa9c15-e0971\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ekD3dC2NqlnRAIt7EKi%2Bh26KHqqtRZKRUTggwkW06SH0su74myXoAeMFvndmEx4W71Q81E7HuTptCAQxFvZzmDUHJBogCcdxUfPLfF0i2WwfJYjWTEHNLs0%2FGlkdk8uG\"}]}\r\ncf-ray: a3cd9d922db27127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 263224\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"MferTlhZWGom0KGj","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=MferTlhZWGom0KGj; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg10_","value":"1789705828","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg9_","value":"172.64.209.22","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=172.64.209.22; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":919921,"size_decoded":264353,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38970)","md5":"03de5c76bc984df8b89cb6161761b1f9","sha1":"57a7d6d980392239c5838ef04975c0376832973e","sha256":"24a5f4b374ed3783bb86aa6610e330a8f26c940056b7350021044d63c3c61cb5","sha512":"a6b8edb994348bc7d979498e80ea25f3df04b1361ab3470185f2ee9f11d39f078910a8a743e745788e6761daba8abcd77eaa5757d60c1efc2d83f166a4a37c10","ssdeep":"24576:Y5wHfHYMKM0visuagpGRLTJ7tR/og3kFIvTBBMe:Y5wHfHLKM0visuJpGRLTJ7tR/og3kFIZ","tlshash":"1c156b84b181b9fda7770bd564af9029b13e2f24f91ec480f2bc58253a69041b667fdc","first_seen":"2026-09-18T04:26:23.201868Z","last_seen":"2026-09-18T04:39:46.069174Z","times_seen":12,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-gold-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.600Z","timestamp":1789705829600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-gold-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"2bb1e-19e1889de1c\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007884\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DfRSOWvvYeI77j0HOLuq4mQt4OxjftnVpb4HE1s72Wj66oxFkOhctcGX5dk2fQYk0oaaun4p31lUtYCTxHrCNhU%2FdmBC6jhmvyFeWbUNlZ7W6KoHOybExoezIsCJ78WWM3Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b0d945697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 178974\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":178974,"size_decoded":180422,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"7e6786b8f04722cfa883924cf56e618a","sha1":"11834b65154c89318b09e30540170438279db363","sha256":"d15c8109068462a9bf3994fb4ef6f126253b038b1ed7e2030c23f013dc7a8857","sha512":"0e188cc4eb6bad0ec7a3eb8e6bcadbd2ad447ffc868ec327abe99924d910c8c1b38bf5607442880655d691967bb27c87abbca0ee85fd7ff4180942a96958a690","ssdeep":"3072:wbRMbtR2+Z8ik03JdOr2QjubVpGy1lYxba5gzDdmTrCgqZnC1Wtkbzi6eI3uMkRg:QiR2+Z82Cr/jubVk0I+gvjbCMtka6eIF","tlshash":"1304138e2c596af29f843e48c8d05f3e4a7245e7df80b1d60e0bbcf71e9018867b5556","first_seen":"2026-05-03T09:25:58.480792Z","last_seen":"2026-09-18T04:39:46.080215Z","times_seen":100,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/plinko-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.635Z","timestamp":1789705829635,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/plinko-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"c198-19fb30bc4a4\"\r\nlast-modified: Thu, 30 Jul 2026 12:42:00 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007883\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EtDAwp0JvJBkct%2Bq6jPfpBPSfZUeqWjFv8IMbLSVqK8q8zid8zl%2Fck3%2BNMAY3ujpF21w9SAdJhJRRAMD0018eTFByuYB%2Fl59RB%2BeKdKFvu36GCHZLrp2clWWktxbTA%2B18Nc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b3da95697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49560\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49560,"size_decoded":51016,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bb44900e7ba7846fd99ddb711205d3f7","sha1":"34d327bcbf62771763a5638e0ce2e514c51a7f86","sha256":"945a5a2123b127568550250d0eccec85732139d5b8369d10cf2786fe681f0aae","sha512":"db68043d0e5bcf920da4af12ae599ea3162d84d96d009971e63e4d0fb555e259f9deb77571a0bc033f45374ced86c739dccbbababcbbb8ece2e86a44a6758985","ssdeep":"1536:JoErMPIb1FT+pjEyzi8AtbIyUllp4Spys:lqIb/N8AtbIyKlpJN","tlshash":"e123f1bd7bc5e27ccc0a1bbb32d51e8d86309c08dd25ae421765e050efa92506e5ee4b","first_seen":"2026-08-03T05:12:55.460818Z","last_seen":"2026-09-18T04:39:46.066117Z","times_seen":41,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs10txbigbass.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.645Z","timestamp":1789705829645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs10txbigbass.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"9fe8-19e87ec0197\"\r\nlast-modified: Tue, 02 Jun 2026 10:40:51 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007884\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rbF9A%2BY36ME7WCD2jU%2F1vN6HE75pJn2pQ7e5RniBXHS6U8lzg0itfHA7TE6Y%2BAK%2F4Y3NjYA5PlshKY3ja7kBz%2BklNn4HA7I%2Fbzbpxa0UOzWJk0ztx2VQOnzsJp%2BilVG%2BCp8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b4daf5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40936\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40936,"size_decoded":42396,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 360x472, components 3","md5":"46e5c64ee5f47133847efa0e29e91a95","sha1":"4a3f73b71e5e95c4b69f593027effa6285305190","sha256":"10c32076a837fc6ea356eb4d8fbb695e132ddd4a2b458b318e371a953b4c7701","sha512":"61f1fa630014cfb5032ae6a86ce1310a86f018e29368bcbbe0e460f5aeb621548364ddfd2cf74cd4eddd52b253ff85280381664f94d09ad0d54f31b0271282b0","ssdeep":"768:N/GALN5fNwrRiz067G5lYdKToKFMYAHb05jyDz+CWKGFcf0KejN:gALYiz067GvFdAAjyDz+C2B","tlshash":"e503f116339aae31d35b33f2ade05bd57b1a8590ead1a34c1cb30f7019bc48b29b4761","first_seen":"2026-07-10T22:56:48.098937Z","last_seen":"2026-09-18T04:39:46.034139Z","times_seen":86,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/vendor-react-BggoXGQP.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:28.187Z","timestamp":1789705828187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /assets/vendor-react-BggoXGQP.js HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nCookie: __ddg8_=Dy659alI1FqP3scG; __ddg10_=1789705827; __ddg9_=162.158.222.83; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=WxfMtyVJxueyIDgk; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg9_=162.158.223.12; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Fri, 18 Sep 2026 04:30:28 GMT\r\netag: W/\"6aaa9c15-459a7\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j1qPzGH7zo6mDgZK8CU4vjUXFZK8VojCzujK3Jc6zTn2hvHaSa%2FjiNK1TcZDvNW2VTfcn2iVL1%2B7h5c0d148pv09%2FnJz4vqWJThl8snJHeLK6W87bIP26LInVH9ANDJ2\"}]}\r\ncf-ray: a3cd9d922db37127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 89622\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"WxfMtyVJxueyIDgk","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=WxfMtyVJxueyIDgk; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg10_","value":"1789705828","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg9_","value":"162.158.223.12","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.223.12; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":285095,"size_decoded":90753,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42921)","md5":"5b863726bd3dc5e2dbf155e56cedecc0","sha1":"037c8efd902070937775ed233dae947768b8ed1f","sha256":"61724c54eba9beec4961bf4e1059427a47fc260652f43efb348232fbf8e1f8b5","sha512":"c3a9b9c97c3d6e2bbc40addaeab466242c49cb09ca06de6b30884e6053caff4ae1fed22924cff5d0784f35f95ff7ef0810f33dc1f1a94dd08143b6bc69f0c8a7","ssdeep":"3072:zuHaZ+QRjAcwFp7JHTZmSjttXnHUZfmOmzMRMwLfcc0S6IUinO529oaLNtET:zuH8+G801ZOOmKv09d892","tlshash":"d7543ce831adb5265fb312f540af010772782c37185d8860b154eeae36b584961bbffd","first_seen":"2026-09-18T04:26:23.218482Z","last_seen":"2026-09-18T04:39:46.053612Z","times_seen":12,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/SupportChatPreviewBubble-HSCm93Sh.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.003Z","timestamp":1789705829003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /assets/SupportChatPreviewBubble-HSCm93Sh.js HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nCookie: __ddg8_=Y90xuT5chTh4G3xG; __ddg10_=1789705828; __ddg9_=162.158.223.10; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=qa3PEjUDRhyhuXZO; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg10_=1789705829; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg9_=172.64.209.50; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"6aaa9c15-1e753\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=En1kaq6FW4MhNTmut3RLKRtsIMVwO4Mgp%2FHAEkXyjhyc%2BZisfEmZGdjiR42GO07TEE32ptHg7PpPf7SDOSpl2Wm3DWPjyBBXmz7KuGAKKYngZJWSjdddIO%2FgxInXVato\"}]}\r\ncf-ray: a3cd9d974de77127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38595\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"qa3PEjUDRhyhuXZO","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=qa3PEjUDRhyhuXZO; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg10_","value":"1789705829","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705829; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg9_","value":"172.64.209.50","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=172.64.209.50; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124755,"size_decoded":39725,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46137)","md5":"163e97b102ba3f9375cb150f56eb64e1","sha1":"46e4a18a63fabd239f53e7a8e27940373074df7a","sha256":"053d15400992299ada5233c0c7e088475b1602d0d378ee1b243988a35dae442b","sha512":"f61c678c65502e7e3a43accc963b79a30ecb670f9af043fe299b71dbe4faa5ea5202d813735a2c015ba916814e91cb800707318868244613f02ca6d13494a0f7","ssdeep":"1536:AjCQeZMS5TKs+jG1ZHhecTYl3Frze2c7XFLO4mSYNDMz9HC:AtbSFKs2iAcyJe22YYC","tlshash":"1cc3d7dc788178a9639b44a590ff500bf27d6d4b700c84b0f1689dab79728696263ffc","first_seen":"2026-09-18T04:26:23.289014Z","last_seen":"2026-09-18T04:39:46.116277Z","times_seen":12,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/gift-confetti-DXWM8AeZ.webp","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.139Z","timestamp":1789705829139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /assets/gift-confetti-DXWM8AeZ.webp HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nCookie: __ddg8_=thyrm6erndomSytD; __ddg10_=1789705829; __ddg9_=162.158.222.77; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=49sWrtiuRveG5Eus; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg10_=1789705829; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg9_=172.64.209.26; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: \"6aaa9c15-1f366\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wEBlY44NvGr%2B%2Bf6d0CixMCxKuAi2VmOcLDJQ4%2FU6MFpNRZUeG8NrUZY71V5Yz5D1fdHuMOI7BlVMRtYKaUcQ9dwive%2FgpSWMzrniePLyt10LHhRcpyLuN9CThP8TLhj0\"}]}\r\ncf-ray: a3cd9d982df17127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 127846\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"49sWrtiuRveG5Eus","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=49sWrtiuRveG5Eus; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg10_","value":"1789705829","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705829; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg9_","value":"172.64.209.26","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=172.64.209.26; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127846,"size_decoded":128939,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7269363e91e98461317bcde63ada042e","sha1":"8339461fb4dd7f59bf2db6fc60facd5cd66daafc","sha256":"9facb64c12ea33a40ef6aded936df39bfba20357d822354574a51a50a01c2f17","sha512":"c2919059bfbb4459334af4d30824c45008a513517799697c7f70937e10ea75ececa211be58aab1e84dc2c85412a766747573ede2873a64e045c5fd76f88a2a21","ssdeep":"3072:b1OJ9ga7HNypT45bIGG9QV5EyGd/zKTnK7y0gsuXCnIx3/:bV2Gk5bfGu5yanK7y0zoCn83/","tlshash":"ffc3125ef2840f99f59e2e0f4fb42ee7b064e2c8568bd3ad20d14cc4088d6116be9b5d","first_seen":"2026-08-23T23:08:29.84404Z","last_seen":"2026-09-18T04:31:23.549894Z","times_seen":3,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/live?limit=8","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.147Z","timestamp":1789705829147,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /api/games/live?limit=8 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://diwinplay.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"a74-lku4MGP+BZyNcNFFV6fte2/27R8\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BsmfsYPa4O07gOzkuhtPRcgcq0sclwIdPl%2F50Taxlf%2F%2BQ31jUPBeXxLPQ6tig0oRKAWhoK%2FsgfgPp%2F7IL3JLarI9MvrYh6zIB1E8RdB0VyuHb9nS0giOvayQxaxaSzQdQP4%3D\"}]}\r\ncf-ray: a3cd9d982d625697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2676,"size_decoded":2292,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f74ca093870ff50d10947e3346beece","sha1":"964bb83063fe059c8d70d14557a7ed7b6ff6ed1f","sha256":"17b148d1f533c0a26239f21580593bce376aacd5e10e8ecc0d7f4e9036e57ef4","sha512":"f306dd8f197b7697d61eb4edf3c9cea67a7a365c3a515223c6c131133065e2a8f4d804ec808189dcbf0c1c532e597e742fa221e8b89f4b20ae6890cffca56e7b","ssdeep":"","tlshash":"7c51f06e54482dbddb341ad8844ab4add8edf1bf65d00c04819e8d3accf05ea397c927","first_seen":"2026-09-18T04:31:23.550536Z","last_seen":"2026-09-18T04:31:23.550536Z","times_seen":1,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/favicon.svg","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.336Z","timestamp":1789705829336,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nCookie: __ddg8_=9BZFDvsM79zREMTf; __ddg10_=1789705829; __ddg9_=162.158.222.66; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=8ah45lJJEcGlN5dz; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg10_=1789705829; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg9_=162.158.223.10; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"6aaa9c15-6b2\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nage: 132\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FweKce1So0v54ftpys2IvmM9ZdFyuRqTJQh3P7JCz9B%2BVzFDV4Jrmx%2Fh7pLCLdxWVsnCZiX1YAudXcjd5js8MlF%2FR9wwxFTSncA%2FHKNkhxYGw%2BgQc5t4I79OyY45KYAt\"}]}\r\ncf-ray: a3cd9d995e047127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 825\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"8ah45lJJEcGlN5dz","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=8ah45lJJEcGlN5dz; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg10_","value":"1789705829","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705829; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg9_","value":"162.158.223.10","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.223.10; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1714,"size_decoded":1895,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c939c1002550233de2345e6a1deea5d9","sha1":"76c96e16e58c808c19bcff3329efcb06ec3bc54c","sha256":"512b47d1440b1ae2ee599b6f50907ca97cc784d51751d10d0e0ccd1f7f477bd9","sha512":"109ccfa8aed17d69d695ca5461f3e10df97d22c941030d16ca09b54f39dd8a6ca502f80da48cdf8436415f9febfadc5736f2f382e0e814eedf142c711ccb9fb1","ssdeep":"","tlshash":"ef3194b0e195b423f700e3fcc924f8e5229b1aaf6491c958b3c02d0aa49859e290f993","first_seen":"2026-07-22T11:06:27.428016Z","last_seen":"2026-09-18T04:39:46.095553Z","times_seen":42,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-vs-zombies-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.636Z","timestamp":1789705829636,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/chicken-vs-zombies-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"49ec-19e1889e2b0\"\r\nlast-modified: Mon, 11 May 2026 19:35:50 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007883\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z7pgKiD0a2O2LHB9yvuJYO6BME31Rj8RgogkoAaZ73SicBGE1Bl%2Fq8%2BhZIkJRfYXfv6PDV2rVy%2F6P%2FfYwhVOVyQJ1%2F5ch3lf1nL%2B40ptf2LlDptATG5WI8t5LLrQktw86ik%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b3daa5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18924\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18924,"size_decoded":20380,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3c496079d347b741f8a61c9ff13e5f25","sha1":"d34e547f81a344f52f32078078090b0e6dd0c549","sha256":"6b61c65973ee02deb325d6cb91f24c3201e376b4fbb3bd25c7dbb14ebe1b28b7","sha512":"a1030c0c003398488e2b35d4e0777a0f7de2936831b2ab3fe0f21d64290e84db39fd293b0ea1f8a0ecc35e99e0e7c927d8699f0cec504219d226e1c13464f488","ssdeep":"384:zGjo/RN/ZF6TOfWpzF86HGv3QVv/bOwvJ9WHV82zghRHl3Kb7+q:zGcZVZZfy587vYvyw3S82u3KF","tlshash":"ee82d1e92fa5f094e296772451135350523390a01d40de8bfdf9e27f2932e509caefad","first_seen":"2026-07-10T22:56:48.11117Z","last_seen":"2026-09-18T04:39:46.097596Z","times_seen":99,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20doghouse2.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.624Z","timestamp":1789705829624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs20doghouse2.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"5ff2-19e87ec3977\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:05 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007884\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0wOLokssruNsMzw4IV15o7RkbmeNCQkmKJCyYyC8A8dgpyT%2FNC%2F0jLByulJLtD770oL8T3L2Oa5nHQ0IhL44gedjDDQlQ1NVnI6wEB9%2Fhv3kbyncEBCybZ5ugcINBe0ieOY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b3d9e5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24562\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24562,"size_decoded":26012,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8b8375cc142490d5c100642b6e07708b","sha1":"136e02d0079c82c415c54ce9c4b38e453317882a","sha256":"9ffd8d162fb2081b6938efc5eef9466b92a61ea81de30642aee9da49af78eb83","sha512":"6cff72933a3d0056f09ad8ab14a40915177014f0cfbe97e5b37e0e4b979e8dd8a5a1c0ea7b7400db86c01ab20b418f302db1940605cec8f9efa4c606269ffc3d","ssdeep":"384:MK58qfWdepslW9FZKJ6I6GyYXOqZly2YGobRpxgiMs6QA2tbdtP0UAm/qm5P7sHx:58qfJpslW9FZKJt6vYX1Z8J7ss6ytbf8","tlshash":"b7b2e09c5a14ffc5075017c91fb3b0c38dd04b7daf5ea57998debc4a44a1230a8fa41a","first_seen":"2026-07-10T22:57:05.853292Z","last_seen":"2026-09-18T04:39:46.06719Z","times_seen":81,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/fonts/proxima-nova-900-italic.woff2","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:28.788Z","timestamp":1789705828788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /fonts/proxima-nova-900-italic.woff2 HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/assets/index-8jGlR_b7.css\r\nCookie: __ddg8_=hQPnykAbOPVyocyi; __ddg10_=1789705828; __ddg9_=162.158.222.77; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=V9glH2ozdpcnEfFC; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg9_=162.158.222.53; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vVYrKI8Q%2Bb7RCdAuHeGrHk7xiHXBXwI%2Bk%2FRSBL3KHktqEPywvjcOqWpbcFotFLY4GQg9Q967swxcmv4Tva7O7EtlYfyzmlmMkxuoEYgFbURilYWeY%2F4Tx1ZdMWi75RPF\"}]}\r\ncontent-type: font/woff2\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"6aaa9bff-c4a8\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:11 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\ncf-ray: a3cd9d95fddb7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"V9glH2ozdpcnEfFC","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=V9glH2ozdpcnEfFC; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg10_","value":"1789705828","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg9_","value":"162.158.222.53","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.53; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50344,"size_decoded":51367,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 50344, version 2.197","md5":"f4fc4456db374952bd5312eb09ef6eda","sha1":"47021971306ee29fb2e4fe84a40ddddf9518ebe9","sha256":"68ee3ef2f68828efc7582711c69682365bb4f5d5402a46497989a8f6ac055383","sha512":"81ed40a24b1f9120ee5e615049ea376eda8fb4a64d822ccf26dba83ac00d64e1794c26dcfa4329888586e3a4a9a22a81dec5282eb5750cca7f2b85a5b95fa731","ssdeep":"1536:j+K855ACjEl2cH6AG3QiZUX5nSNES2via:j+K85N4DHtiCXiXe","tlshash":"b333f1509f9e7cf3cbc21651aa0bc7d00ccd80bc5994e2c52bca58a70b1a9ac655f78b","first_seen":"2026-07-22T11:06:27.373852Z","last_seen":"2026-09-18T04:39:46.105507Z","times_seen":42,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/vendor-query-D2GKGktG.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:28.189Z","timestamp":1789705828189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /assets/vendor-query-D2GKGktG.js HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nCookie: __ddg8_=Dy659alI1FqP3scG; __ddg10_=1789705827; __ddg9_=162.158.222.83; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=QvoS4zdTDTe8sy5u; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg9_=172.64.209.26; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Fri, 18 Sep 2026 04:30:28 GMT\r\netag: W/\"6aaa9c15-9f74\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jkb2VGfxyKCnvP356Y%2B82tM00mv9ftaVmo%2BXwPrJBr%2FvPUajoQme6uB779BqdQD3EHhLsqKAGKmqLao33A0kJ60dv9CABhMzBEKeuWiRo2depDGPPdBznB0cPSGtwHD%2F\"}]}\r\ncf-ray: a3cd9d923db47127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12260\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"QvoS4zdTDTe8sy5u","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=QvoS4zdTDTe8sy5u; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg10_","value":"1789705828","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg9_","value":"172.64.209.26","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=172.64.209.26; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40820,"size_decoded":13391,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40819)","md5":"52becf48047a6525a3efe0a08e2f1d96","sha1":"5a2b2c2e91ef33e5038fb426fbaf032ffddcb415","sha256":"5ba0377ec0d40321f3cf6be6323b13ce1220e0f0d6d11e3668acefec46b2027f","sha512":"e164f8278e5b57d71b58e19fe80955553e57ef21d8688f53c34fcc07b252df43448d24e605c9cd31335ebb879e7327c24c4ae12b9fb48d0bfecde4323b930010","ssdeep":"768:sfrxg3hap4aM9hvUmU2yIpof9XP6Iv6GBk6Dr4WIsCYo2BUiEkFREQpiO2Lf+18q:eWU2MFoOE48Xzt9Sy8V","tlshash":"f503b8d67142e2273ad18191dc3e4125e2356914340ac06cbabcade7b963ccff5bea35","first_seen":"2026-09-18T04:26:23.189771Z","last_seen":"2026-09-18T04:39:46.032774Z","times_seen":12,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"op-api.gambl.bet/track","fqdn":"op-api.gambl.bet","domain":"gambl.bet","tld":"bet"},"ip":{"addr":"172.67.140.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:28.797Z","timestamp":1789705828797,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gambl.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 14:50:16 GMT","end":"Tue, 01 Dec 2026 14:50:15 GMT"},"fingerprint":{"sha1":"BF:D6:9E:0E:84:B6:96:D4:23:02:C5:FB:A5:C3:05:BA:EB:8E:02:CF","sha256":"0E:9D:A4:F9:F6:A2:D5:78:C0:87:12:5E:84:76:3E:11:68:10:54:21:F0:F3:85:49:6A:EA:32:25:9C:BB:44:98"}}},"request":{"raw":"OPTIONS /track HTTP/1.1\r\nHost: op-api.gambl.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,openpanel-client-id,openpanel-sdk-name,openpanel-sdk-version\r\nReferer: https://diwinplay.top/\r\nOrigin: https://diwinplay.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=h3w4ljZRIpJIuPLL; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg10_=1789705828; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg9_=162.158.222.97; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg1_=MwGsGc2KMyJ6uRErXqjc; Domain=.gambl.bet; HttpOnly; Path=/; Expires=Sat, 18-Sep-2027 04:30:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccess-control-allow-headers: content-type,openpanel-client-id,openpanel-sdk-name,openpanel-sdk-version\r\naccess-control-allow-methods: GET,HEAD,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 604800\r\ndate: Fri, 18 Sep 2026 04:30:28 GMT\r\nvary: Origin, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ig5%2Fa2X6N0UyIK%2FLBcL9VCHGp1o34aVfs6qMafh0IhgZ887hMst8DaW%2Blmbr3BUTfcDMTwmk06BDl80cIlrMDcWiyXhQaYm7dh6d8tuU6mg%2FlUQKhHbE0yUhN2w6gVhf8wM%2B\"}]}\r\ncf-ray: a3cd9d962eef56b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"h3w4ljZRIpJIuPLL","quoted":false,"path":"/","domain":".gambl.bet","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=h3w4ljZRIpJIuPLL; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg10_","value":"1789705828","quoted":false,"path":"/","domain":".gambl.bet","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705828; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg9_","value":"162.158.222.97","quoted":false,"path":"/","domain":".gambl.bet","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.97; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg1_","value":"MwGsGc2KMyJ6uRErXqjc","quoted":false,"path":"/","domain":".gambl.bet","expires":"2027-09-18T04:30:28Z","raw_expires":"Sat, 18-Sep-2027 04:30:28 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"__ddg1_=MwGsGc2KMyJ6uRErXqjc; Domain=.gambl.bet; HttpOnly; Path=/; Expires=Sat, 18-Sep-2027 04:30:28 GMT"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1225,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T13:41:56.030351Z","times_seen":18549281,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":3,"dns":0,"connect":19,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/mine-slot-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.613Z","timestamp":1789705829613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/mine-slot-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"1b448-19e188c4ea6\"\r\nlast-modified: Mon, 11 May 2026 19:38:28 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007884\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F797C2gxnw1ap2pC82M1MJR%2B0lBNDnK6B2wrLJ63mRDKqCKf%2Fo5aUqUioZp5btFRG%2BkJ3uebJBun%2FR5rTm3ykLq%2BjX8Umx6s%2BjPusGA7hJSgp4fataBpFJ7c22ZkWjnYMVE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b1d9a5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 111688\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111688,"size_decoded":113146,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7406dba4e1b62922d069c29462970e92","sha1":"2bb50a426fc171056758c2f1fe4da069bd317a55","sha256":"a1a7495aee2e2ec7e96d71aba77df32c181435df6daaf59f1f0dfbcbb1a89397","sha512":"f5624722848711d80f1d17db89bd6f160f8e8535f5c6e5b397925b686dea04c0239eca11ccbf753ffdc1e97d2c5006356d4ddeac83501b989309a8a3c62ed43f","ssdeep":"3072:PBZq2UAp8x3gncKwSfB6eC3QxHPq4Sh27r2neBIQWzUomhHVD:a9Ap8x3zS7CDt0PmeBIRt01D","tlshash":"04b31242f3751568dc6d93f93589eb067297838883476aa6ae233256d409470b78cbcf","first_seen":"2026-07-10T22:56:48.049907Z","last_seen":"2026-09-18T04:39:46.079431Z","times_seen":102,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/crash-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.632Z","timestamp":1789705829632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/crash-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"f52e-19fb30bc0b0\"\r\nlast-modified: Thu, 30 Jul 2026 12:41:59 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007883\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kbqqEax3zhxl0%2BD84u9jIO9CyGxTBybHDLnHTYvVsi3RSekWVgqqQzn8dbzRY%2BM3STgNTXf2IbBl2XkjVoGPNzzIGOPMvCgjunHoQNEefmV1yuXRSwTx1TZgj6K8j4hoH34%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b3da75697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 62766\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62766,"size_decoded":64214,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e3e9dc79e30339acd6fe5a784b66ecf4","sha1":"85959fc05c9e530e5a99db417357929624c01aa6","sha256":"db0dc98e77734eade49137af6aa78048bce08bdbaf48ad06bcd054ded5fdb94c","sha512":"bc37983ad7d5cc31482132f758d38b4a19ae2caaf1d8b578967c53cbbd0eaa85bbe9c1b9b517806360a0457df8a2c632c0a500dc04dd3e31ee2f69ed5d7d0b06","ssdeep":"1536:DpGvlHDF4TR9mRcJgHqmZ3HjX5l/RGzasqDFejYsTL:DpGb419mRcJCtjJZTDFejYsT","tlshash":"e153025070e726abfe0294b014709a3feedd792c74b59cb511839bfa11ac0cd97ca4c9","first_seen":"2026-08-03T05:12:55.553159Z","last_seen":"2026-09-18T04:39:46.094504Z","times_seen":41,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/kit-C4Umz-46.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.133Z","timestamp":1789705829133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /assets/kit-C4Umz-46.js HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/assets/country-catalog-C1fbRvH_.js\r\nCookie: __ddg8_=thyrm6erndomSytD; __ddg10_=1789705829; __ddg9_=162.158.222.77; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=IDm2JghlgXZBvU4p; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg10_=1789705829; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg9_=162.158.222.114; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"6aaa9c15-29573\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ew%2Bg5lNUV%2BRNRWD%2BUPPQH3FQEYj%2B09Wcz7sPdEJGz0YbPFu%2B5gJUBCtcvpPG8lQmry8U1UWLS26oVGuPwMWcPg1%2B7Y51dtYZ801c04wAjLOtVP6%2BJgXobzMVs1qX%2BDOu\"}]}\r\ncf-ray: a3cd9d981def7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 39855\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"IDm2JghlgXZBvU4p","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=IDm2JghlgXZBvU4p; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg10_","value":"1789705829","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705829; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg9_","value":"162.158.222.114","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.114; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":169331,"size_decoded":40997,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"57d24ba2c0340398383b341fa9ef0a24","sha1":"3ae8f7406e64f7e2f9e424e570b94c75fb0d169d","sha256":"4c88540cc772b972e61e656ab34bca146bb2ffe9b8070e069096fd536241f5f0","sha512":"46c0b64a6ede41f998f8153d0a893212281229a6a56c5d6184aa6cec1146b284f43a09d28036b5a9dc85f0a9dc4e7beb99bef915aa4148408b2d8b0be75475cb","ssdeep":"1536:ZOy0tNo455wjcQLgm2r8RDkGeP3BkTQMR453KTA3RDesHabWNsr0ggyvx90hFvS0:ZOy03o4PwjDWkUMWMAcqQ07yJyhAv8","tlshash":"0cf3c8f73640a72775b13b188e0ae28f6f9c9c52ccd8a44caae7cccb995186170bd715","first_seen":"2026-09-18T04:26:23.273571Z","last_seen":"2026-09-18T04:39:46.110015Z","times_seen":12,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"op-api.gambl.bet/track","fqdn":"op-api.gambl.bet","domain":"gambl.bet","tld":"bet"},"ip":{"addr":"172.67.140.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.445Z","timestamp":1789705829445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gambl.bet","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 02 Sep 2026 14:50:16 GMT","end":"Tue, 01 Dec 2026 14:50:15 GMT"},"fingerprint":{"sha1":"BF:D6:9E:0E:84:B6:96:D4:23:02:C5:FB:A5:C3:05:BA:EB:8E:02:CF","sha256":"0E:9D:A4:F9:F6:A2:D5:78:C0:87:12:5E:84:76:3E:11:68:10:54:21:F0:F3:85:49:6A:EA:32:25:9C:BB:44:98"}}},"request":{"raw":"POST /track HTTP/1.1\r\nHost: op-api.gambl.bet\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nopenpanel-client-id: 3ad6ac77-f30c-4a99-95ca-7c2a88051ecb\r\nopenpanel-sdk-name: web\r\nopenpanel-sdk-version: 1.4.1\r\nReferer: https://diwinplay.top/\r\nContent-Length: 783\r\nOrigin: https://diwinplay.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":783,"data":"{\"type\":\"track\",\"payload\":{\"name\":\"app_boot\",\"properties\":{\"__referrer\":\"\",\"domain\":\"diwinplay.top\",\"app\":\"client-new\",\"app_version\":\"05ec5587\",\"build_time\":\"2026-09-16T13:39:00.373Z\",\"is_pwa\":false,\"viewport_bucket\":\"lg\",\"dpr\":1,\"tz\":\"UTC\",\"sw_controlled\":true,\"route\":\"/\",\"lang\":\"en-US\",\"logged_in\":false,\"cashier_variant\":\"full\",\"ttfb_ms\":215,\"dns_ms\":53,\"tcp_ms\":17,\"tls_ms\":17,\"html_ms\":0,\"dom_interactive_ms\":458,\"dom_content_loaded_ms\":868,\"load_ms\":1666,\"fcp_ms\":873,\"app_shell_ms\":1223,\"entry_js_ms\":234,\"entry_js_kb\":898,\"entry_js_cached\":false,\"entry_js_protocol\":\"h3\",\"css_ms\":206,\"fonts_ms\":462,\"resources_count\":34,\"transfer_total_kb\":1101,\"transfer_same_origin_kb\":1089,\"cached_ratio\":0.03,\"nav_type\":\"navigate\",\"landing_route\":\"/\",\"__path\":\"https://diwinplay.top/\"}}}"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=cBGCeIZatcKHOEdA; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg10_=1789705829; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg9_=162.158.222.97; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg1_=Z7nwjzCrHssiuwkO68mm; Domain=.gambl.bet; HttpOnly; Path=/; Expires=Sat, 18-Sep-2027 04:30:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\nvary: Origin, Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PT6FULAN6lkViJ654QmLCni9rcI4NVT7OABuqN0wWqv1l4ZblWVFxQB6SzsNO6D3G711ib4nS6ConOTfu0xByvpk6eBl%2B6hEe%2FLXNSlbrwH1%2FkvpuVt1HwqVh4g54IHO7V0i\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: a3cd9d9a0f1856b1-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"cBGCeIZatcKHOEdA","quoted":false,"path":"/","domain":".gambl.bet","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=cBGCeIZatcKHOEdA; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg10_","value":"1789705829","quoted":false,"path":"/","domain":".gambl.bet","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705829; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg9_","value":"162.158.222.97","quoted":false,"path":"/","domain":".gambl.bet","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.97; Domain=.gambl.bet; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg1_","value":"Z7nwjzCrHssiuwkO68mm","quoted":false,"path":"/","domain":".gambl.bet","expires":"2027-09-18T04:30:29Z","raw_expires":"Sat, 18-Sep-2027 04:30:29 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"__ddg1_=Z7nwjzCrHssiuwkO68mm; Domain=.gambl.bet; HttpOnly; Path=/; Expires=Sat, 18-Sep-2027 04:30:29 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84,"size_decoded":1196,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6dead23d2cb9a6398da2374f0f924ab3","sha1":"3bdb10cdbfc55a6663ba786f8b98d14aaf9360f6","sha256":"cb247b8f6357239fa9e7fd125400dc7273558576f4f4306935c5c1f2bcc5eb89","sha512":"6cafe02945c339eaf058de437ae8b399d082c2c136d3a86e3c7ad674dcac036f28f988cd6fc3c87b7bca9ce15838f9bd6b5ab5415c24b74cfd8b30fea5aaf681","ssdeep":"","tlshash":"eaa012c011c048f90c1440043e540130787e810062b051d041f9c108065458059106a1","first_seen":"2026-09-18T04:26:23.188504Z","last_seen":"2026-09-18T04:39:46.106167Z","times_seen":12,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/public/pwa-config?domain=diwinplay.top\u0026platform=web","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:28.785Z","timestamp":1789705828785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /api/public/pwa-config?domain=diwinplay.top\u0026platform=web HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nOrigin: https://diwinplay.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:28 GMT\r\netag: W/\"990-uP1rf2A8knDWJrfg8ZHMssdvJh8\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ub1z6%2BMHxOoCeYh7hDM4o4mIstR34cDxDq7LwV4CjATcuvjLjP6cfLDkhfrnmkIFS5Jat1PLH%2FKpAxcxGZ8OV5LTnrubAx12zsgF3Cp%2F3tWCwh4fzTl3ZmaHqlrb1MRnzXw%3D\"}]}\r\ncf-ray: a3cd9d961d575697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2448,"size_decoded":2737,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6ce9496cd00a53fb5515f908180a9f98","sha1":"b8fd6b7f603c9270d626b7e0f191ccb2c76f261f","sha256":"b9924e8610ce1e4ffcd52c4dfcc459d4fb42873386adff0fba8b1c299c1d6b56","sha512":"58b32da7fc4e2a975426a672a0dcecf0f23da37dbf82ad9cdb6cd24a7d6cf70d9a9cdfe19e9535c63c18206a92681ed30c0b221397b1c1074367748fd4a8403a","ssdeep":"","tlshash":"b251b51bba797c3c51a607e3b99f3d99133cb00566481926de2d8304e2427b4a33bf19","first_seen":"2026-09-18T04:31:23.559274Z","last_seen":"2026-09-18T04:31:23.559274Z","times_seen":1,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":83,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/en-wHC-uAN6.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:28.793Z","timestamp":1789705828793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /assets/en-wHC-uAN6.js HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/assets/index-CVwvSGG9.js\r\nCookie: __ddg8_=hQPnykAbOPVyocyi; __ddg10_=1789705828; __ddg9_=162.158.222.77; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=j9ZNA33iWvpfu8BL; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg9_=172.64.209.56; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Fri, 18 Sep 2026 04:30:28 GMT\r\netag: W/\"6aaa9c15-21e67\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fOog%2BPpnWhbNjRUnfml5GJKPyZNOEQfdrBKk3S2lER1TT3gyJiT3u65i17d6r2P%2FI4hk46chnAp0Mkds1GM%2BqAs6PAdlO3yd3Hjhf0eTBS7T45LOAz9SR1T6Qzg0%2FoRZ\"}]}\r\ncf-ray: a3cd9d95fddc7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45238\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"j9ZNA33iWvpfu8BL","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=j9ZNA33iWvpfu8BL; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg10_","value":"1789705828","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg9_","value":"172.64.209.56","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=172.64.209.56; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138855,"size_decoded":46370,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (22960)","md5":"2ba7c5a110181c74804781155ea369d0","sha1":"413db40eb0542f4bf39ee5135c4e77619678e3f6","sha256":"5ff607b5bcfd6bda50e6f47ba87a7bba0a560f7004357d7650f21f82c870dd75","sha512":"8125ca427b857eda8c2e443eacf0372f6672e69b7fd246a66fbb9dc75a1c20f057cc48c0002f8374af0a7afa86919c93d881a5b060cd7932ce78547b1695c2b0","ssdeep":"3072:oy01C7JW0A9+r6WEl72GngKhnA8VcM6KvUiuuwW:Kz9+rO72TKhA8VcMXvUiKW","tlshash":"fcd33a0b871526bd0aa313643ace3ad577784a25d1e2c455ccdd822c13b796ee13fbe8","first_seen":"2026-09-18T04:26:23.250704Z","last_seen":"2026-09-18T04:39:46.077899Z","times_seen":12,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/fonts/proxima-nova-600.woff2","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.047Z","timestamp":1789705829047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /fonts/proxima-nova-600.woff2 HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/assets/index-8jGlR_b7.css\r\nCookie: __ddg8_=V9glH2ozdpcnEfFC; __ddg10_=1789705828; __ddg9_=162.158.222.53; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=thyrm6erndomSytD; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg10_=1789705829; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg9_=162.158.222.77; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zbM8bD0l4D%2F4zTOMragNBsFNS0CpcVtfEtTYZiK4MG%2FIyYvtR1epjUd7hqKFVZI8bCpJqxlA%2FQL0F1fpwkOrPksXoieHG%2FF8%2Fhbx6e0fF2mfahuiPy3GFe8L3Ty86CoC\"}]}\r\ncontent-type: font/woff2\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"6aaa9bff-83dc\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:11 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\ncf-ray: a3cd9d978de87127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"thyrm6erndomSytD","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=thyrm6erndomSytD; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg10_","value":"1789705829","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705829; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg9_","value":"162.158.222.77","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.77; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33756,"size_decoded":34781,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33756, version 2.197","md5":"5eaa03ff2b698d50c8a669c1a73e399c","sha1":"85ffa4aa91e025301e8c3cbea9911b4ee4eb3f8b","sha256":"44f93a15e7c6259ec7ffe38d97430fcb2d51ad57ca9a9e97670a509221ef117a","sha512":"a472a5d16c89c75af20adf632cb48d02d9e26256b460259ffd999e8fc3356954d19650619732d77d5e034f574198721d1133953e36e3b228ed008d3012fb11e5","ssdeep":"768:jkjhfJn3wuqOpruG5unwF6EvZI8jj1Kt311xNzFw:w1Jngsp6nwF6EvZNpQVzw","tlshash":"1ae2f1b02403f85cea93e2bcca479c62c4f4a11c97898b157c78a67de71b9c2dd16cd9","first_seen":"2026-07-22T11:06:27.4041Z","last_seen":"2026-09-18T04:35:19.652248Z","times_seen":21,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-vegas-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.603Z","timestamp":1789705829603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-vegas-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"1d4ff-19e1889e1c4\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007884\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rXnsXk9WgAeLqaqz5PY%2BkVfxT50C9rUuPjVXQ5aSExWTDzWZgToIRPU2q%2FAxIHc80kMHx0jrZ8CXB4G5puW9E%2BA0eCcyn8oltO9dol5GTV1syAbvR8%2FDJ5uc5qKUxkZvsDg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b0d955697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 120063\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120063,"size_decoded":121517,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"d97c882f1efb1cb1a0602a1409eae227","sha1":"fed1caf3f89fb7c82227e37bd3159eeca20d05d8","sha256":"5a11d7cc3d0dcb1cdc5b76a698c907e6c85bee99c68ec743af24df813e67fa29","sha512":"c5cdd38a27bdf7e64929d9dc9092c4fe80b96a1bdd38f865aa1e9db9c207a34e2daf50c46aea9ada68011e8264e5da1a3ff18bc7573f1249e3b1cc0789d32080","ssdeep":"1536:w4cNnWnyYHZDR+gQngdgg768GBAqx4v6QI0ZbVZY4EamRVW63QTnwHe6mp3ZyNlO:oEJHZDR+gasY8ZYNaD6WwHHNo1","tlshash":"e8c312e970881bf8d381ea1ffa06ec26027a87c97fd32cb882486cbc4554e5dfc55161","first_seen":"2026-05-03T09:25:58.487822Z","last_seen":"2026-09-18T04:39:46.093605Z","times_seen":101,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/coinflip-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.634Z","timestamp":1789705829634,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/coinflip-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"d612-19fb30bbfa0\"\r\nlast-modified: Thu, 30 Jul 2026 12:41:59 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007883\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uSKa%2F3bTiPzOKifwAk%2Fe4znsdsWg5BCzvmcWbcgYckBB61xfRCzcgh7patRotIZB8sV2H67gle9459RKZy3vWu1Z7ceakwjzqDLKwSosBifPN8Mtbr3Zlec4%2Fs%2F0KXOWZN8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b3da85697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 54802\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54802,"size_decoded":56254,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fdbaeb3d555252953c048005ac6cf5d5","sha1":"a9dd99896d13d9b7805fb3ac9ed0e1aa8a111f86","sha256":"0dc5eca5813800dc327b56e8be0492ff4773e7dba6ea23f286b91eb8c869e175","sha512":"93edb192566b733bae2060e15deee775c39a3eb106a95ebbadc056f0af909013275d9884c33f18437c5fc43bf768db636d323d34557a35a69ab6b434d858419a","ssdeep":"768:sTayCE2ehaNnd4N5T9MPF5IcpL3EGD3w2tUn/LDYyorbkCI7Ifi7HvyIr1VAmGUn:pyLraNd4xMNt3EFGrg3HfRV3P2gH","tlshash":"063301ef43b922a9ed18b57afc00154235d8b5e29f8d9e12d17085e091cd1a9abc286b","first_seen":"2026-08-03T05:12:55.550879Z","last_seen":"2026-09-18T04:39:46.071226Z","times_seen":41,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/lucky-neko.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.640Z","timestamp":1789705829640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/lucky-neko.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"2348c-19e9f372cf0\"\r\nlast-modified: Sat, 06 Jun 2026 23:14:13 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007883\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8aiQOSU%2FMU%2BvQJjVl4wWFORISl%2FMT3%2F3tc6%2BjBFR4ETKvztuXYqByXTsYvncZp0EyufbySCsgVeIGuUjDwQkPGA%2Bi%2BkNMWze2ss8gWxVRmKUJG8tNbTVRxI7TRsXZ%2F5K8nA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b4dae5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 144524\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144524,"size_decoded":145986,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7a66f6a2a45ffeb6365a9888fea9d071","sha1":"9d21d8cebcced6c6d06aacc78b5ce284b40abba5","sha256":"8d6a20e89555c6993d5b364f1a223d2b535dc6dda62a2029e109480e4e50d0a1","sha512":"dfb60fe490e76647ea3e84eb22782ffcbb18f31e164864b848e68f5aebfdbef0290a8b18c1aa28ebdf17b824b9fff27b6b5163bc79d50c8100bc2833c965be75","ssdeep":"3072:x/hzMOC0dko1b7E05ml+65J3Q/TLlQrsFLwHFEPLqgu9:x/hzM1qn1b7E2d65ZQ/T6hHFPp","tlshash":"b2e312eadf784b19488cffb17063d168cdb07f0bdf7a8be66613160ac2285455b5c285","first_seen":"2026-07-10T22:56:48.039027Z","last_seen":"2026-09-18T04:39:46.037333Z","times_seen":33,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/wheels/status","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.140Z","timestamp":1789705829140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /api/wheels/status HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://diwinplay.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"eac-40d2uT5up4oNrjhGah1ClTj57Dg\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uf%2FRgfE8BydZS%2BIih5ZFyg0inwZgsmDXu3s4luG49epHLtGQ4cyjM%2Fklm3Hy5vkNpW6AvsW3HmjlGz2%2Fo3LmHVdc6VOH9Zk6%2Bb4OZOz7wnRbWewlLvkfAxqS1VF9hu2MBPg%3D\"}]}\r\ncf-ray: a3cd9d982d5f5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3756,"size_decoded":2030,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99597072f6ccbe42c379ad34d300f641","sha1":"e34776b93e6ea78a0dae38466a1d429538f9ec38","sha256":"c3a27e4b3a82e935e92ef310c4fc6c81808f6b269fc2816d7125f4cca5c38468","sha512":"3baa8e115db0fbf80f64a3c6dc47b4c7cbb568a24a3ba6299d19f2bfc6544c65a5df9bd0526d1739a2e3e2dd7b2ba657bfc950a6093b6293e385725c54dda24c","ssdeep":"","tlshash":"ff7103123d9d8e72c1103a8dfac3823c34d9920a15c0cee6d5dc8e7562d839e6e35e36","first_seen":"2026-09-05T00:55:43.474107Z","last_seen":"2026-09-18T04:39:46.07059Z","times_seen":17,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/big-wins?limit=8","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.144Z","timestamp":1789705829144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /api/games/big-wins?limit=8 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://diwinplay.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"aba-ldoK9ddm8gwMYmXgMz+udN0xwi0\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2BXQbkMevaq2yXcvVHJ0HJdPxQ0PZmNrgrkjnFjG4nmrEIt6SEqlkjEgt2vkZaAwsh0B4ASWnK02mOWFn14sjxkjoQQ4MNDa1j16qSrj1qXWEkMPwe6uUmDJjvXuBXlwBl4%3D\"}]}\r\ncf-ray: a3cd9d982d615697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2746,"size_decoded":2351,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e676615b247fcea62932d418c0632007","sha1":"95da0af5d766f20c0c6265e0333fae74dd31c22d","sha256":"86e71aa467ab8f44eea8b06e2880091f039fba1c03628f73303861759d98d2a0","sha512":"5106f9dba44b6e1f2d2faaec6a17deafa75e7099d48e45ce8bccd3af9b0c0ba74b00635b4a2ea824ef690032773f431bad19c7b5e49aea01b2fe434638a3c854","ssdeep":"","tlshash":"885113af45441df8db349be08089b5ade8dca1bf81e01c04d29e8c69ccf49e939bc513","first_seen":"2026-09-18T04:31:23.564281Z","last_seen":"2026-09-18T04:31:23.564281Z","times_seen":1,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-race-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.599Z","timestamp":1789705829599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-race-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"2fb27-19e1889e02c\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007884\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a0CNXk4Sn8EJdaMEjsjQ9%2FcKT%2FygmNtnTE7QMO3mIyFs8S9xq9K7kT%2F4fnb7fZTi6Ye1oMYgH8MvjVkndnIot%2BBYI%2BIsTw5KJErT6IoVITXNgpCeMoKsVSWaRC897rca5AI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b0d935697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 195367\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195367,"size_decoded":196823,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"de158b0c510417fba2d86fe9dc29d4cd","sha1":"b023587e15eaa94cac426b0a634e83b3fad3d972","sha256":"dfe048fce2f1b58c4cd56008d522b8ee3b1f0b40b6383d846441621c8d89df6f","sha512":"b035fa249696ca1923e54314cb2a96197d5878f1e11a1cd33a57ddad4694f4d92f3d70f71b21a1749a3c835b3109e5791b6b7269304aec9f12c55d5e6c01c0f0","ssdeep":"3072:NJJRhYFLeQitU00sUQecSwR3+SFYGypmMSXJ/EOYF2/0/+RsEvjO8/e9xLX5kQO0:NzRYiQ8UiUmR3ZFYJpmMSZsOjuUa8/8d","tlshash":"611422119983348d566c0beeed88d0fa00fc654e53e954b059bc9acbd6ac3f117c2e6e","first_seen":"2026-05-03T09:25:58.528271Z","last_seen":"2026-09-18T04:39:46.03876Z","times_seen":99,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/public/domain-info?domain=diwinplay.top","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:28.787Z","timestamp":1789705828787,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /api/public/domain-info?domain=diwinplay.top HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://diwinplay.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:28 GMT\r\netag: W/\"248-5RZZSGRknXEu01ZhU6cry1fAunw\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MJn5RmI%2B6Oq%2BptZjtfHWmxGp%2FpA%2BBflKgS8z2zDqdQkOlyz%2FM68T1ksvanBo53RTrt0YBRNF28sV5ojWVpyfgIXVR5sDll1xXVN9DHlDumBwlgsSyBPIjFb2L9zBoC7KasI%3D\"}]}\r\ncf-ray: a3cd9d961d565697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":584,"size_decoded":1733,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c4ca24b74413a857573fa6b7702f98ae","sha1":"e516594864649d712ed3566153a72bcb57c0ba7c","sha256":"51128349221f068642275a39ca3760f3c774104c579acbc481590997514efde0","sha512":"2c28dec63f0dbbac41d9a1893d4d9c982d0dc86baa2df021210bed4999ad1eb533f91cd7f352a6bcbba9599cc4717ea9da66889d9ff5b45be481b9578284bb46","ssdeep":"","tlshash":"edf08b05bf10ecfc8f567b8134a63f0a427d55279c667ce1c1dd4f2483e91329125b22","first_seen":"2026-09-18T04:29:16.227499Z","last_seen":"2026-09-18T04:31:23.566362Z","times_seen":2,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":3,"connect":26,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/fonts/proxima-nova-400.woff2","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:28.182Z","timestamp":1789705828182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /fonts/proxima-nova-400.woff2 HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=Dy659alI1FqP3scG; __ddg10_=1789705827; __ddg9_=162.158.222.83; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=uWsaua7IhTO0x6JW; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg9_=172.64.209.60; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncontent-type: font/woff2\r\ndate: Fri, 18 Sep 2026 04:30:28 GMT\r\netag: W/\"6aaa9bff-c3e0\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:11 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8hufBGXFkrGB6dMh6rIMGmmoV1Vypjjs2IX%2F8fQSa989%2Bze5H2yzvOl%2B7JY%2BEZmJUfgohIrFiqsgoW0L0gGQuypKKBjlWhl5timoPt%2B33vo6MjHPPQVC%2FrsneJ%2BLKbhc\"}]}\r\ncf-ray: a3cd9d922daf7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49907\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"uWsaua7IhTO0x6JW","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=uWsaua7IhTO0x6JW; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg10_","value":"1789705828","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg9_","value":"172.64.209.60","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=172.64.209.60; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50144,"size_decoded":51004,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50144, version 2.197","md5":"83a692d665bcefcfd06fa29069a70492","sha1":"c993dbd1deaca0176325051dadc14e19091227aa","sha256":"3f16e37be1b41b426978a1eaa6dd9d30050ab36ec5a0a56d56e5156b55ca911e","sha512":"c786e7d1a4e0652d49224a0852d0ec2234b3bc7aa97451c9d3ad45b97f14cc5d60ea3acd92048ca0daa1a54a631286cac305bf9b002af68b2c04069173dddbdb","ssdeep":"768:XG4XuxwpUzmAEzqXkxbPMDUGMVCvyIPUc8ogdIsvK5RmzKFd+Wmk6:24Xn1A5URkKCBZtgdIwK5RmeFdok6","tlshash":"d833f121f0f8de0be801267cb005a7f393fa85790af42f5d2786b15b6c5f6261be4506","first_seen":"2026-07-22T11:06:27.405995Z","last_seen":"2026-09-18T04:39:46.03197Z","times_seen":42,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/tower-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.631Z","timestamp":1789705829631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/tower-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"d026-19fb30bc5a0\"\r\nlast-modified: Thu, 30 Jul 2026 12:42:00 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007883\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RciHqdbu%2BAAgWFEpHysNiTt2LdJ0pU6O5Hj5nKNSeGBC67LyyRDCzoaIZgbAXFdybWWMihIF1KohLJEOJA8OSMzbdpyHkPC8YouRvfqV7YHwLrGHskb7oxL1pGlIdZwZZfk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b3da65697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 53286\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53286,"size_decoded":54732,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9b9599e2d9027e6ab05bbfeccb087252","sha1":"01c880f214208347ffafbef11a4e9f0dadd09197","sha256":"f18abaa4b4fd38b64c53aee48caf8195a6d9f39dad982b48d17301a710374894","sha512":"4e895bcdac61c4b06189fba323c4298b02e16029c369402da731516cfcb60336fe9efe032f7e80138f1cdaee0be22d1bc5a4abd0e85317ee4b48cbb5d7f4e75a","ssdeep":"768:2T2ScHf0aT+HBx2sLkijIoCogKWIrNCw5L9RdmDWSrEvOA61aJ4sg4jJeAolCJub:Rv+mOu+gKTswRLdmwaang49ehCJH52wE","tlshash":"7533f1025128fb2ff494f030f4c0521bf175ae98f25b566b63b7612a805c96827b579f","first_seen":"2026-08-03T05:12:55.485514Z","last_seen":"2026-09-18T04:39:46.035391Z","times_seen":41,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/live?limit=8","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:39.285Z","timestamp":1789705839285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /api/games/live?limit=8 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nOrigin: https://diwinplay.top\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:39 GMT\r\netag: W/\"a7e-CE0G3HT2kZMM1pjrp1Rt2zOEf3c\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gYDwuCFcRC3EPshq5deC916BoIXdQaumAjvPbOhtRTOe6crtq6%2FI8htrNKrMwG7gO4x3iCA52tc8uMkhM6kMStZE9IlPrZGR0bsrBxCMoi0NogRdQtFaY6vGsyyABXL55fc%3D\"}]}\r\ncf-ray: a3cd9dd78f345697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2686,"size_decoded":2229,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f3e413b143c676146e2a37f702d8c70c","sha1":"084d06dc74f691930cd698eba7546ddb33847f77","sha256":"b4f89b29b96ac8558a1b3fa8141526e8a36806f65cd62b6b8ed10b2080419542","sha512":"f76642209e3515586afe8a90b70c587f11179d2dd84b7500a75ceb40aed98bd73c7df7cb8e9c69cf7d5b8d2d722586b35944cfbaa09599761d514a8080871b35","ssdeep":"","tlshash":"8051e06e51482cfceb3519d8848974aee8dde1bf92c01809c1aa8d2ecdf05d6297cd27","first_seen":"2026-09-18T04:31:23.568667Z","last_seen":"2026-09-18T04:31:23.568667Z","times_seen":1,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-18T04:30:27.733Z","timestamp":1789705827733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=Dy659alI1FqP3scG; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:27 GMT\n__ddg10_=1789705827; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:27 GMT\n__ddg9_=162.158.222.83; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:27 GMT\n__ddg1_=xvOYisBHONxp2ec2QiAs; Domain=.diwinplay.top; HttpOnly; Path=/; Expires=Sat, 18-Sep-2027 04:30:27 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: no-cache\r\npriority: u=0,i\r\ncontent-type: text/html\r\ndate: Fri, 18 Sep 2026 04:30:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KOBXQc8jHtHzsCjBvW%2BON6xDSABTuXpjJEDSqHFgnaZt5JLS6voMcpseAnLDENitvmwM%2F2lmMUC2gWqh62xBvkXemxLyv4AmGTaily%2BZ24PJI7NyKLECW6mHWQ%2F%2B4aBK\"}]}\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3cd9d8fcd8f7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"Dy659alI1FqP3scG","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:27Z","raw_expires":"Fri, 18-Sep-2026 04:50:27 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=Dy659alI1FqP3scG; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:27 GMT"},{"name":"__ddg10_","value":"1789705827","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:27Z","raw_expires":"Fri, 18-Sep-2026 04:50:27 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705827; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:27 GMT"},{"name":"__ddg9_","value":"162.158.222.83","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:27Z","raw_expires":"Fri, 18-Sep-2026 04:50:27 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.83; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:27 GMT"},{"name":"__ddg1_","value":"xvOYisBHONxp2ec2QiAs","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2027-09-18T04:30:27Z","raw_expires":"Sat, 18-Sep-2027 04:30:27 GMT","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"__ddg1_=xvOYisBHONxp2ec2QiAs; Domain=.diwinplay.top; HttpOnly; Path=/; Expires=Sat, 18-Sep-2027 04:30:27 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3988,"size_decoded":2456,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e4a85eb40048de8c412311e30c083054","sha1":"f665d77eff058765459bd9fd42b999efe3b93763","sha256":"8ffcfe8ef236eb81b5c6e3c5bfa08284a9044a2294be1638c6d28c97b00fe6ad","sha512":"70eacec9b4bf5a4fe5ddab2df7dbfcf379e50479c83f40ad52b1f96098bdca46929d237f4088b2725ba0b661779c4c63a30e40cbf7c1cf305a40103e0bc4dc1d","ssdeep":"","tlshash":"6a81630576b0b894027257386ad3b448ee61e647020cada4f98e50ee1fc0b95cbf3b72","first_seen":"2026-09-18T04:26:23.22469Z","last_seen":"2026-09-18T04:39:46.083754Z","times_seen":12,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":54,"connect":17,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/vendor-i18n-uHMRTU-B.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:28.194Z","timestamp":1789705828194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /assets/vendor-i18n-uHMRTU-B.js HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nCookie: __ddg8_=Dy659alI1FqP3scG; __ddg10_=1789705827; __ddg9_=162.158.222.83; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=UsfGiOApuQNFu8Nu; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg9_=172.64.209.38; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Fri, 18 Sep 2026 04:30:28 GMT\r\netag: W/\"6aaa9c15-ff46\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hz0nxcCtnKGLtSXv%2Fph4d3u48jO9iEIgHoxVhzXXJbMk0DJ0j1CofGnUhrD7PlmFmJR6zMveA3mOKHN3fRdMR9as4%2FW6xJiPpoMnS8pe1ze4yJViWW4kuftKEKxVp4Y5\"}]}\r\ncf-ray: a3cd9d923dba7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22507\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"UsfGiOApuQNFu8Nu","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=UsfGiOApuQNFu8Nu; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg10_","value":"1789705828","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg9_","value":"172.64.209.38","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=172.64.209.38; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65350,"size_decoded":23634,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65333)","md5":"220575d9f465bdfbb7f82bda604330f0","sha1":"849644fdbdb312c4c0af8fc5d5c196175c4f8ee5","sha256":"7f9f4e1f26a795cd512ed330bb3dfe5e8fb0c0db46dedd4bcef52806b31ac7f0","sha512":"05715ccd0a0ebf3a0dcc2eba59b86bbcb0bfeb59aa63431c1ec9ac08a47211587c186d6a531b7982e1c606c65bef1d60e083d6fd43992f7ead2349da7e6f9d43","ssdeep":"1536:tbi7OVOGuNi+6EOl6ZG8N42fLm3NfLiaphW4:1JV4OcZzN42qM89","tlshash":"005319c971faa62643da40d530711408b739ad583448644dfe7dafd6e8d3a0a92fbb34","first_seen":"2026-09-18T04:26:23.261272Z","last_seen":"2026-09-18T04:39:46.05626Z","times_seen":12,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/gift-DQQHF3ac.webp","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.134Z","timestamp":1789705829134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /assets/gift-DQQHF3ac.webp HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nCookie: __ddg8_=thyrm6erndomSytD; __ddg10_=1789705829; __ddg9_=162.158.222.77; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=yns4Lb8P739rIMVN; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg10_=1789705829; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg9_=162.158.222.56; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: \"6aaa9c15-ae10\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ojnaGyE40G%2BkHMpr9t6jKgfVkQwmHtQUlkQUCMzvmZip2t%2FJ90Q2kEKhZ1q3Fx5BMOQp1ZCexH2M9Q4c0iDTRe9C1QbKFSvrZK0LP7bTTWkV1QuJRvk%2BDk8ukMu5FQac\"}]}\r\ncf-ray: a3cd9d981df07127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44560\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"yns4Lb8P739rIMVN","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=yns4Lb8P739rIMVN; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg10_","value":"1789705829","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705829; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg9_","value":"162.158.222.56","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.56; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44560,"size_decoded":45650,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b6e1465c4a6ecad7565a9360ab1c5736","sha1":"f3533f2837eb4457b5efdb443d1ebceb833437f9","sha256":"1201d52c76b5a451304fa5bcef9715f55ba4e2a78957be8d2b3953954be9c603","sha512":"e286afb5bc00454992a86fd66dffa1d4faf96a875086a7ef3ee42a0f7ec74c6e63b9852a4a786f66d6fda3f637ff09a894b1351ecb84d4a2139d8c39359d8ba4","ssdeep":"768:C/XQRt8SUhSzFMJXZDEUXrU9XE3eBBVn6yzzJnmBasgQNpWW1+e1U:C/m/zMJX1tXuBBVdQNpvP1","tlshash":"d7130225a1d7cb4e1b7bac0c15a56d6e8325e78a23e5fa18cda052c2f4bf134e64058e","first_seen":"2026-08-15T05:35:42.782451Z","last_seen":"2026-09-18T04:35:19.668337Z","times_seen":7,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/win-cash-CHofxrqH.webp","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.155Z","timestamp":1789705829155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /assets/win-cash-CHofxrqH.webp HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nCookie: __ddg8_=thyrm6erndomSytD; __ddg10_=1789705829; __ddg9_=162.158.222.77; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=C80oKJpX2FWHOxX4; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg10_=1789705829; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\n__ddg9_=162.158.222.74; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000, immutable\r\nserver-timing: cfExtPri\r\ncontent-type: image/webp\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: \"6aaa9c15-f84c\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jYF%2Br3sxsVndQT20R7uL1rr2QNBVy%2FhbNA3rv1nHJWTIPS7S4dapCRCCqf%2BGyRvllTYHSx%2BqRpP2ITo9RivT%2BgtR7Js53MhA0wh3P7Of9u673ozJ%2Bh96vNuceUkKgAz2\"}]}\r\ncf-ray: a3cd9d983df27127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63564\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"C80oKJpX2FWHOxX4","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=C80oKJpX2FWHOxX4; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg10_","value":"1789705829","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705829; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"},{"name":"__ddg9_","value":"162.158.222.74","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:29Z","raw_expires":"Fri, 18-Sep-2026 04:50:29 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.74; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:29 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63564,"size_decoded":64660,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ae60319d41f63eae7109c16305553d3b","sha1":"ebdadc59c48453e46d9a9130df9ab82fdae1d0c2","sha256":"94f291a905db8a05f837866d504aeca0e34d8ed42c390f74bd79c4a2d04ecb65","sha512":"4fa704b949384c795690fec18e2a042588b387cd4876c0c62af0981eb0242a651841dcf87fdc88b9474020022bf616fd7e6fcd8cfdb302203fa46b42af05ecc0","ssdeep":"1536:ush81eOGsNlT+F55lwOEK7C/lgjKHK0zLIuBX5krTEXq:usO1eaHOwOEK7CdgID7BX5eD","tlshash":"3853d038c1dfd1a8f179057f4cacf411668e4c1df2abb33900e1626f284d295af79699","first_seen":"2026-07-22T11:06:27.439661Z","last_seen":"2026-09-18T04:39:46.091607Z","times_seen":42,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.604Z","timestamp":1789705829604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"13ea2-19e1889de90\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007884\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=75DyaQR%2BvCilEsqfGc7OM8ayGiazXUdR4gmaRuNbMfZ771o3CeU2fI1ekmrHBWQdJDaehSwRidTz7TH9R%2F%2BIR1%2B5CZ5LndhN51uqTIorp5JvWz4RPS0vT3JGp2%2FSUMO5TBM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b0d965697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 81570\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81570,"size_decoded":83025,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"bd31dc34709ab28154febf333c9d7b61","sha1":"957e8b303a3a7eac3058fbb67cc82c673569388c","sha256":"c4a2ab24afece8e542c58e54a15c9b5ba387d224aec670a881d89cfc49f63f8d","sha512":"e77dc104b82d541bfbc1dd6a5195a6a9f7bc24e32e4acb2764a0118427fba1bee9b07b4716d3f4228fff4205b447c79ca0e9ac5af12d18e6eac868af1ec8b9d5","ssdeep":"1536:XtLff+jHHoz3d9eMxKlXfg7N2OT0RyDxbH+pMEaJUIitksm:Xt0nUd9KXfg7NrmytgMhitkL","tlshash":"c28302daff75e12428a5d3a7a117770c421c9ef6e2bf2ee12c1a517a50efd84b812314","first_seen":"2026-05-03T09:25:58.558516Z","last_seen":"2026-09-18T04:39:46.074739Z","times_seen":98,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20fruitsw.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.627Z","timestamp":1789705829627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs20fruitsw.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"aab5-19e87ec541b\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:12 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007883\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZIoerIJdww%2F5rgXnKUz2tOPbauVqdg4Ritm4v%2FpQm3ys5FseW8%2B%2Bwkfz84zf7116lA8Dqa2Ryr1TcHvyAf9pgdkor%2FrbzSaRdMyvfw5TiDUFo0CZCK7n4V%2FfvbJ%2Fg6dAtE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b3da15697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43701\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43701,"size_decoded":45159,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 360x472, components 3","md5":"20c5f416730af16503567886dc21a735","sha1":"4e65d291c4c2481d1d0a5dc62a68b4aff59c1820","sha256":"27e9c3d08842aa527d828708a6f5c8e98752cf1ed941679ff1721bb6e1f064a0","sha512":"f5a695a9fb5b0fcd201af858ca3242bb083fb5c91361838b9c6e3d30ccd266ebbfc9a2fa165995a8f12ea67f816bbd18bd06adf63630374426bc81bd171ce4f0","ssdeep":"768:hYy74pT9jMPb2Gh4g7JP51WJxjKVOhcfPNmkXbMwN3jCjogRmu9E8p9wiARnbr:hApJjMPb278sJxjKRPNmkLMS35gpXYTZ","tlshash":"eb13f16bc67ce9d3f43bdbf01f354867b3a1567f96a26382783c5a5823d44014ac9728","first_seen":"2026-07-10T22:57:05.917845Z","last_seen":"2026-09-18T04:39:46.08099Z","times_seen":79,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs25quadwolf.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.658Z","timestamp":1789705829658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs25quadwolf.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"4d70-19fe863b9d4\"\r\nlast-modified: Sun, 09 Aug 2026 21:17:57 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 1735090\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BQHX2Zyhrt8Kag79b29CgRAtmTWbLTuHb6FZQiXdJpqITUBJRLGVBKBqTKyoYcfBdFy7WP58nv0s5foNEcGvWLLjZQwNGbnvG244thBYOAVw3r1kk2Uk3yfXomh3WkP7zfw%3D\"}]}\r\ncf-ray: a3cd9d9b5db25697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19824\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19824,"size_decoded":21270,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"38f7ebd46ae436e4193c583431c4ff9c","sha1":"87c37085ba466a6f7493bea45695beb8dd541c30","sha256":"e5fe1440b484a1c976fef0b20f6ec978295b9bc5b75eeb023af64c50d06ba5dc","sha512":"c5f52c4f4acae5ef57236c66d9172f9e100557bdad80da597958655f8552d02d9e752aaa64fbfbb8e98b61f92be978d44c7ec5a8b7b1dcf69a14541c34036d16","ssdeep":"384:IZotUWFNSh39+m+GWFi9Q4LqpaAg0ZXUGK/yN+sVRW57nXy2F+3q+V8ixtkwWO:IZoNNShN+mXPQ4GxfUl2+sVRWlnXy2FE","tlshash":"b892e11cac2a91d0591afdefec7e1cf46cb9875f8e65874d907c800c6ac70e6560a973","first_seen":"2026-07-10T22:56:48.071457Z","last_seen":"2026-09-18T04:35:19.663356Z","times_seen":40,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/fonts/proxima-nova-800.woff2","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:28.185Z","timestamp":1789705828185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /fonts/proxima-nova-800.woff2 HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=Dy659alI1FqP3scG; __ddg10_=1789705827; __ddg9_=162.158.222.83; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=t1M4N8YMdwiVZYgW; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg9_=172.64.209.58; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncontent-type: font/woff2\r\ndate: Fri, 18 Sep 2026 04:30:28 GMT\r\netag: W/\"6aaa9bff-ddfc\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:11 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SwwHdF%2FVDksILGTUmMaCuGO0cvDiFRAgvfbpxkTJZhim1N4rQ4Z14Cr%2BSUPzy0yKFpsjwaqRPm8HY4XDBu4EaGMLO94LqBvhDQjlT8dGT0SXxJrLmkrArXD2xsXOUMes\"}]}\r\ncf-ray: a3cd9d922db17127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55480\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"t1M4N8YMdwiVZYgW","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=t1M4N8YMdwiVZYgW; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg10_","value":"1789705828","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg9_","value":"172.64.209.58","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=172.64.209.58; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56828,"size_decoded":56567,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 56828, version 2.197","md5":"b62234d570a2f321f0b3eb0e8f407576","sha1":"2ae6b0e3c263dbc04cb474bd962f3db4e286af94","sha256":"04500fba7e032d439d12511f6886776baab412b61e55ef94d3a3641db66e3940","sha512":"1c5aac8ea95a4d961778ff6ae5efefb6b7b0ca6a468687b82ee0b18180896475f8a3bcb6dbd69c908af87a229b8f37d179448e4c98c473d8fdcd52d99fd66432","ssdeep":"1536:PsmprCcNwOBEGu99oT1saR61dlbGQIMc8H2LAsairOTfDm:ffxCcT1wleMcSfsHr6fDm","tlshash":"a943e19d480fe940dd913139553a36c9c1508cb5971f9de92afab0ba9b7fbc21f20e06","first_seen":"2026-07-22T11:06:27.425097Z","last_seen":"2026-09-18T04:39:46.073237Z","times_seen":42,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/mainpage","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.143Z","timestamp":1789705829143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /api/games/mainpage HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://diwinplay.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"fcfa-d7GqAM8RJajKeaLQmEU0TflOuls\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=76mAWARsEDjinyjnFkiAvd5LmN34DSiRDBRMqh60F8DhH%2FyucmwLAAJRQIMu%2F61mSbzBDaaXq9hrWBYKaYKXnhGrB8sOwrc9CyfKeRFZ12oyDtyQLG2w4WqlhXsHA8O6ujI%3D\"}]}\r\ncf-ray: a3cd9d982d605697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64762,"size_decoded":5890,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c2644ccc9b5a7d97789b3c72f05b7072","sha1":"77b1aa00cf1125a8ca79a2d09845344df94eba5b","sha256":"6ca19f628ad97cac0502ca3e5debabd21b9dd9f5ef304573048987b38c2eac8b","sha512":"b78c86c0fccc4483a0b33ebc2e2ffb82619b07d5ce819572462de4c61b5902827b01284ce7bd8d7363cded932bc2637a0268738db00ea3d48b8367bea6483f9b","ssdeep":"768:TacferpPtR5vjXgy/KDXryO2tdC8GI11PRG8qbjWOlnIPsfJQhN1KfOUwSkdew1o:4vnNUvBRRZNX","tlshash":"0453357e07bd7c34e63142aac10e75d3b4c9f13fd884861cf3784925c9d99aa2a9e41e","first_seen":"2026-09-18T04:31:23.576601Z","last_seen":"2026-09-18T04:31:23.576601Z","times_seen":1,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/dice-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.633Z","timestamp":1789705829633,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/dice-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"e878-19fb30bc1b0\"\r\nlast-modified: Thu, 30 Jul 2026 12:41:59 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007883\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZYaRJBjMbSEvFTkL3Tm9jChO8cbaxptWL%2BT1Td3AE0tdgGBoAh2qQ2yaNWD5ogX4uwt%2Bq0vvs%2F3T3Ph85Ox8TFwkQOQSM1j%2BwrY1%2F1aUCG65frbaEt1tkaUYg%2F9%2FT5g%2Fl1Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b3da55697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 59512\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59512,"size_decoded":60972,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fff2e15969b5c850409a612cbed1485d","sha1":"e9f5120ccda1f4b7de0b3035b8a952ce12e5ed70","sha256":"b3dd3eebc50039d87993470811865e8923791a5089ca1e3515aa347123b69390","sha512":"198e9f1dcac65b9d5a1e9f967a19ebb6c8d5c6e7409cde4b9fbbb92bd24629c67d48c50e3a3ac88c364534900572fc9fa3bfa94bf0f5b7cb0b013988faa72455","ssdeep":"1536:TrIRyDZBU7ahgw6IeyKWhcyelz307PCCydp:TrIcDZSoLuMcyeREzCCY","tlshash":"7443021723374ff1d69ff0b03b22694fdbe8e2562364c2412ac95ad532c978c4e2ac91","first_seen":"2026-08-03T05:12:55.538796Z","last_seen":"2026-09-18T04:39:46.036563Z","times_seen":41,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs10firestrike2.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.660Z","timestamp":1789705829660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs10firestrike2.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"a402-19e87ebe137\"\r\nlast-modified: Tue, 02 Jun 2026 10:40:43 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007882\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6HdWF3tvm7nICGMSCDUwHSfWWqefpNuIpNOZWv2GAC84OP8lfQ9W79ZB%2Faty0aE%2BWQuHftEDoHBFAxIBH6Vyu6LTLBKQxKMHWmY1PkC%2FCOfHJMLEWPvoRu8TDv%2Fpqu02UM4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b6db35697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 41986\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41986,"size_decoded":43438,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 360x472, components 3","md5":"7c469b9fc23267de90000976fc025224","sha1":"cfb377359ab8dedf7cf8cfb06ce96d5217de1bd4","sha256":"5d6a9d29a39c65ea5052c2bcc60be88addb070b703e4623ef4016ac258c54cdd","sha512":"583657bed6754dd78c03cb50902b859b1b0b3235ee3edede73db247d3f34a604713ce74e287c06ffa5303e0b2088caaed1fd1aa058d40e77cd2826a6b779c45a","ssdeep":"768:cyxYznxPYzs/cIZWSbpufh6YGTVOmCdu98twVD0zK2eDWKp5icd:GznGI4SbpYsYGTVOmH9gDRPKu0","tlshash":"b113016b3ea9a0f0c59ffdf031fc8d6b9a54f83a511cae6d5572081785787e0806c72a","first_seen":"2026-07-10T22:56:48.090528Z","last_seen":"2026-09-18T04:35:19.685409Z","times_seen":40,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/icons-GFHLn4ny.js","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:28.193Z","timestamp":1789705828193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /assets/icons-GFHLn4ny.js HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nCookie: __ddg8_=Dy659alI1FqP3scG; __ddg10_=1789705827; __ddg9_=162.158.222.83; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=Nawv836xiDquqgxm; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg9_=172.64.209.68; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\ndate: Fri, 18 Sep 2026 04:30:28 GMT\r\netag: W/\"6aaa9c15-5277\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aNxeaweiYB6meFxILcsyuGugJfVscwuFlxr4oDaKe%2FGJs8suAA8YkBqGSsK259bUdivL3FQKpsP546DoZ9IKCT%2B7SeNfCCIgiAqxCXYQDTfkHXfPRAjadB152kym4wGj\"}]}\r\ncf-ray: a3cd9d923db97127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7254\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"Nawv836xiDquqgxm","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=Nawv836xiDquqgxm; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg10_","value":"1789705828","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg9_","value":"172.64.209.68","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=172.64.209.68; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21111,"size_decoded":8380,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (21110)","md5":"fca967d2dd597e3d5727784009cb1054","sha1":"f3ea5c6bd761c83e0f41c17ad6ef02cbcc87a251","sha256":"8277498b4bac55d6719daab91090d716ae959e7b0681ac2fe3740b1ce7679174","sha512":"f8844ffe14821a1f78697ce100b83f54cf9601fe3a158b75c13312d66edf05d2a9550380f782e188f746ff21af834d98958553548f69ea1767a5db9d83a403d9","ssdeep":"384:HmuQoAlifjrD+M+5ePmAqzJ8gKavOwZNMSn/XQ6afdLOxIMyAwmVo9W9qVGcH66n:HVAlifjP+M+5enqzJ8gKavOwZNLn/XQR","tlshash":"7692b76f8f88169e4802e68d1f67b0111fed53bc369a8892f64f9536eb52443dca3f41","first_seen":"2026-09-18T04:26:23.225937Z","last_seen":"2026-09-18T04:39:46.037966Z","times_seen":12,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/assets/index-8jGlR_b7.css","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:28.198Z","timestamp":1789705828198,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /assets/index-8jGlR_b7.css HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://diwinplay.top/\r\nCookie: __ddg8_=Dy659alI1FqP3scG; __ddg10_=1789705827; __ddg9_=162.158.222.83; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=2OZ6khRgb9WDi71h; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg9_=162.158.222.68; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ndate: Fri, 18 Sep 2026 04:30:28 GMT\r\netag: W/\"6aaa9c15-43792\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:33 GMT\r\nvary: Accept-Encoding\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fGOPtxw0B26izPWMqFRypuA19CiGr0CjCHLU5K7lDWlsIfo5HW3Box9DS8sQfFl3%2BMzYLRsw%2BE%2BkV0pWK01hec5ejL7Ll9JmWXOzMg0WjQOjq1ZLDcLKI7QvE6OzL2Gj\"}]}\r\ncf-ray: a3cd9d923dbc7127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 37351\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"2OZ6khRgb9WDi71h","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=2OZ6khRgb9WDi71h; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg10_","value":"1789705828","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg9_","value":"162.158.222.68","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.222.68; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":276370,"size_decoded":38468,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5da2913478b8297aa9f290bdcab9fdea","sha1":"a18ce98ccc31d2c3d4b0bb9b1e400f12205a8d10","sha256":"ff79d7ef1b35f8eb7d840489047c9f5630cdf72ae803f0cf046130d52e4483cd","sha512":"9b3a8434248b4ec702f513989f0bbdb3d0afb8243758b339541d24efaef78f12151c837d9f38015812b07cb13020fd3eb740e4482c0f6f3f8510ea353e482151","ssdeep":"6144:U6tcrTp+L7v+W5N054S258tc0hQeImaExEYMwSFZo6E3RYndi8rZBn49z+R66fKd:ZV6","tlshash":"324482a0b235e53fbc33b0f9d39ce88c610ab095de264be9bd51602227c77f55c66614","first_seen":"2026-09-18T04:26:23.231695Z","last_seen":"2026-09-18T04:39:46.085729Z","times_seen":12,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/aviator-mini-spribe.png","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.594Z","timestamp":1789705829594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/aviator-mini-spribe.png HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/png\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"f837-19fe863bb44\"\r\nlast-modified: Sun, 09 Aug 2026 21:17:57 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 1735090\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aGjdWdEBNaaWs2uu169JbGonRRU9uTlHuz3wsjQBKb8C7aQvPVTJXcbvo7bOkgKxDqPQG9lXPsBN1KAidSNP6A3vBfr4ZSqT9FWDq9Q9kZlj5ZOqg%2FPZFCkfmPOUJMxCCK4%3D\"}]}\r\ncf-ray: a3cd9d9afd925697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63543\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63543,"size_decoded":64988,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"1c52b5f3e659f44a930d15becb7f39c9","sha1":"9e28417a76240110757c73b6faf3ac5ce1bedeac","sha256":"9d16af214603d98995216e1c5fd4f75fa7dda5a61a7be83babe7c8b8871e420e","sha512":"c2a648fd43d03cfb15a20bb5602b5e64ff5178cb0b498e4751ee09f87c98fd2cb9a32b120462e7daf3d411058a9cc3b341b0d3b497c5cde40f9d4a190493a100","ssdeep":"1536:d3k0b7RKpki5PUOzdtZS8YtQ9lFMZ6xQEDf4:lZ9Kai5nzdtZS/mMZ2QEU","tlshash":"955302fbfbb3abde1188524a4b312c25f59e12ca9d6f1497b98420c1e8605156de733c","first_seen":"2026-05-03T09:25:58.463676Z","last_seen":"2026-09-18T04:39:46.075531Z","times_seen":80,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20fparty2.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.626Z","timestamp":1789705829626,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs20fparty2.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"5de2-19e87ec4fab\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:11 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007883\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KOJUX9hsBa3Pe1BK3U3mHUyEphSR6QQV6KQBrD874NQTfKcBoGkdZifOzVT9JvEnrctxAzMWLDjOBTQVi0cq4fPlSLKT%2BUiSPsQ48J0igHBrmy5FBTW1jKWl%2B0BP%2BizUo2Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b3d9f5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24034\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24034,"size_decoded":25484,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7161f3dee408d108342e9e493f909cb5","sha1":"4b222932bfc1c35565091316edd289960b13b60d","sha256":"15238cc480c000b408607fcbfd0d3cc978ca6ed13f08a450f75f3b6de8a5eb02","sha512":"24930bfdc8ae5dab65139966a3b51428bba54ddcce47d52c9aadfcb41409030c0f9a8b1510a493fda7768cd4b56bf611c9f3a1e774cf96b14228739d142f3ca1","ssdeep":"384:yUTyQuU+GCFhCtevu528zIqnolnMB0LhogwGx4OPd1+/HrkKKsTOOpzCEj:yUTyQOjC+u+qnolxd6OPT+/HrnTOOdnj","tlshash":"16b2e1d0a815d71e990222cca66c1ee7ee6ba58b7bc00331cf3890e6dd18857a759cb5","first_seen":"2026-07-10T22:56:48.070404Z","last_seen":"2026-09-18T04:39:46.101613Z","times_seen":76,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/chicken-road-two-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.609Z","timestamp":1789705829609,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/chicken-road-two-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"1e8d7-19e1889e150\"\r\nlast-modified: Mon, 11 May 2026 19:35:49 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007883\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2bQ0HxXLj0RHTC4N6nZn3xnCFFaF3bnEOQZRsYQY2Qp7692XjQhtLJK3Ln%2F0Y5xFRmy%2BlpTX1zew%2FFEMz0A6C1OlF5m3C7NcNN7Xm1IaQK4cjfCv2KiRruJiNudcWqVAXig%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b1d985697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 125143\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125143,"size_decoded":126595,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"2d07f21bc75cb17f3940a7123055df18","sha1":"c3fd481de5f7cc6fc3a4bfbce86e2bbdba460c80","sha256":"9ffc0c533072f341ae2d4e275de1a7a5bf86aa9ff2ae655d29a762af22dc6889","sha512":"28f58e9df9b691e95c7020e505dd5625a186f3841a5ded08138178f438c6cbde536e97c10faeff65caacc8a9e56e1d2794e20664bdeca81e12c2d6e98f4b5817","ssdeep":"3072:jbk1ZeasmvqGo36qLo19b9fxS81h2n1Yg:U1Zea5fdWo71xDzS1N","tlshash":"33c31253a6202d8bc25b83fe551b055cbf7d8de00d29baf78e5ffd618a38ca1e944409","first_seen":"2026-05-03T09:25:58.448805Z","last_seen":"2026-09-18T04:39:46.03346Z","times_seen":102,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/api/games/live?limit=8","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:49.372Z","timestamp":1789705849372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /api/games/live?limit=8 HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nOrigin: https://diwinplay.top\r\nSec-GPC: 1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:49 GMT\r\netag: W/\"a33-hPaWxWCXfBcQy8NK+rutY9wHnsw\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uUbp9Uta%2FdRB%2FMH9ktcZn5ybJC5ul1%2BRsI%2F0MW1jWWpqwMg9IiQfINVd%2FwTa6i4CyZ7IA4q1xHEFyx0dMqWRvRC%2F%2Be219IX793%2Bn7jOYMrvHo2XXPmspkuY7Cwgn8t6Ti%2BE%3D\"}]}\r\ncf-ray: a3cd9e1699fa5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2611,"size_decoded":2241,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9a8124201d0cfb6bdaf7fd822e6765a2","sha1":"84f696c560977c1710cbc34afabbad63dc079ecc","sha256":"a449e1a330bf7e79a213f2036fe246d03e78fa08d1fdb50ddd3c4b3fd935f12d","sha512":"e8272dd60af6159ef90704b95d14adb41e55e08a64ff5233338904c81efc61775efc27d5dd8487494570ec11f438bc14a7d5110f0c87f56391241c14516de0d5","ssdeep":"","tlshash":"3851bd6f94882dbde7355ee08489709de4edb1bf81d04c08c19a8d3acdf41e52978653","first_seen":"2026-09-18T04:31:23.584222Z","last_seen":"2026-09-18T04:31:23.584222Z","times_seen":1,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/rabbit-road-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.606Z","timestamp":1789705829606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/rabbit-road-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"266bb-19e188cb63e\"\r\nlast-modified: Mon, 11 May 2026 19:38:55 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007884\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WeCf9cu5Z%2BPZ%2BzFGB4Vxp9l5ye%2BC9VrH18TB%2BdzYECVztzMMdtn%2FmGuxiKz2UFt5zqEWoVGZDz2T4O8ozn2dbKweP2KhA74xNDOhWwCDx3CIhbm%2BWWe3LL0MdCP3p2QhF3k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b0d975697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 157371\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":157371,"size_decoded":158829,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"350386f4ae53bc8b1e470dbc414eb3a6","sha1":"d1d4472c746f237c379d64794389971df62dbeb9","sha256":"974fa37657af78ae7f1695c622ad77f544cc19dd6c3bb29502ba7e6f4b5c48c1","sha512":"7ee319101357aa4bbe8e6c0eda5ca456d062d8fe15a6298e01066491c36ba25b534266b8ec19f2ba1dfbcc657df1b0c849ca65c57767743ff21269550e04144f","ssdeep":"3072:n3qGl6Cx84WbG3geXr6LfjDcjjeZa0V89C/gblDXNOVR7E:n35lkYDXQrYjC9AxblQ+","tlshash":"6ef312530d7981eb4b9bf6e3b9040aa01c026b4d37d183bbe79deec869d58bd08c5305","first_seen":"2026-05-03T09:25:58.450756Z","last_seen":"2026-09-18T04:39:46.092746Z","times_seen":100,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs20fruitswx.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.621Z","timestamp":1789705829621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs20fruitswx.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"54ba-19e87ec55b3\"\r\nlast-modified: Tue, 02 Jun 2026 10:41:13 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007884\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9I1y2SOwqtKhWFuZ8rjzXq%2BKvPitjqaTG7e2pSa0Wac417xK2OjUwBC8A6xZc6Z9f27YqwsWJ8eoPgnj4lHmjiij0EEQNxFZQ5tKVGIvvmeZXU89AJPu7PLOKATqtV1U0Aw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b2d9c5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21690\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21690,"size_decoded":23136,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"607b78c15a6cb099ed5685a069eec4ff","sha1":"f2222fcbbeaa10682090cb1fc0606363dbe31d8b","sha256":"c29893458d23db118fa0bf71b74e5a3ccaa48c3374776c8767be4c521b998ae4","sha512":"794fa2d28461ec95badd7a15e54e24d06c6b29529840fac24217765229f4b46bdfc24ee0b1d5b7fc9502e851ddb0a62e8905da94f922158c58335160f0b71c27","ssdeep":"384:pN9jHe138IK4vu0zR/U/nWxkr9UyTqh2taocYjlOxvDyvaI1Wuaz1hoLiNsTymxR:pDHscv0zR8Pk0K2ta7Dylk0+0x4C/","tlshash":"eda2e03f367c89877cc47f265275d9820004b082dc275a61366776e63fac5eb23ace82","first_seen":"2026-07-10T22:57:09.653891Z","last_seen":"2026-09-18T04:39:46.059505Z","times_seen":66,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/limbo-originals-mini-originals.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.630Z","timestamp":1789705829630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/limbo-originals-mini-originals.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"da8e-19fb30bc2b0\"\r\nlast-modified: Thu, 30 Jul 2026 12:42:00 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007883\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gLiewOJMdSyqR6ClS0QDpbV7MBDwnhA9DS2KaEZHiLTw0dpFZw3GjagIS4NF8gtpOMlwSt1PquH%2BsPDZdWyx%2BtL98lYPr5ui0SFFiBpOdEiBnMqWsOtmDE1WDjoodl1rVdk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b3da35697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55950\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55950,"size_decoded":57398,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"755a57f21433f5bf1a1b7145f1a2a5eb","sha1":"8c87413306efbc9419f957dd1c817ee7ddc33d9f","sha256":"96984de1dda99e6efd61393948fe3fedcee4f942294b52c9b5b3dc08d211c5fb","sha512":"e6760f51471651cf252c3f9c565c87cf8e85508b57a40ed2e78b600f3aa26840f5c4fc9a6358aa21cc6d8bbaf8cdb70894e1d8d40dca07ecefe97f6cea58905e","ssdeep":"1536:bXK1HSSrMgWqvmjrICtMBHAd79Abas8QY:OhSq5XME2cHAOasQ","tlshash":"284302f307e531cafd249336aee1134973b2ad48d7644785c1ac43e18a802eb677a9f0","first_seen":"2026-08-03T05:12:55.507803Z","last_seen":"2026-09-18T04:39:46.103012Z","times_seen":41,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/vs10bbkir.webp","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.637Z","timestamp":1789705829637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/vs10bbkir.webp HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/webp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"62e2-19e87ebc18b\"\r\nlast-modified: Tue, 02 Jun 2026 10:40:35 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007882\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p8m%2BObWZuhY15GVZQkBbJWTA5ZAGFWUzyLNRmv6NBK8%2FtOgOKKSV6VS2PpZc0e6L8FcUsq4YVJ438x0iedn5dzqBja58YIUxEbIk5MWNRYdri0ao%2F3QBGwd399Ci3igl0oA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9b3dab5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25314\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25314,"size_decoded":26764,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 360x472, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"76cc863151d8ee249a995e2e56a47131","sha1":"a1968240e5eee90208167d932fe666d0d170f4fc","sha256":"49bb42ff09fc936aebb3178d1455a9797fd99dd7ae6452cf84db83b0a0eb3f41","sha512":"18611745ed86961ffb7ff90b747879c9b7299069d7ffadf3452e7b94f9d423d4bb592f91e6b99669ed26c23ace222d417e88570ddb46b2c48b29f68f928f55b0","ssdeep":"384:0zARXsPBLHukvWj4You+JzC1KDa3tV+Ts9E0gA+wDoPl3j6Uky8FCOeD4tSXLzpF:0UtspHjvU9+JyVAs9ELwD+VRLzpACqG","tlshash":"58b2e0ebd5703432b2c6a1ae925575cef644849a345268858f6b42c8085e8fd2cac7ea","first_seen":"2026-07-10T22:56:48.100947Z","last_seen":"2026-09-18T04:31:23.587838Z","times_seen":34,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"diwinplay.top/fonts/proxima-nova-700.woff2","fqdn":"diwinplay.top","domain":"diwinplay.top","tld":"top"},"ip":{"addr":"172.67.192.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:28.183Z","timestamp":1789705828183,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"diwinplay.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 08:26:08 GMT","end":"Wed, 04 Nov 2026 09:24:35 GMT"},"fingerprint":{"sha1":"4C:87:9D:D5:0E:26:2C:42:A5:10:32:FB:A8:D1:B9:38:11:50:B5:67","sha256":"03:0E:8B:95:99:E1:57:4E:E8:ED:1A:70:98:5D:51:B2:87:74:4F:67:81:4B:9D:FC:6A:7B:99:AA:0D:1B:E2:B4"}}},"request":{"raw":"GET /fonts/proxima-nova-700.woff2 HTTP/1.1\r\nHost: diwinplay.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __ddg8_=Dy659alI1FqP3scG; __ddg10_=1789705827; __ddg9_=162.158.222.83; __ddg1_=xvOYisBHONxp2ec2QiAs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\nset-cookie: __ddg8_=IVKfjUqU3rQavZtb; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\n__ddg9_=162.158.223.12; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\naccept-ranges: bytes\r\ncontent-type: font/woff2\r\ndate: Fri, 18 Sep 2026 04:30:28 GMT\r\netag: W/\"6aaa9bff-c4d8\"\r\nlast-modified: Wed, 16 Sep 2026 13:39:11 GMT\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nage: 131\r\nddg-cache-status: HIT,MISS\r\nserver-timing: cfExtPri\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f5UVhkjAm7ONlLOK0VKV10V46XHI8VUA3GHdp9orFTPO5vM7HnZSlfRAuOXmL4zWuUzkWQEzS8YnaKgMn5P8zTKs3dopHgfjHULX9QtR249L2G1wmIpk9lAeJn33w%2Bft\"}]}\r\ncf-ray: a3cd9d922db07127-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50495\r\n\r\n","headers":null,"cookies":[{"name":"__ddg8_","value":"IVKfjUqU3rQavZtb","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg8_=IVKfjUqU3rQavZtb; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg10_","value":"1789705828","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg10_=1789705828; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"},{"name":"__ddg9_","value":"162.158.223.12","quoted":false,"path":"/","domain":".diwinplay.top","expires":"2026-09-18T04:50:28Z","raw_expires":"Fri, 18-Sep-2026 04:50:28 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"__ddg9_=162.158.223.12; Domain=.diwinplay.top; Path=/; Expires=Fri, 18-Sep-2026 04:50:28 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50392,"size_decoded":51581,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 50392, version 2.197","md5":"54652f2743682973efaa1232ad5191b8","sha1":"ef7fb431a59f7c6bd4b434cc317ac927afb281e0","sha256":"f9c871b76de94c298c951f897381b6ca535bba70efc108a60953eb3aa4d729df","sha512":"cc4abfaac3419c9d218deadfb74c83d3abd1d81e6a0b30c6bf05df4526a905cb18fd7cd5a00292d63a46489664b10d933f6f949dbcfc9e8055d3eac0e58e5721","ssdeep":"768:NEw+/PImIfmmHM8N6tTltBbQBha73TpQp4anJviPMcpx8bTmnvC1oaHRdFRW:NCHImIemHWlnbQzg32BJEXLyAvhajW","tlshash":"b733f155327b51182cefe5f3b34ae058ee565fb5736a2e038c4b0ec020a662602f55fe","first_seen":"2026-07-22T11:06:27.388003Z","last_seen":"2026-09-18T04:39:46.072583Z","times_seen":42,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mycasinoapi.biz/static/thumbnails/cricket-road-mini-inout.jpg","fqdn":"mycasinoapi.biz","domain":"mycasinoapi.biz","tld":"biz"},"ip":{"addr":"172.67.170.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://diwinplay.top/","date":"2026-09-18T04:30:29.593Z","timestamp":1789705829593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mycasinoapi.biz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 30 Aug 2026 20:51:55 GMT","end":"Sat, 28 Nov 2026 20:51:54 GMT"},"fingerprint":{"sha1":"AE:82:B6:B4:C4:8B:D7:1A:39:F6:05:2C:D1:86:27:E5:64:85:D7:C1","sha256":"4E:C4:06:DD:5C:E7:E7:35:9B:7C:58:A8:1F:C6:5A:4C:33:B8:C5:0F:2F:75:29:0F:83:35:06:4D:49:9E:59:9C"}}},"request":{"raw":"GET /static/thumbnails/cricket-road-mini-inout.jpg HTTP/1.1\r\nHost: mycasinoapi.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://diwinplay.top/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nConnection: keep-alive\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncontent-type: image/jpeg\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 18 Sep 2026 04:30:29 GMT\r\netag: W/\"28376-19e188a0797\"\r\nlast-modified: Mon, 11 May 2026 19:35:59 GMT\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nserver-timing: cfExtPri\r\nage: 4007883\r\ncf-cache-status: HIT\r\ntiming-allow-origin: *\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9eWOjTxz6NZXQy%2FpYc50m5uHS%2BuY4XZ0B7XB0uGUSKeuyny4IVeSDBx%2BrRjl2ffY6hjy6wLTB5ts40OwQRwmaZrUcGtIZMK49bJ7YiYVplfPWKkbdHRKsPluRE3PHKYrONw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3cd9d9afd915697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 164726\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":164726,"size_decoded":166178,"mime_type":"image/png","magic":"PNG image data, 300 x 400, 8-bit/color RGBA, non-interlaced","md5":"1e1ba05a859bbbc01900d9ba08880e35","sha1":"7e9c385589952ab26f8f04deb098622c4310acb2","sha256":"aa6523b76b4bd7c120c494515236995d2583f085d9b9e73d96482b8d55064822","sha512":"394bf0f7f744e63a365f3c5e046e448924c15774bc15f4b435f27a3c4d3326a4a8cb6be51926504ef11006f0238802623e1c40b39a0c91b612cfc657bbec9914","ssdeep":"3072:yHEh/mHTKsEg0Y12Wuo0DNXO3m6IMgNiMSBTJWvRiH8wJzudjsuyoB0VFvqBZ0AJ:ykaTKsppSDN1mgc7Mp/kudjf2yfd","tlshash":"5af3129f461a6f92e6026c204b86cb7d63e4c4314c597d6738a8687c341afd2897b7f8","first_seen":"2026-05-03T09:25:58.532508Z","last_seen":"2026-09-18T04:39:46.067914Z","times_seen":105,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
