{"report_id":"3cb30d7a-dbc1-4bea-81cf-747e31790486","version":6,"status":"done","tags":[],"date":"2025-12-20T19:35:20Z","url":{"schema":"http","addr":"www.luckydreams4.com/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":0,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"title":"Online Casino Real Money. Play Best Online Casino Free | Lucky Dreams","dom":{"size":499,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (460)","md5":"006ff1ee31204b14716869e8b3ddc884","sha1":"daa47341002e5bedec364868ec1e2faab6f745af","sha256":"7690b80cdf007ce5c4ed513714d0f11b1997228e83133a8e5af957b91e99f297","sha512":"81e91e804cd55b9008fead819527fc52f3dac60f60d778d6ebe61341fd288fb896e66903d93351074716385df16dc03e22694a49dbbc6a975d0e286c3c9dd159","ssdeep":"","tlshash":"5df0e9ab2c61990986814bc8c1e1e42c541d7b5b14a1ccc1b5b9a19cbb86d9bcc18ad9","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.luckydreams4.com/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":0,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-24T19:35:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-20T19:34:50Z","timestamp":1766259290,"ip_dst":{"addr":"172.67.199.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.8","port":53802,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2025-12-20T19:34:50.656280+0000\",\"flow_id\":2096807234168731,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.8\",\"src_port\":53802,\"dest_ip\":\"172.67.199.118\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"geo.webtrends-optimize.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":936,\"bytes_toclient\":3576,\"start\":\"2025-12-20T19:34:50.649115+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"nexus-websocket-a.intercom.io","ip":{"addr":"18.97.36.62","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":9252,"first_seen":"2015-06-26T10:17:57Z","last_seen":"2025-12-15T06:02:13.221684Z","alert_count":0,"request_count":1,"received_data":283,"sent_data":747,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.onesignal.com","ip":{"addr":"104.16.160.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-09-10","domain_rank":31060,"first_seen":"2015-04-22T13:41:50Z","last_seen":"2025-12-15T04:50:33.239102Z","alert_count":0,"request_count":1,"received_data":10028,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"ots.webtrends-optimize.com","ip":{"addr":"20.54.140.8","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"domain_registered":"2018-06-26","domain_rank":237316,"first_seen":"2019-02-01T08:49:05Z","last_seen":"2025-12-16T23:52:54.763748Z","alert_count":0,"request_count":1,"received_data":1062,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"Apache Tomcat","description":"Apache Tomcat is an open-source implementation of the Java Servlet, JavaServer Pages, Java Expression Language and WebSocket technologies.","website":"https://tomcat.apache.org","common_platform_enumeration":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","icon":"Apache Tomcat.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"netcontent.cc","ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-10-25","domain_rank":235234,"first_seen":"2025-02-25T10:12:59Z","last_seen":"2025-12-17T01:25:26.154054Z","alert_count":82,"request_count":41,"received_data":750237,"sent_data":19599,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-14T22:17:32.87103Z","alert_count":0,"request_count":3,"received_data":1354015,"sent_data":1403,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"geo.webtrends-optimize.workers.dev","ip":{"addr":"172.67.199.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-08","domain_rank":1522796,"first_seen":"2023-09-06T20:24:32Z","last_seen":"2025-12-20T19:35:29.570813Z","alert_count":0,"request_count":1,"received_data":1543,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"js.intercomcdn.com","ip":{"addr":"54.240.174.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-25","domain_rank":23692,"first_seen":"2020-02-19T12:43:00Z","last_seen":"2025-12-15T02:07:16.967144Z","alert_count":0,"request_count":2,"received_data":1630068,"sent_data":929,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.luckydreams4.com","ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-09-24","domain_rank":0,"first_seen":"2022-09-26T20:48:27Z","last_seen":"2025-12-20T19:35:29.512946Z","alert_count":0,"request_count":77,"received_data":16129412,"sent_data":68802,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"browser-intake-datadoghq.eu","ip":{"addr":"34.149.115.139","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":12275,"first_seen":"2023-01-14T08:00:42Z","last_seen":"2025-12-17T08:43:41.787467Z","alert_count":0,"request_count":8,"received_data":3360,"sent_data":6680,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api-iam.intercom.io","ip":{"addr":"52.55.140.37","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":17818,"first_seen":"2018-08-02T22:07:54Z","last_seen":"2025-12-15T11:43:01.34364Z","alert_count":0,"request_count":2,"received_data":8537,"sent_data":1085,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"c.webtrends-optimize.com","ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2018-06-26","domain_rank":261834,"first_seen":"2018-10-17T11:14:35Z","last_seen":"2025-12-20T01:48:27.620156Z","alert_count":0,"request_count":5,"received_data":193725,"sent_data":2265,"comment":"","tags":null,"fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}]},{"fqdn":"widget.intercom.io","ip":{"addr":"52.84.50.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2011-08-15","domain_rank":19213,"first_seen":"2020-07-20T12:16:46Z","last_seen":"2025-12-15T00:54:28.916869Z","alert_count":0,"request_count":2,"received_data":16669,"sent_data":854,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9fc1f83e6e481384ddcb7cea8915cce","sha1":"dc39e3bab10f977f3e6474145183262454ee7873","sha256":"e941982ae72a6d2b5979311ea2e4c1fcc6d8862fd8194c1d05335ad62ed69ef6","sha512":"9ffb5c7de0f175adc2f48438b1fe14e800d7df7bac4cfa79a76f06f0569df54b1ffbe9612568a65ae2fa5de308039bda9b849626367bb8bbb1013881e31799a3","ssdeep":"","tlshash":"eaa0024df095b2245585542c687a105553b66581371801119725c0553a5d4054332ace","size":59,"data":"","first_seen":"2025-06-22T09:39:41.694152Z","last_seen":"2026-02-13T09:50:47.325552Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3cd2173d4dd685d13b6dfe7f361bcaf8","sha1":"0e4c67a2fdccc95bd358626d6cb03d537417ce3a","sha256":"388eecbdeb2329273e1639c44253afa029f2097d23f3c356722184fe37f455cf","sha512":"d0cb9f0cf3765e3fcae42eab6588b8b2b3a8c092b2583d4a54f72d3905a21afd5e206a4b081e0e98540abdc3ca0bfb9c5861b4a40c726ef8ed51769f46980e44","ssdeep":"","tlshash":"6fb0120eb0203016235320210017608e10328dc04223719042720b22e83c3905243b9f","size":89,"data":"","first_seen":"2024-05-22T15:39:22Z","last_seen":"2026-04-03T22:36:27.068057Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"16f64e19c548f935f8465b8a7e2d2470","sha1":"dd686bd8e6aa3511b4dbe0ac0ddce5b17074228a","sha256":"0eb441f77981fdc7ecff64f60fbfe87cd8ca704e373d0c87de24beb4c77ab51a","sha512":"d1c6e8be5e9f7c5638a19cb4812f5283226994d01685e48cbb1d13746fe02afc5df5a42845c978130bd326b5645770a33c7b4dd73ce7516feec1cbd05d58b748","ssdeep":"","tlshash":"f98000cc33838c0080fc8b000f0f33003a203000c0a00cb00c00b00c3302c83b0c22ca","size":37,"data":"","first_seen":"2023-03-07T01:32:33Z","last_seen":"2026-04-05T01:21:35.690228Z","times_seen":1336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/dexie.84dcb01d.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"395a5bc4585ec2f718aabf6ccfa266fc","sha1":"a3d8a4ad9391a78a4e55911ba007d4977861b78f","sha256":"5c514c146eb058c1d4a00eaeabbdddb9ee03cce950e81c0474cbdfecccb5c4e2","sha512":"c6507945c2cf6e173e58a1ff1d739f1667325f0411b914ef11ab68bc0ffef2aa5b336156cfd1b66179f36ff0d1b8528ba7e706b574902c27d945b93eac1cfe7a","ssdeep":"1536:eFrifVhEYEiPq1eGBzFH4wxR5Q47LvdbM6k:eVIGrH95Q47rG","tlshash":"7e73d5c97396f06243aa20b180bf5013f33a5959380d4428f25ceddb7c6a54da1bef7a","size":75719,"data":"","first_seen":"2025-07-15T00:32:23.179444Z","last_seen":"2026-04-04T13:28:46.513988Z","times_seen":528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"5af06a05fc74299fe6aa53d96db2e55c","sha1":"bb244ff81a9507dee2c8febf8c1d632e42f0841e","sha256":"cd42eb02ba1af3b2b637079ed884f8a9c2391f778d2fcb311defcc4a2f4bba3f","sha512":"f35facccf958907775e3bda99dd1361b75cbbf93e9e6988065b2c4bb358812a2c257438ae728caa4bc15f2cfd71f9cc480b60f21323da24ecfaaba9cc6465c57","ssdeep":"","tlshash":"e6b0124db0103146332720211027e012003248409673208043a192517c303706193b9b","size":90,"data":"","first_seen":"2024-05-17T15:43:10Z","last_seen":"2026-04-03T22:36:27.067533Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"e8961527ee3fe5343e2557b2d07fa466","sha1":"77949bb9e9f198b29a96a7443536a04cabe969cd","sha256":"78c8bdc18839c26595506bc6df8831aa6cfc44eff13f25786502329ad5088af3","sha512":"2c03efb8ef68dee19fbaa800e3fd0c722838474899cc4d01c6e95de2f03462b04bd3c8ed3f5304fabc4920e345dbb5e153d1780c5b417c0a7bf4507e552ea0dc","ssdeep":"","tlshash":"6170008cb0c330208002282c003b000a232a0ac00a0a0002c20000822c220088032a8c","size":25,"data":"","first_seen":"2023-03-07T01:27:45Z","last_seen":"2026-04-05T01:15:37.120277Z","times_seen":13316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"413b7dc1caac04ab95e8a1b230b9b3ad","sha1":"2657fe2eb543ebc0b54eaa7d3aba3a75fb638630","sha256":"b62262aeb7ee1694f40152af828f0d72a6ac6572f9db8ffa1ab16784c7532878","sha512":"835049ca74deef336dde07bdb5e26143f145f4fa0fd3472ce4e052da605723434d315e939818671ec2fcc997ff538e9beb8b5e024a9c72ec7bd56aea4deca971","ssdeep":"","tlshash":"7f70008cb0c330000002202c003b000a222b0ac00a0c0000a20000822c200288a22aa8","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-04T23:35:10.658176Z","times_seen":18150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9fc1f83e6e481384ddcb7cea8915cce","sha1":"dc39e3bab10f977f3e6474145183262454ee7873","sha256":"e941982ae72a6d2b5979311ea2e4c1fcc6d8862fd8194c1d05335ad62ed69ef6","sha512":"9ffb5c7de0f175adc2f48438b1fe14e800d7df7bac4cfa79a76f06f0569df54b1ffbe9612568a65ae2fa5de308039bda9b849626367bb8bbb1013881e31799a3","ssdeep":"","tlshash":"eaa0024df095b2245585542c687a105553b66581371801119725c0553a5d4054332ace","size":59,"data":"","first_seen":"2025-06-22T09:39:41.694152Z","last_seen":"2026-02-13T09:50:47.325552Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4dc6bb20f9564d238111d7f907d28cf8","sha1":"637013b11798da259a1f5fcca31ca981882321ed","sha256":"7f2e840a7eb7ba5cf93a2d67e901ab501a381ec8d81a70ea352084e69e548f73","sha512":"7d71555549536c4f86ce253ff19fd0c6bb68e55b9c0c5f8331c7980ec9418a6073da439ba06d7bbbea4862999b2ae1df2645b2984901149245410cad56646827","ssdeep":"","tlshash":"6db012fb31553c253d183d98203b23796e3324a29a380080c234896438a0d0780831e6","size":98,"data":"","first_seen":"2025-02-22T05:44:22.484322Z","last_seen":"2026-02-12T03:18:50.735372Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"e8961527ee3fe5343e2557b2d07fa466","sha1":"77949bb9e9f198b29a96a7443536a04cabe969cd","sha256":"78c8bdc18839c26595506bc6df8831aa6cfc44eff13f25786502329ad5088af3","sha512":"2c03efb8ef68dee19fbaa800e3fd0c722838474899cc4d01c6e95de2f03462b04bd3c8ed3f5304fabc4920e345dbb5e153d1780c5b417c0a7bf4507e552ea0dc","ssdeep":"","tlshash":"6170008cb0c330208002282c003b000a232a0ac00a0a0002c20000822c220088032a8c","size":25,"data":"","first_seen":"2023-03-07T01:27:45Z","last_seen":"2026-04-05T01:15:37.120277Z","times_seen":13316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.webtrends-optimize.com/acs/common/js/6.0/wt_lib.js","fqdn":"c.webtrends-optimize.com","domain":"webtrends-optimize.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b595636d1593dceb2dcdb4fdcfbbbd8","sha1":"c8acca2b165087c8157b95acc763821aafc89049","sha256":"a53138d7c78530872c26a419a87b5f58ec88d57c654bded13ad0e0a59d94d1ae","sha512":"408c9c88c7c5101b0dd72dd8066c90f978d796cb766ce072b6f60af9933a0b385e33bab1e075610977c3295c37b3a448cb4db62f00ecb74bf74d0a9722a2aabe","ssdeep":"768:9g5FAnXOmQVqJCo6b18LOCjlILLRDAtl7UiCSP1xjvSyS+j/W:2OXLD6xvwzSypje","tlshash":"d1632a1832a1e65943d203c1672f62917b3291cb3a4c85f9f145dee4297ce9b212bff6","size":69265,"data":"","first_seen":"2025-06-20T10:45:36.360499Z","last_seen":"2026-04-02T10:58:17.16384Z","times_seen":285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.cbc30eba.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"580924de4e85b85c02b1bba403394800","sha1":"7dec1317359bfd0b07ae473105294f875a9785e5","sha256":"69b1346053ddf3f2129c1ad98d7129944773c0519853956564fed3a0db9d8c02","sha512":"9fdabe9a61d6f2bd849b47436e578e4a1694c37a01d74861a6186b2741fd0afe1f5591caf16667747ec745427ac5316df21fcc5e5a085b41b53739a746d0dcf7","ssdeep":"6144:FRpLUrOAnDn20vmya+pqBuVG69q0Wv2aRCmHJzCXqJhOo7iuX:TpLcOoFa+cNJbCmHJzCa9","tlshash":"01b417dd7591b4a207f312f2407f180bb379296a284c4460f664e8dd78f994da23bf6e","size":519402,"data":"","first_seen":"2025-12-18T13:52:01.910626Z","last_seen":"2026-01-13T02:20:23.212051Z","times_seen":1394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.webtrends-optimize.com/acs/accounts/8dfa23d8-4727-465f-ad65-d6a5cdf8784f/js/wt.js","fqdn":"c.webtrends-optimize.com","domain":"webtrends-optimize.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"759d42b31f700b6c7a0b414bf745034f","sha1":"37069df8aecd82d0029bb2e633953e6d188dcc14","sha256":"a84d21408b69e9a525caede88e93aa6285d9fb861896a85cd5cd1031cdd1073b","sha512":"9593e25867942259ef6c61e7bde89aa33ee89447057be4820b8745df57c81a249190ea3c245cb7f256185a151cd1569d4d3e1fb205aa309ba9b4deed95adc59f","ssdeep":"1536:Wb1m+3Df7kEOq1Alx5rUCnW/oaNTG/zJF/dSU/y3oWokRwBMbHfn:WpQEO7xUYGNTG/zVyoDon","tlshash":"fc73f99af5f1513a92d576e0a12f13aa7f728687254cc044f06dffe815bcd060227eba","size":76836,"data":"","first_seen":"2025-07-13T11:27:36.276897Z","last_seen":"2026-02-12T03:18:50.557175Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"260b4d1e8d7c71eed71d740b73b43b79","sha1":"70951c56b5690767c2bddb80a83459be44511fd7","sha256":"dba9548a74568742c5f058172eb98a0b94a46265c49aec0d1d37c0b53aec661a","sha512":"bb8df2809b3fb86398fd9dcdb275156fe3018b1acd5221f37f5f50b85164c6940e23f3ee53be3075bac3fe511684a3456216948e93ab112949f852a4f8223ca2","ssdeep":"","tlshash":"afa002b46542740a41152b171267655d762544e437467059512024513450507b5a5984","size":68,"data":"","first_seen":"2023-03-07T15:08:32Z","last_seen":"2026-04-05T01:36:33.017094Z","times_seen":2261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"413b7dc1caac04ab95e8a1b230b9b3ad","sha1":"2657fe2eb543ebc0b54eaa7d3aba3a75fb638630","sha256":"b62262aeb7ee1694f40152af828f0d72a6ac6572f9db8ffa1ab16784c7532878","sha512":"835049ca74deef336dde07bdb5e26143f145f4fa0fd3472ce4e052da605723434d315e939818671ec2fcc997ff538e9beb8b5e024a9c72ec7bd56aea4deca971","ssdeep":"","tlshash":"7f70008cb0c330000002202c003b000a222b0ac00a0c0000a20000822c200288a22aa8","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-04T23:35:10.658176Z","times_seen":18150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9fc1f83e6e481384ddcb7cea8915cce","sha1":"dc39e3bab10f977f3e6474145183262454ee7873","sha256":"e941982ae72a6d2b5979311ea2e4c1fcc6d8862fd8194c1d05335ad62ed69ef6","sha512":"9ffb5c7de0f175adc2f48438b1fe14e800d7df7bac4cfa79a76f06f0569df54b1ffbe9612568a65ae2fa5de308039bda9b849626367bb8bbb1013881e31799a3","ssdeep":"","tlshash":"eaa0024df095b2245585542c687a105553b66581371801119725c0553a5d4054332ace","size":59,"data":"","first_seen":"2025-06-22T09:39:41.694152Z","last_seen":"2026-02-13T09:50:47.325552Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"e8961527ee3fe5343e2557b2d07fa466","sha1":"77949bb9e9f198b29a96a7443536a04cabe969cd","sha256":"78c8bdc18839c26595506bc6df8831aa6cfc44eff13f25786502329ad5088af3","sha512":"2c03efb8ef68dee19fbaa800e3fd0c722838474899cc4d01c6e95de2f03462b04bd3c8ed3f5304fabc4920e345dbb5e153d1780c5b417c0a7bf4507e552ea0dc","ssdeep":"","tlshash":"6170008cb0c330208002282c003b000a232a0ac00a0a0002c20000822c220088032a8c","size":25,"data":"","first_seen":"2023-03-07T01:27:45Z","last_seen":"2026-04-05T01:15:37.120277Z","times_seen":13316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"5af06a05fc74299fe6aa53d96db2e55c","sha1":"bb244ff81a9507dee2c8febf8c1d632e42f0841e","sha256":"cd42eb02ba1af3b2b637079ed884f8a9c2391f778d2fcb311defcc4a2f4bba3f","sha512":"f35facccf958907775e3bda99dd1361b75cbbf93e9e6988065b2c4bb358812a2c257438ae728caa4bc15f2cfd71f9cc480b60f21323da24ecfaaba9cc6465c57","ssdeep":"","tlshash":"e6b0124db0103146332720211027e012003248409673208043a192517c303706193b9b","size":90,"data":"","first_seen":"2024-05-17T15:43:10Z","last_seen":"2026-04-03T22:36:27.067533Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9fc1f83e6e481384ddcb7cea8915cce","sha1":"dc39e3bab10f977f3e6474145183262454ee7873","sha256":"e941982ae72a6d2b5979311ea2e4c1fcc6d8862fd8194c1d05335ad62ed69ef6","sha512":"9ffb5c7de0f175adc2f48438b1fe14e800d7df7bac4cfa79a76f06f0569df54b1ffbe9612568a65ae2fa5de308039bda9b849626367bb8bbb1013881e31799a3","ssdeep":"","tlshash":"eaa0024df095b2245585542c687a105553b66581371801119725c0553a5d4054332ace","size":59,"data":"","first_seen":"2025-06-22T09:39:41.694152Z","last_seen":"2026-02-13T09:50:47.325552Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/payments-lib/v1/index.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bd920194369bfe77af1226f66ee76fc","sha1":"e0947bab79db686430196920806575d292a58c2e","sha256":"7462f379efe2492c17e12a15f08a600709193cc6c9e9fb77a117611c884ddf7e","sha512":"a6e7d66d0f1078bc25e96c93ccab34070cd7bb1f080b3915de1c1340c14571ad2f432ab21526fbbdd7ddbac3113e598c89d17f7210f56cdc7671c75b36ebc3ac","ssdeep":"","tlshash":"d041b95efd46f47221abe1b910bb861f179235122484cc06c471c8947dfad7f942f92c","size":1896,"data":"","first_seen":"2025-08-20T04:46:58.58583Z","last_seen":"2026-03-26T06:43:48.833589Z","times_seen":757,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/datadog_browser-rum-slim.7cfae171.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"3fd716702b8441c1380c7cadc8732dc7","sha1":"5441bb8f500ac14651a581ce323a37ba589e32ca","sha256":"074e011659abb8af56188e474a80a558c3782d8350de45d16020db43099199d2","sha512":"75b96a1e9e43089135798fc211761b89733f6c15d92e9c44a9d4ae6bdcec0527e9044425490e482acc7fc440ac2408e9cff0cfe874d9801b0377a69e3112e6e8","ssdeep":"","tlshash":"e8f026e0b85df5befe7e64c005ba4289c77890d0be1d40da6dc28de62a794197051adc","size":578,"data":"","first_seen":"2025-08-08T17:06:48.088486Z","last_seen":"2026-04-04T13:28:46.57536Z","times_seen":514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4dc6bb20f9564d238111d7f907d28cf8","sha1":"637013b11798da259a1f5fcca31ca981882321ed","sha256":"7f2e840a7eb7ba5cf93a2d67e901ab501a381ec8d81a70ea352084e69e548f73","sha512":"7d71555549536c4f86ce253ff19fd0c6bb68e55b9c0c5f8331c7980ec9418a6073da439ba06d7bbbea4862999b2ae1df2645b2984901149245410cad56646827","ssdeep":"","tlshash":"6db012fb31553c253d183d98203b23796e3324a29a380080c234896438a0d0780831e6","size":98,"data":"","first_seen":"2025-02-22T05:44:22.484322Z","last_seen":"2026-02-12T03:18:50.735372Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3cd2173d4dd685d13b6dfe7f361bcaf8","sha1":"0e4c67a2fdccc95bd358626d6cb03d537417ce3a","sha256":"388eecbdeb2329273e1639c44253afa029f2097d23f3c356722184fe37f455cf","sha512":"d0cb9f0cf3765e3fcae42eab6588b8b2b3a8c092b2583d4a54f72d3905a21afd5e206a4b081e0e98540abdc3ca0bfb9c5861b4a40c726ef8ed51769f46980e44","ssdeep":"","tlshash":"6fb0120eb0203016235320210017608e10328dc04223719042720b22e83c3905243b9f","size":89,"data":"","first_seen":"2024-05-22T15:39:22Z","last_seen":"2026-04-03T22:36:27.068057Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/x0neyd87","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"52.84.50.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bcae2cf00f4cd9671ac437fa44770b9","sha1":"f63fb33828a4b12ce617551778dc368214b97313","sha256":"43e90a9ecff1f35c7214e10397febade8c1c63620feaf9ad0746070c833d5f21","sha512":"21b1296de46d586bc87c854b07469a10fc7669e887906cc8b989d639cf9a0e5ad02562222d3e85f68114744f1e8cd47433fcc6cd208bdf5fdc5ed4fd71650178","ssdeep":"96:v2NH8/xVRyhsXtpZ8HEZgOM09SP0Ffpv7vWYzfDsJ0dMw938I5Zv1JVqUP:v2YVNCH8bMFOAYMSdZ935pqUP","tlshash":"49f163feb6c2793806a31566623f770c7f3b654428494890d065c8c87a7addbc12bfad","size":7591,"data":"","first_seen":"2025-12-20T15:01:59.644551Z","last_seen":"2026-01-13T02:20:23.182557Z","times_seen":917,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"8ea13d9f9aadab625b2038eaa234c6fe","sha1":"ffa3a94f2f73c2516da8d928c827f2bbe461f76f","sha256":"9adf845257918a083fcb717c9d5d0ce506d009e2866089a4b1cffeced988a130","sha512":"bd77dcc45706bbfc871b466118ccef65d0dd25fe079db44179a0752ff64f36f9abe70244f94fe298c660eb551105310dc74178e2ec0f24225611bab4d9bf59b6","ssdeep":"","tlshash":"97b02bc4f2237355a7491080008a420c723369320c068f29915f5c45550e4000119509","size":129,"data":"","first_seen":"2024-05-17T15:43:10Z","last_seen":"2026-04-03T22:36:27.072683Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"43f2cc6d311b15a356ae95f81480025e","sha1":"8bf0c704d6e46f7dfa72ff3eeecefb65b14bf6b9","sha256":"1fb1c015f3f10302a816b9e09b2e72dad14bd2365726216613b93a27d19b6128","sha512":"17baf7cae30325dee078b8e052d6d3f16413d597c956a0f55469969ae96a4df7fa181944db6b39e6b81a917ec8e9dd21db9db3a7249c484440406d0c7a28a0da","ssdeep":"","tlshash":"15b0126e71c86cd202123005103641282817895206849204727c56e018151470020da9","size":90,"data":"","first_seen":"2025-12-20T19:35:38.789122Z","last_seen":"2026-02-12T03:18:50.746808Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4fc3047af98c627dbe0e172ffc137010","sha1":"7bdfb08c510896f7fac79d8a8c17187f70ba9e20","sha256":"83b34ed574c9630f2d800fa605bcc5d84e287907f47456c7bd1be0deabd38901","sha512":"ed2209f84253efde79d7acfa2fad87c0483189ef272cc908ba432a7fd66ec9760291b699fbca4bf8778dce64f4b6de93847c86d1fdb5da15c4a3a6b66f2e3cbc","ssdeep":"","tlshash":"65e08c5860fe960c6a272a28c22a13c97111e8e13c45611ced61c2ca50ec4c782aee1b","size":311,"data":"","first_seen":"2023-03-07T01:03:19Z","last_seen":"2026-04-05T01:36:33.017569Z","times_seen":8121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=G-Q18MHQV7P9\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5689936028bea263b4b2c91de02837f3","sha1":"77acc48f5d19432475b1a06ccded21277eb7b384","sha256":"8daefc643a85b9249af3a1bf4cd60834ce00b49af524e7f385d3565b96de349b","sha512":"f053784d3bfdb71295b87600a66d8da70c2164e04019d8024d75d223a99ce86a602d2a170b612dcc1f3f7d9846b629aa30fef4494d625d769bedaa923abb0b53","ssdeep":"6144:sCIe7ma2bulKY/1u99xHDmHYmyBFzvnsi1nWoNPad4FpCpQi:0C8bu7/1mbrns6WbMpQ","tlshash":"4e94188e73ca74269396e478503f018ba97b29e2b45cc896f1c9cce02d7459a0277f7d","size":420167,"data":"","first_seen":"2025-12-20T19:35:38.595407Z","last_seen":"2025-12-20T19:35:41.904236Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"260b4d1e8d7c71eed71d740b73b43b79","sha1":"70951c56b5690767c2bddb80a83459be44511fd7","sha256":"dba9548a74568742c5f058172eb98a0b94a46265c49aec0d1d37c0b53aec661a","sha512":"bb8df2809b3fb86398fd9dcdb275156fe3018b1acd5221f37f5f50b85164c6940e23f3ee53be3075bac3fe511684a3456216948e93ab112949f852a4f8223ca2","ssdeep":"","tlshash":"afa002b46542740a41152b171267655d762544e437467059512024513450507b5a5984","size":68,"data":"","first_seen":"2023-03-07T15:08:32Z","last_seen":"2026-04-05T01:36:33.017094Z","times_seen":2261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9fc1f83e6e481384ddcb7cea8915cce","sha1":"dc39e3bab10f977f3e6474145183262454ee7873","sha256":"e941982ae72a6d2b5979311ea2e4c1fcc6d8862fd8194c1d05335ad62ed69ef6","sha512":"9ffb5c7de0f175adc2f48438b1fe14e800d7df7bac4cfa79a76f06f0569df54b1ffbe9612568a65ae2fa5de308039bda9b849626367bb8bbb1013881e31799a3","ssdeep":"","tlshash":"eaa0024df095b2245585542c687a105553b66581371801119725c0553a5d4054332ace","size":59,"data":"","first_seen":"2025-06-22T09:39:41.694152Z","last_seen":"2026-02-13T09:50:47.325552Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9fc1f83e6e481384ddcb7cea8915cce","sha1":"dc39e3bab10f977f3e6474145183262454ee7873","sha256":"e941982ae72a6d2b5979311ea2e4c1fcc6d8862fd8194c1d05335ad62ed69ef6","sha512":"9ffb5c7de0f175adc2f48438b1fe14e800d7df7bac4cfa79a76f06f0569df54b1ffbe9612568a65ae2fa5de308039bda9b849626367bb8bbb1013881e31799a3","ssdeep":"","tlshash":"eaa0024df095b2245585542c687a105553b66581371801119725c0553a5d4054332ace","size":59,"data":"","first_seen":"2025-06-22T09:39:41.694152Z","last_seen":"2026-02-13T09:50:47.325552Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4fc3047af98c627dbe0e172ffc137010","sha1":"7bdfb08c510896f7fac79d8a8c17187f70ba9e20","sha256":"83b34ed574c9630f2d800fa605bcc5d84e287907f47456c7bd1be0deabd38901","sha512":"ed2209f84253efde79d7acfa2fad87c0483189ef272cc908ba432a7fd66ec9760291b699fbca4bf8778dce64f4b6de93847c86d1fdb5da15c4a3a6b66f2e3cbc","ssdeep":"","tlshash":"65e08c5860fe960c6a272a28c22a13c97111e8e13c45611ced61c2ca50ec4c782aee1b","size":311,"data":"","first_seen":"2023-03-07T01:03:19Z","last_seen":"2026-04-05T01:36:33.017569Z","times_seen":8121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"5af06a05fc74299fe6aa53d96db2e55c","sha1":"bb244ff81a9507dee2c8febf8c1d632e42f0841e","sha256":"cd42eb02ba1af3b2b637079ed884f8a9c2391f778d2fcb311defcc4a2f4bba3f","sha512":"f35facccf958907775e3bda99dd1361b75cbbf93e9e6988065b2c4bb358812a2c257438ae728caa4bc15f2cfd71f9cc480b60f21323da24ecfaaba9cc6465c57","ssdeep":"","tlshash":"e6b0124db0103146332720211027e012003248409673208043a192517c303706193b9b","size":90,"data":"","first_seen":"2024-05-17T15:43:10Z","last_seen":"2026-04-03T22:36:27.067533Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.webtrends-optimize.com/acs/common/js/5.4/common.js","fqdn":"c.webtrends-optimize.com","domain":"webtrends-optimize.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"699a9598b8c3c6d37d78ac36d2eb874f","sha1":"f2a44f3dc7772d25e3fc402b7cef6476d5d6d782","sha256":"cfd886a01f6af8332fc28434bfeb5fb5c29e3417d31b0f8d52c1fd60bafafba8","sha512":"57a671627c86fc918423a5d8b872f89a6e40ea656896dad0c65cd1f7653680cac37ed76978a05f5a5fe53cdbed9119e8955d97119ef1e719a531a0f872aec209","ssdeep":"384:92AXNKV3UbvgzyofdzHkdD+LjpmDGmaHavGDym47Tg3Co7tJ0elZc:DZdgXDb47kr5y","tlshash":"db92faca73d1a85487e379a1943fb6137a7b948337ecd095e192e5c07bb28005227f1d","size":20846,"data":"","first_seen":"2023-03-07T12:21:19Z","last_seen":"2026-04-02T10:58:17.140243Z","times_seen":674,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbfeb209bd70fd9a297feb19e138834c","sha1":"d72ff9372197360251d4f253dd9c4f9a0760994c","sha256":"96c1e15621a2c17d7261a8460c1a78709d4d99575249f9cb3f13fc518b58d933","sha512":"e03fd8435b262a6086e427a2aa75f7909d0ee803f4f64bf7c70da2bb8891fb55eebd1f58ae98be5590b8630eb88d113d97d1de9dd38df5efead82a4f1eefa7a7","ssdeep":"","tlshash":"b4e0f1e77817087a749f01bd27b9a414358322096409c922fcfdd4281f60693cc0ec8c","size":434,"data":"","first_seen":"2023-05-07T21:16:42Z","last_seen":"2026-02-10T08:09:27.796391Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.48acc92d.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c788cf4dcc4e41662a2aba6a0143cc9b","sha1":"baaff4d37c3f788b6e5f3d0fa4e9cd847a8fcb89","sha256":"588d7c0f62121c38b291bfcb7ac239fe714b41f0197af0ca4be6f2cd0c30a0de","sha512":"c2f45fe7019238781381c0038b9489d0f9b17afaf8e435ee88dc37544e263668f2cc84332e277a24ba201d61f3176ab3785d1fa04f019aa7b4c36bb290428038","ssdeep":"12288:rY2hwT5wJLfV1R+D54hTguKsiBuZLEiGLomY1lg:WcbED54Isi81lg","tlshash":"a535b5ccb2d2f06a43976575813f200bf33ea999b54d8050e629e8d1bcb958d9237f6c","size":1108884,"data":"","first_seen":"2025-12-20T15:01:59.719566Z","last_seen":"2026-01-13T02:19:50.305332Z","times_seen":835,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.cbc30eba.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"580924de4e85b85c02b1bba403394800","sha1":"7dec1317359bfd0b07ae473105294f875a9785e5","sha256":"69b1346053ddf3f2129c1ad98d7129944773c0519853956564fed3a0db9d8c02","sha512":"9fdabe9a61d6f2bd849b47436e578e4a1694c37a01d74861a6186b2741fd0afe1f5591caf16667747ec745427ac5316df21fcc5e5a085b41b53739a746d0dcf7","ssdeep":"6144:FRpLUrOAnDn20vmya+pqBuVG69q0Wv2aRCmHJzCXqJhOo7iuX:TpLcOoFa+cNJbCmHJzCa9","tlshash":"01b417dd7591b4a207f312f2407f180bb379296a284c4460f664e8dd78f994da23bf6e","size":519402,"data":"","first_seen":"2025-12-18T13:52:01.910626Z","last_seen":"2026-01-13T02:20:23.212051Z","times_seen":1394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4c0d7f4effcd0560817df17c2bd3d43a","sha1":"d54d6def0afebda86f66a03ea36a650366990002","sha256":"fd79afff87a99f60b5823abc7e763e2e475f32a60de19fb1a0934494c1699213","sha512":"75848cf50516982f4a852404a6c0c15b8f0435e4ccb5eee8f2e64632f70d5286cae5f58fca9c641ee147a0528a90c3d0d10a188e14210d0043d2bceea3843b08","ssdeep":"","tlshash":"2da0129a71c570630a626005013a810700070ca226949104927445e048061024050955","size":81,"data":"","first_seen":"2025-12-20T19:35:42.037656Z","last_seen":"2025-12-20T19:35:42.037656Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"08b69a8fd47e737ffbcc8f55334c86d5","sha1":"2853774c08bda36052978b8374ca47ca004530a8","sha256":"310c6fc38b82e563d3478bab1d3db34ce328e7684a3f106351def612b2e77137","sha512":"79b09181c128f66bf799ea415f7cc5414cd72d8aeace7fa6d098ff569dccf4bb2e9ccdcc60d520103b3e44c68f851effda81be51dd5603d359c7867de210dabb","ssdeep":"","tlshash":"e6c0221ef0511c8c8a0500120aeb820a16b11baa09a37034c4e289c0bd40fdc2532dc0","size":191,"data":"","first_seen":"2025-02-22T05:44:22.482356Z","last_seen":"2026-04-03T22:36:27.076759Z","times_seen":56,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"413b7dc1caac04ab95e8a1b230b9b3ad","sha1":"2657fe2eb543ebc0b54eaa7d3aba3a75fb638630","sha256":"b62262aeb7ee1694f40152af828f0d72a6ac6572f9db8ffa1ab16784c7532878","sha512":"835049ca74deef336dde07bdb5e26143f145f4fa0fd3472ce4e052da605723434d315e939818671ec2fcc997ff538e9beb8b5e024a9c72ec7bd56aea4deca971","ssdeep":"","tlshash":"7f70008cb0c330000002202c003b000a222b0ac00a0c0000a20000822c200288a22aa8","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-04T23:35:10.658176Z","times_seen":18150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"7cd00379ca8f0900c58a74eb085b6a85","sha1":"ab203666827c70def730bc52e264ddacd3a4e3f3","sha256":"124b499aeb53f5c0ae33738448aea34883bc1aa17347193d049d11027f9a9210","sha512":"1c7ad0d30b58298f7e742b416cfcdbf15ef8c3bbe75867becd8650502fa8f032058cda65c822207acb7937846530da7b2e6bdfb645235bf5ba29dadc3cc03ffe","ssdeep":"","tlshash":"6190045533401354cdd3315040371c4d00d051705dc04c4140c4f4710dd31351345cdc","size":40,"data":"","first_seen":"2023-04-13T16:23:32Z","last_seen":"2026-04-04T08:45:39.881427Z","times_seen":601,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9fc1f83e6e481384ddcb7cea8915cce","sha1":"dc39e3bab10f977f3e6474145183262454ee7873","sha256":"e941982ae72a6d2b5979311ea2e4c1fcc6d8862fd8194c1d05335ad62ed69ef6","sha512":"9ffb5c7de0f175adc2f48438b1fe14e800d7df7bac4cfa79a76f06f0569df54b1ffbe9612568a65ae2fa5de308039bda9b849626367bb8bbb1013881e31799a3","ssdeep":"","tlshash":"eaa0024df095b2245585542c687a105553b66581371801119725c0553a5d4054332ace","size":59,"data":"","first_seen":"2025-06-22T09:39:41.694152Z","last_seen":"2026-02-13T09:50:47.325552Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"eb658359009beb715fef30a9df4b06db","sha1":"a1b14911f93be555fdb25ac78c117ac28109b486","sha256":"d94fa4688648675b9eddc802261bf924412cfd1af0101c5a7b706f100a404331","sha512":"e99624d81c83e4f034fa8de57798af38e35a58f8d39659e59e47ea565888fb9a6ece7b85d853e6068d06b76e0e7532d94a6120d2f6104cae16bc93e477c807d2","ssdeep":"","tlshash":"fdb0126e71c864d20212300514264129681749a20694b204727d46e00c291470014d98","size":90,"data":"","first_seen":"2025-07-13T11:27:36.424267Z","last_seen":"2026-02-12T03:18:50.7539Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"8ea13d9f9aadab625b2038eaa234c6fe","sha1":"ffa3a94f2f73c2516da8d928c827f2bbe461f76f","sha256":"9adf845257918a083fcb717c9d5d0ce506d009e2866089a4b1cffeced988a130","sha512":"bd77dcc45706bbfc871b466118ccef65d0dd25fe079db44179a0752ff64f36f9abe70244f94fe298c660eb551105310dc74178e2ec0f24225611bab4d9bf59b6","ssdeep":"","tlshash":"97b02bc4f2237355a7491080008a420c723369320c068f29915f5c45550e4000119509","size":129,"data":"","first_seen":"2024-05-17T15:43:10Z","last_seen":"2026-04-03T22:36:27.072683Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"e8961527ee3fe5343e2557b2d07fa466","sha1":"77949bb9e9f198b29a96a7443536a04cabe969cd","sha256":"78c8bdc18839c26595506bc6df8831aa6cfc44eff13f25786502329ad5088af3","sha512":"2c03efb8ef68dee19fbaa800e3fd0c722838474899cc4d01c6e95de2f03462b04bd3c8ed3f5304fabc4920e345dbb5e153d1780c5b417c0a7bf4507e552ea0dc","ssdeep":"","tlshash":"6170008cb0c330208002282c003b000a232a0ac00a0a0002c20000822c220088032a8c","size":25,"data":"","first_seen":"2023-03-07T01:27:45Z","last_seen":"2026-04-05T01:15:37.120277Z","times_seen":13316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9fc1f83e6e481384ddcb7cea8915cce","sha1":"dc39e3bab10f977f3e6474145183262454ee7873","sha256":"e941982ae72a6d2b5979311ea2e4c1fcc6d8862fd8194c1d05335ad62ed69ef6","sha512":"9ffb5c7de0f175adc2f48438b1fe14e800d7df7bac4cfa79a76f06f0569df54b1ffbe9612568a65ae2fa5de308039bda9b849626367bb8bbb1013881e31799a3","ssdeep":"","tlshash":"eaa0024df095b2245585542c687a105553b66581371801119725c0553a5d4054332ace","size":59,"data":"","first_seen":"2025-06-22T09:39:41.694152Z","last_seen":"2026-02-13T09:50:47.325552Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4fc3047af98c627dbe0e172ffc137010","sha1":"7bdfb08c510896f7fac79d8a8c17187f70ba9e20","sha256":"83b34ed574c9630f2d800fa605bcc5d84e287907f47456c7bd1be0deabd38901","sha512":"ed2209f84253efde79d7acfa2fad87c0483189ef272cc908ba432a7fd66ec9760291b699fbca4bf8778dce64f4b6de93847c86d1fdb5da15c4a3a6b66f2e3cbc","ssdeep":"","tlshash":"65e08c5860fe960c6a272a28c22a13c97111e8e13c45611ced61c2ca50ec4c782aee1b","size":311,"data":"","first_seen":"2023-03-07T01:03:19Z","last_seen":"2026-04-05T01:36:33.017569Z","times_seen":8121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4dc6bb20f9564d238111d7f907d28cf8","sha1":"637013b11798da259a1f5fcca31ca981882321ed","sha256":"7f2e840a7eb7ba5cf93a2d67e901ab501a381ec8d81a70ea352084e69e548f73","sha512":"7d71555549536c4f86ce253ff19fd0c6bb68e55b9c0c5f8331c7980ec9418a6073da439ba06d7bbbea4862999b2ae1df2645b2984901149245410cad56646827","ssdeep":"","tlshash":"6db012fb31553c253d183d98203b23796e3324a29a380080c234896438a0d0780831e6","size":98,"data":"","first_seen":"2025-02-22T05:44:22.484322Z","last_seen":"2026-02-12T03:18:50.735372Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Q18MHQV7P9\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f94076810f00f1c6f3ddc04bf5d3c1ed","sha1":"ef122be44ea70142481673123403815a274dbe95","sha256":"4c742b982d30c508de7a298548748136f230b0bd120cebcaa815defccb6bfbb3","sha512":"84bfc74937ecda62505916ad8d2a249aa734f5ea5670755105da2d9e25e176abe3e5e3fc06c1f92261ee0364d5a698114999fb96588adee9f9428283e40f66fc","ssdeep":"6144:s2Ie7ma2bulKY/1u99xHDmHYmyBFzvnsi1nWoNPad4FpCpQi:SC8bu7/1mbrns6WbMpQ","tlshash":"4a94188e73ca74269396e478503f018ba97b29e2b45cc896f1c9cce02d7459a0277f7d","size":420168,"data":"","first_seen":"2025-12-20T19:35:42.010315Z","last_seen":"2025-12-20T19:35:42.010315Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"5af06a05fc74299fe6aa53d96db2e55c","sha1":"bb244ff81a9507dee2c8febf8c1d632e42f0841e","sha256":"cd42eb02ba1af3b2b637079ed884f8a9c2391f778d2fcb311defcc4a2f4bba3f","sha512":"f35facccf958907775e3bda99dd1361b75cbbf93e9e6988065b2c4bb358812a2c257438ae728caa4bc15f2cfd71f9cc480b60f21323da24ecfaaba9cc6465c57","ssdeep":"","tlshash":"e6b0124db0103146332720211027e012003248409673208043a192517c303706193b9b","size":90,"data":"","first_seen":"2024-05-17T15:43:10Z","last_seen":"2026-04-03T22:36:27.067533Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"e8961527ee3fe5343e2557b2d07fa466","sha1":"77949bb9e9f198b29a96a7443536a04cabe969cd","sha256":"78c8bdc18839c26595506bc6df8831aa6cfc44eff13f25786502329ad5088af3","sha512":"2c03efb8ef68dee19fbaa800e3fd0c722838474899cc4d01c6e95de2f03462b04bd3c8ed3f5304fabc4920e345dbb5e153d1780c5b417c0a7bf4507e552ea0dc","ssdeep":"","tlshash":"6170008cb0c330208002282c003b000a232a0ac00a0a0002c20000822c220088032a8c","size":25,"data":"","first_seen":"2023-03-07T01:27:45Z","last_seen":"2026-04-05T01:15:37.120277Z","times_seen":13316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/defaultVendors.52b32e95.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"500c0be889380cc8f2adb8039df4d42f","sha1":"952bffba5fa6da706505d94225a63c94be490938","sha256":"cc933116fe2fea8fd4dbdd70bacd770137993d972a987ac86fd2e5f71b692523","sha512":"6739d92cc26c77956ac2758def321bb239338e3aabc92d8f692be039030da1f265ad1be9d99da7fde82a8f6dddd654606c029d0cfa2fc37394c102e72a15bee4","ssdeep":"12288:ync1YbMD1J7HfSS4hx1Z2UX8XQNr+DbGP3042O+g57qNnP1Og:yc1t1J7HqSCZ2UX8UobGPH2OX2NnP5","tlshash":"251507c97292f0a147e361e6807f040bf33a2919784d9464f254e8e67cb994e923bf7d","size":941788,"data":"","first_seen":"2025-12-20T19:35:38.612055Z","last_seen":"2026-02-06T08:34:03.478998Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"7133c974ec6194b52b4fbd318cb91350","sha1":"df7697197b1764b48d07749914c0e1cf2c80b680","sha256":"7ab4032c89d93f203602dba208b703faa23a59133e3e8977aba1146383d51383","sha512":"318beede4885524d94420e3734e4ad4fae5b136217f12655d17f267f5e1afc533c65e63af2b76e6f045492a9bfb70ae6906118aec3ba6895fd1ad2bf6cff580f","ssdeep":"","tlshash":"29f00eb60b9a6dcbc9c91293ef228cc330c08387663a55ca2c55bf4575e2f24682e0c2","size":508,"data":"","first_seen":"2025-12-20T19:35:41.985225Z","last_seen":"2025-12-20T19:35:41.985225Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4dc6bb20f9564d238111d7f907d28cf8","sha1":"637013b11798da259a1f5fcca31ca981882321ed","sha256":"7f2e840a7eb7ba5cf93a2d67e901ab501a381ec8d81a70ea352084e69e548f73","sha512":"7d71555549536c4f86ce253ff19fd0c6bb68e55b9c0c5f8331c7980ec9418a6073da439ba06d7bbbea4862999b2ae1df2645b2984901149245410cad56646827","ssdeep":"","tlshash":"6db012fb31553c253d183d98203b23796e3324a29a380080c234896438a0d0780831e6","size":98,"data":"","first_seen":"2025-02-22T05:44:22.484322Z","last_seen":"2026-02-12T03:18:50.735372Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-05T01:45:31.937043Z","times_seen":126251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"5af06a05fc74299fe6aa53d96db2e55c","sha1":"bb244ff81a9507dee2c8febf8c1d632e42f0841e","sha256":"cd42eb02ba1af3b2b637079ed884f8a9c2391f778d2fcb311defcc4a2f4bba3f","sha512":"f35facccf958907775e3bda99dd1361b75cbbf93e9e6988065b2c4bb358812a2c257438ae728caa4bc15f2cfd71f9cc480b60f21323da24ecfaaba9cc6465c57","ssdeep":"","tlshash":"e6b0124db0103146332720211027e012003248409673208043a192517c303706193b9b","size":90,"data":"","first_seen":"2024-05-17T15:43:10Z","last_seen":"2026-04-03T22:36:27.067533Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"8ea13d9f9aadab625b2038eaa234c6fe","sha1":"ffa3a94f2f73c2516da8d928c827f2bbe461f76f","sha256":"9adf845257918a083fcb717c9d5d0ce506d009e2866089a4b1cffeced988a130","sha512":"bd77dcc45706bbfc871b466118ccef65d0dd25fe079db44179a0752ff64f36f9abe70244f94fe298c660eb551105310dc74178e2ec0f24225611bab4d9bf59b6","ssdeep":"","tlshash":"97b02bc4f2237355a7491080008a420c723369320c068f29915f5c45550e4000119509","size":129,"data":"","first_seen":"2024-05-17T15:43:10Z","last_seen":"2026-04-03T22:36:27.072683Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"5af06a05fc74299fe6aa53d96db2e55c","sha1":"bb244ff81a9507dee2c8febf8c1d632e42f0841e","sha256":"cd42eb02ba1af3b2b637079ed884f8a9c2391f778d2fcb311defcc4a2f4bba3f","sha512":"f35facccf958907775e3bda99dd1361b75cbbf93e9e6988065b2c4bb358812a2c257438ae728caa4bc15f2cfd71f9cc480b60f21323da24ecfaaba9cc6465c57","ssdeep":"","tlshash":"e6b0124db0103146332720211027e012003248409673208043a192517c303706193b9b","size":90,"data":"","first_seen":"2024-05-17T15:43:10Z","last_seen":"2026-04-03T22:36:27.067533Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"413b7dc1caac04ab95e8a1b230b9b3ad","sha1":"2657fe2eb543ebc0b54eaa7d3aba3a75fb638630","sha256":"b62262aeb7ee1694f40152af828f0d72a6ac6572f9db8ffa1ab16784c7532878","sha512":"835049ca74deef336dde07bdb5e26143f145f4fa0fd3472ce4e052da605723434d315e939818671ec2fcc997ff538e9beb8b5e024a9c72ec7bd56aea4deca971","ssdeep":"","tlshash":"7f70008cb0c330000002202c003b000a222b0ac00a0c0000a20000822c200288a22aa8","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-04T23:35:10.658176Z","times_seen":18150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"59616f770ce906299c842dd0d9f5fb32","sha1":"189ae52290c7ab05223cff719ea2bf38d3f968c9","sha256":"9492664f87cbdfe7d44b9aae7f82b5e28b155f8112d8d5ca206ea9439fbd6b8e","sha512":"d9640ca2ef67fef2312b0ffaee93f8c1bd24695efb8e28f0aa364320ba6d933529aeec3f78ee979d3fde8641ebb5fea55a049bf277517342ca569e7db431ae01","ssdeep":"","tlshash":"d2b0126f71c468e30312300510364124281749560684920472bc5ae008151570010da9","size":90,"data":"","first_seen":"2025-12-20T19:35:42.043678Z","last_seen":"2025-12-20T19:35:42.043678Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"260b4d1e8d7c71eed71d740b73b43b79","sha1":"70951c56b5690767c2bddb80a83459be44511fd7","sha256":"dba9548a74568742c5f058172eb98a0b94a46265c49aec0d1d37c0b53aec661a","sha512":"bb8df2809b3fb86398fd9dcdb275156fe3018b1acd5221f37f5f50b85164c6940e23f3ee53be3075bac3fe511684a3456216948e93ab112949f852a4f8223ca2","ssdeep":"","tlshash":"afa002b46542740a41152b171267655d762544e437467059512024513450507b5a5984","size":68,"data":"","first_seen":"2023-03-07T15:08:32Z","last_seen":"2026-04-05T01:36:33.017094Z","times_seen":2261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"8ab71325fb23a28b22726e74d3c663fb","sha1":"5292e951eca00ca9fcaa9f86afdf1b04889e684b","sha256":"96dffbd9a1f8d3f1551091e4e1886fc0ee8c581875def4bc5d8bc948d83a97cd","sha512":"5894240c57dfdcab90a21aa76707ce03bf6ae1295a399f17a8fc32e234c9fa67070f8e62f45a487a0977b2fc783d9cf3d459715dd2c2e8c59cfb21c656eb28bc","ssdeep":"","tlshash":"0bc002eb505ae1a013c30152a837b282b93644db21067015d40c42002058e0c467ad8c","size":157,"data":"","first_seen":"2023-03-14T19:49:35Z","last_seen":"2026-04-03T22:36:27.066573Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"9efc7444111f384524c695c2da991ab8","sha1":"2f2a6de743feb4bc1679080eda62d9c9472b505c","sha256":"2c0d0fdadf37a8302927c5511ad53cfaa97078c8360478ff8e569ced0b0f520b","sha512":"5e1bc39f76a905f2e47c16a1f5a713844a3b96aebdfe69004034b1a5a02ca934354b6f3d3245d8bd8326a3208dd6def57e073ef50b627317c3fdabf9abc78a6e","ssdeep":"","tlshash":"85412c87e6219037a6f703ae10ab4153336c1f7ecda6485ba7ba343605e724352e4b1e","size":1979,"data":"","first_seen":"2025-12-20T19:35:38.7715Z","last_seen":"2026-01-13T08:41:15.575553Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/wto.js?v=","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e637fced898ec65adee45616107c97b","sha1":"eea31b97f0ebec3b33fcd3703f981fbfb5ac362d","sha256":"630ae597b3005f7a041a474621ed3a4ceaa0b75e146b7cd929f0adf4faacdaa6","sha512":"62d5acc5bdd93d4de9cb1a6a6e3b72aef20bba9a3f0f7e67c01003a5ad1fc3767229edcea95dfe2808d79b29e722d28faacd4ed61e9e63a4ab0993ee6dbc6f82","ssdeep":"","tlshash":"5d01d0a675a9d432168c0e5a62b7e7bd3cf120165a43800012ceee7ba679dcb6093cc9","size":798,"data":"","first_seen":"2025-11-30T11:50:30.624339Z","last_seen":"2026-02-12T03:18:50.685232Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.48acc92d.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c788cf4dcc4e41662a2aba6a0143cc9b","sha1":"baaff4d37c3f788b6e5f3d0fa4e9cd847a8fcb89","sha256":"588d7c0f62121c38b291bfcb7ac239fe714b41f0197af0ca4be6f2cd0c30a0de","sha512":"c2f45fe7019238781381c0038b9489d0f9b17afaf8e435ee88dc37544e263668f2cc84332e277a24ba201d61f3176ab3785d1fa04f019aa7b4c36bb290428038","ssdeep":"12288:rY2hwT5wJLfV1R+D54hTguKsiBuZLEiGLomY1lg:WcbED54Isi81lg","tlshash":"a535b5ccb2d2f06a43976575813f200bf33ea999b54d8050e629e8d1bcb958d9237f6c","size":1108884,"data":"","first_seen":"2025-12-20T15:01:59.719566Z","last_seen":"2026-01-13T02:19:50.305332Z","times_seen":835,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c89738748d794186b751ce1c85037c2","sha1":"35e434ff53153ce90f9f41a1e3907232bc91a362","sha256":"8d280a2b239a3536e45777a3fdf97c11b970b207ae90e86d93958ac894f1a1a1","sha512":"464a5b329851416e46980b6b7f61936a610d4cb1318741451fa15b1f337dc4e9d3a374c6c9eccc123b7c9608b7f206ef55469322fff46a9d4935e335433ff8b8","ssdeep":"","tlshash":"9931e2aa368670d786b2f070267fab27727685c2d5a80b101619abb07d7051e42a1a95","size":1490,"data":"","first_seen":"2023-03-08T12:06:33Z","last_seen":"2026-04-04T15:45:10.733054Z","times_seen":1338,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9fc1f83e6e481384ddcb7cea8915cce","sha1":"dc39e3bab10f977f3e6474145183262454ee7873","sha256":"e941982ae72a6d2b5979311ea2e4c1fcc6d8862fd8194c1d05335ad62ed69ef6","sha512":"9ffb5c7de0f175adc2f48438b1fe14e800d7df7bac4cfa79a76f06f0569df54b1ffbe9612568a65ae2fa5de308039bda9b849626367bb8bbb1013881e31799a3","ssdeep":"","tlshash":"eaa0024df095b2245585542c687a105553b66581371801119725c0553a5d4054332ace","size":59,"data":"","first_seen":"2025-06-22T09:39:41.694152Z","last_seen":"2026-02-13T09:50:47.325552Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4fc3047af98c627dbe0e172ffc137010","sha1":"7bdfb08c510896f7fac79d8a8c17187f70ba9e20","sha256":"83b34ed574c9630f2d800fa605bcc5d84e287907f47456c7bd1be0deabd38901","sha512":"ed2209f84253efde79d7acfa2fad87c0483189ef272cc908ba432a7fd66ec9760291b699fbca4bf8778dce64f4b6de93847c86d1fdb5da15c4a3a6b66f2e3cbc","ssdeep":"","tlshash":"65e08c5860fe960c6a272a28c22a13c97111e8e13c45611ced61c2ca50ec4c782aee1b","size":311,"data":"","first_seen":"2023-03-07T01:03:19Z","last_seen":"2026-04-05T01:36:33.017569Z","times_seen":8121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onesignal.com/sdks/OneSignalSDK.js","fqdn":"cdn.onesignal.com","domain":"onesignal.com","tld":"com"},"ip":{"addr":"104.16.160.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"09282956186c8515ef0d208902803581","sha1":"ea83b81c9955b3e983a7bef75714a9cefa904151","sha256":"ec8b1b07980996f574075e1b7e895d5d47794b9dcf345a68d60fbb17034f7bef","sha512":"39bf696c593e20bd86ae8994eb8e767b6c7fa6fa029f94b5dbc145cc30dc9460bcd5544f0182a79e4befc85df960b30dc53d7b435db24463f0e91d82faa4cd10","ssdeep":"96:/AQneVFrK3RJ1oauMhLBiobXf1JqZ8zZDV81uZIJqEKIZft4JqxCYZX7+Aroq3I3:o8Noqhtig1XzZZWuZIUsft40pTrU3","tlshash":"0512449bb970b5f253d358f6802f210ae27b993894b9a4905b85c4e09c7161f4337f6a","size":9204,"data":"","first_seen":"2024-07-22T22:24:59Z","last_seen":"2026-02-26T04:51:42.108077Z","times_seen":13513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9fc1f83e6e481384ddcb7cea8915cce","sha1":"dc39e3bab10f977f3e6474145183262454ee7873","sha256":"e941982ae72a6d2b5979311ea2e4c1fcc6d8862fd8194c1d05335ad62ed69ef6","sha512":"9ffb5c7de0f175adc2f48438b1fe14e800d7df7bac4cfa79a76f06f0569df54b1ffbe9612568a65ae2fa5de308039bda9b849626367bb8bbb1013881e31799a3","ssdeep":"","tlshash":"eaa0024df095b2245585542c687a105553b66581371801119725c0553a5d4054332ace","size":59,"data":"","first_seen":"2025-06-22T09:39:41.694152Z","last_seen":"2026-02-13T09:50:47.325552Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/defaultVendors.52b32e95.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"500c0be889380cc8f2adb8039df4d42f","sha1":"952bffba5fa6da706505d94225a63c94be490938","sha256":"cc933116fe2fea8fd4dbdd70bacd770137993d972a987ac86fd2e5f71b692523","sha512":"6739d92cc26c77956ac2758def321bb239338e3aabc92d8f692be039030da1f265ad1be9d99da7fde82a8f6dddd654606c029d0cfa2fc37394c102e72a15bee4","ssdeep":"12288:ync1YbMD1J7HfSS4hx1Z2UX8XQNr+DbGP3042O+g57qNnP1Og:yc1t1J7HqSCZ2UX8UobGPH2OX2NnP5","tlshash":"251507c97292f0a147e361e6807f040bf33a2919784d9464f254e8e67cb994e923bf7d","size":941788,"data":"","first_seen":"2025-12-20T19:35:38.612055Z","last_seen":"2026-02-06T08:34:03.478998Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3cd2173d4dd685d13b6dfe7f361bcaf8","sha1":"0e4c67a2fdccc95bd358626d6cb03d537417ce3a","sha256":"388eecbdeb2329273e1639c44253afa029f2097d23f3c356722184fe37f455cf","sha512":"d0cb9f0cf3765e3fcae42eab6588b8b2b3a8c092b2583d4a54f72d3905a21afd5e206a4b081e0e98540abdc3ca0bfb9c5861b4a40c726ef8ed51769f46980e44","ssdeep":"","tlshash":"6fb0120eb0203016235320210017608e10328dc04223719042720b22e83c3905243b9f","size":89,"data":"","first_seen":"2024-05-22T15:39:22Z","last_seen":"2026-04-03T22:36:27.068057Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9fc1f83e6e481384ddcb7cea8915cce","sha1":"dc39e3bab10f977f3e6474145183262454ee7873","sha256":"e941982ae72a6d2b5979311ea2e4c1fcc6d8862fd8194c1d05335ad62ed69ef6","sha512":"9ffb5c7de0f175adc2f48438b1fe14e800d7df7bac4cfa79a76f06f0569df54b1ffbe9612568a65ae2fa5de308039bda9b849626367bb8bbb1013881e31799a3","ssdeep":"","tlshash":"eaa0024df095b2245585542c687a105553b66581371801119725c0553a5d4054332ace","size":59,"data":"","first_seen":"2025-06-22T09:39:41.694152Z","last_seen":"2026-02-13T09:50:47.325552Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3cd2173d4dd685d13b6dfe7f361bcaf8","sha1":"0e4c67a2fdccc95bd358626d6cb03d537417ce3a","sha256":"388eecbdeb2329273e1639c44253afa029f2097d23f3c356722184fe37f455cf","sha512":"d0cb9f0cf3765e3fcae42eab6588b8b2b3a8c092b2583d4a54f72d3905a21afd5e206a4b081e0e98540abdc3ca0bfb9c5861b4a40c726ef8ed51769f46980e44","ssdeep":"","tlshash":"6fb0120eb0203016235320210017608e10328dc04223719042720b22e83c3905243b9f","size":89,"data":"","first_seen":"2024-05-22T15:39:22Z","last_seen":"2026-04-03T22:36:27.068057Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"413b7dc1caac04ab95e8a1b230b9b3ad","sha1":"2657fe2eb543ebc0b54eaa7d3aba3a75fb638630","sha256":"b62262aeb7ee1694f40152af828f0d72a6ac6572f9db8ffa1ab16784c7532878","sha512":"835049ca74deef336dde07bdb5e26143f145f4fa0fd3472ce4e052da605723434d315e939818671ec2fcc997ff538e9beb8b5e024a9c72ec7bd56aea4deca971","ssdeep":"","tlshash":"7f70008cb0c330000002202c003b000a222b0ac00a0c0000a20000822c200288a22aa8","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-04T23:35:10.658176Z","times_seen":18150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/x0neyd87","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"52.84.50.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7bcae2cf00f4cd9671ac437fa44770b9","sha1":"f63fb33828a4b12ce617551778dc368214b97313","sha256":"43e90a9ecff1f35c7214e10397febade8c1c63620feaf9ad0746070c833d5f21","sha512":"21b1296de46d586bc87c854b07469a10fc7669e887906cc8b989d639cf9a0e5ad02562222d3e85f68114744f1e8cd47433fcc6cd208bdf5fdc5ed4fd71650178","ssdeep":"96:v2NH8/xVRyhsXtpZ8HEZgOM09SP0Ffpv7vWYzfDsJ0dMw938I5Zv1JVqUP:v2YVNCH8bMFOAYMSdZ935pqUP","tlshash":"49f163feb6c2793806a31566623f770c7f3b654428494890d065c8c87a7addbc12bfad","size":7591,"data":"","first_seen":"2025-12-20T15:01:59.644551Z","last_seen":"2026-01-13T02:20:23.182557Z","times_seen":917,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4371381bb135b45d54ba38b5f4375075","sha1":"2fc449b28d7dda3b76ec000263ec5811fe43c049","sha256":"774cd4cbee542cff953604ac658d568dca296cc3df3c2fd4f175868b72088d87","sha512":"5c0c30e09f62d92a25f9eb68b48a9b27c9f306d2a1f62ca1331987d9c243c16d5e456aa2efe10fd4a52e12f4e38f8298749138e91fb5c08e76b41160fefe382a","ssdeep":"","tlshash":"08b012173194c4a700a3395b58389106044614b9118cf019273d3dd40405f9b111c459","size":99,"data":"","first_seen":"2025-12-20T19:35:42.049149Z","last_seen":"2025-12-20T19:35:42.049149Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/pages_entry-tsx.0f834983.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a11fe9ebcdd08109ecc4b7020bf2a1b7","sha1":"be4d895c4c72aef504c59b91b65b7546b7502495","sha256":"43f89ce6f3d8ce6fcc23e3f6e2222b6b630384a4ad471e2f3c0c08d920549701","sha512":"2ef91e1f809147f02ca4e00ff0afd72a7f1c428d0f26e6c27f3a024ad366e2ac56892214031ca74c2e886bfb2b2a3aa1db38bbc73a7d51c3dd27551bc273c1ef","ssdeep":"","tlshash":"3431fcc4b974a9fd48fa5ecb9dba0516e29c3f4994308820a4e39e0db634f87751873d","size":1640,"data":"","first_seen":"2025-12-04T17:07:03.772987Z","last_seen":"2025-12-25T02:16:58.179535Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"8ab71325fb23a28b22726e74d3c663fb","sha1":"5292e951eca00ca9fcaa9f86afdf1b04889e684b","sha256":"96dffbd9a1f8d3f1551091e4e1886fc0ee8c581875def4bc5d8bc948d83a97cd","sha512":"5894240c57dfdcab90a21aa76707ce03bf6ae1295a399f17a8fc32e234c9fa67070f8e62f45a487a0977b2fc783d9cf3d459715dd2c2e8c59cfb21c656eb28bc","ssdeep":"","tlshash":"0bc002eb505ae1a013c30152a837b282b93644db21067015d40c42002058e0c467ad8c","size":157,"data":"","first_seen":"2023-03-14T19:49:35Z","last_seen":"2026-04-03T22:36:27.066573Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9fc1f83e6e481384ddcb7cea8915cce","sha1":"dc39e3bab10f977f3e6474145183262454ee7873","sha256":"e941982ae72a6d2b5979311ea2e4c1fcc6d8862fd8194c1d05335ad62ed69ef6","sha512":"9ffb5c7de0f175adc2f48438b1fe14e800d7df7bac4cfa79a76f06f0569df54b1ffbe9612568a65ae2fa5de308039bda9b849626367bb8bbb1013881e31799a3","ssdeep":"","tlshash":"eaa0024df095b2245585542c687a105553b66581371801119725c0553a5d4054332ace","size":59,"data":"","first_seen":"2025-06-22T09:39:41.694152Z","last_seen":"2026-02-13T09:50:47.325552Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4fc3047af98c627dbe0e172ffc137010","sha1":"7bdfb08c510896f7fac79d8a8c17187f70ba9e20","sha256":"83b34ed574c9630f2d800fa605bcc5d84e287907f47456c7bd1be0deabd38901","sha512":"ed2209f84253efde79d7acfa2fad87c0483189ef272cc908ba432a7fd66ec9760291b699fbca4bf8778dce64f4b6de93847c86d1fdb5da15c4a3a6b66f2e3cbc","ssdeep":"","tlshash":"65e08c5860fe960c6a272a28c22a13c97111e8e13c45611ced61c2ca50ec4c782aee1b","size":311,"data":"","first_seen":"2023-03-07T01:03:19Z","last_seen":"2026-04-05T01:36:33.017569Z","times_seen":8121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"413b7dc1caac04ab95e8a1b230b9b3ad","sha1":"2657fe2eb543ebc0b54eaa7d3aba3a75fb638630","sha256":"b62262aeb7ee1694f40152af828f0d72a6ac6572f9db8ffa1ab16784c7532878","sha512":"835049ca74deef336dde07bdb5e26143f145f4fa0fd3472ce4e052da605723434d315e939818671ec2fcc997ff538e9beb8b5e024a9c72ec7bd56aea4deca971","ssdeep":"","tlshash":"7f70008cb0c330000002202c003b000a222b0ac00a0c0000a20000822c200288a22aa8","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-04T23:35:10.658176Z","times_seen":18150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-05T01:45:31.937043Z","times_seen":126251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-04-05T01:45:31.937043Z","times_seen":126251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/cms-pages_en-CA-entry-index-tsx.c0923eb3.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6277d857af265d2320620621ba1b888e","sha1":"d6f9bf585da0512bafe9fcfac3a4fefbd5730e96","sha256":"138c37fa2abba552c0774bfd2fab51a5445ac77b7a26f05a88457bf6b15021bd","sha512":"0039d7f7bc5b075fc4fb46433b24e5938243f6a66c17bd6c9b3888f346b0818c40e86e111d9793157ede21ade11c238fe111664c8a95d16d540a1767e075854f","ssdeep":"","tlshash":"2481961fe63827b515850282798f76e7ab41559a2322c490bddd8539b37ca2f303efd8","size":3915,"data":"","first_seen":"2025-12-06T13:04:27.253408Z","last_seen":"2025-12-25T02:16:58.145682Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"caf13b633ab4249aeadda1952a9038ae","sha1":"1eb64473acd8bff2d081a66f128c611d079f6cbe","sha256":"30d90270fd3125eb763b9958a72bd513c90cd6207b97dd0ef40c06aa22111ac7","sha512":"d671f43383001892ff379e33328af249aa3efef5adc0538c7a6bdc542cfb7c8f214dd1581a2b117efc96c1f316f6e9db40c3614ad155cb98b698b588165b61a3","ssdeep":"","tlshash":"758004451345701445d315510c7f1c4d0c10017015d4cdc11444fcd10cd30301d475dd","size":38,"data":"","first_seen":"2023-04-11T21:23:25Z","last_seen":"2026-04-05T00:13:18.51657Z","times_seen":33920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9fc1f83e6e481384ddcb7cea8915cce","sha1":"dc39e3bab10f977f3e6474145183262454ee7873","sha256":"e941982ae72a6d2b5979311ea2e4c1fcc6d8862fd8194c1d05335ad62ed69ef6","sha512":"9ffb5c7de0f175adc2f48438b1fe14e800d7df7bac4cfa79a76f06f0569df54b1ffbe9612568a65ae2fa5de308039bda9b849626367bb8bbb1013881e31799a3","ssdeep":"","tlshash":"eaa0024df095b2245585542c687a105553b66581371801119725c0553a5d4054332ace","size":59,"data":"","first_seen":"2025-06-22T09:39:41.694152Z","last_seen":"2026-02-13T09:50:47.325552Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"260b4d1e8d7c71eed71d740b73b43b79","sha1":"70951c56b5690767c2bddb80a83459be44511fd7","sha256":"dba9548a74568742c5f058172eb98a0b94a46265c49aec0d1d37c0b53aec661a","sha512":"bb8df2809b3fb86398fd9dcdb275156fe3018b1acd5221f37f5f50b85164c6940e23f3ee53be3075bac3fe511684a3456216948e93ab112949f852a4f8223ca2","ssdeep":"","tlshash":"afa002b46542740a41152b171267655d762544e437467059512024513450507b5a5984","size":68,"data":"","first_seen":"2023-03-07T15:08:32Z","last_seen":"2026-04-05T01:36:33.017094Z","times_seen":2261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4dc6bb20f9564d238111d7f907d28cf8","sha1":"637013b11798da259a1f5fcca31ca981882321ed","sha256":"7f2e840a7eb7ba5cf93a2d67e901ab501a381ec8d81a70ea352084e69e548f73","sha512":"7d71555549536c4f86ce253ff19fd0c6bb68e55b9c0c5f8331c7980ec9418a6073da439ba06d7bbbea4862999b2ae1df2645b2984901149245410cad56646827","ssdeep":"","tlshash":"6db012fb31553c253d183d98203b23796e3324a29a380080c234896438a0d0780831e6","size":98,"data":"","first_seen":"2025-02-22T05:44:22.484322Z","last_seen":"2026-02-12T03:18:50.735372Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"413b7dc1caac04ab95e8a1b230b9b3ad","sha1":"2657fe2eb543ebc0b54eaa7d3aba3a75fb638630","sha256":"b62262aeb7ee1694f40152af828f0d72a6ac6572f9db8ffa1ab16784c7532878","sha512":"835049ca74deef336dde07bdb5e26143f145f4fa0fd3472ce4e052da605723434d315e939818671ec2fcc997ff538e9beb8b5e024a9c72ec7bd56aea4deca971","ssdeep":"","tlshash":"7f70008cb0c330000002202c003b000a222b0ac00a0c0000a20000822c200288a22aa8","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-04T23:35:10.658176Z","times_seen":18150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3023cb6e3bdddee5e3028a993638200","sha1":"9c7f11be70721ef1b1dab9b11179ba4f5f762f51","sha256":"fd5c7d684950de601d01bb23a546ba4a08832105bc6d720beae31c55544fe30d","sha512":"a40daa55e96e8bdab892482d98bef2ed9d0ef7603d79cc6dd18e4849a1ec91cf2bf0ee0142c716205159b89f44e047598c8b19a4ca938f196f080e0d45befbf8","ssdeep":"","tlshash":"ddf0590d9cc507a047b820c443fbff0db1db212c981c8660c3c28445721aa9398253a8","size":504,"data":"","first_seen":"2024-05-17T15:43:09Z","last_seen":"2026-01-13T08:41:15.579102Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9fc1f83e6e481384ddcb7cea8915cce","sha1":"dc39e3bab10f977f3e6474145183262454ee7873","sha256":"e941982ae72a6d2b5979311ea2e4c1fcc6d8862fd8194c1d05335ad62ed69ef6","sha512":"9ffb5c7de0f175adc2f48438b1fe14e800d7df7bac4cfa79a76f06f0569df54b1ffbe9612568a65ae2fa5de308039bda9b849626367bb8bbb1013881e31799a3","ssdeep":"","tlshash":"eaa0024df095b2245585542c687a105553b66581371801119725c0553a5d4054332ace","size":59,"data":"","first_seen":"2025-06-22T09:39:41.694152Z","last_seen":"2026-02-13T09:50:47.325552Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9fc1f83e6e481384ddcb7cea8915cce","sha1":"dc39e3bab10f977f3e6474145183262454ee7873","sha256":"e941982ae72a6d2b5979311ea2e4c1fcc6d8862fd8194c1d05335ad62ed69ef6","sha512":"9ffb5c7de0f175adc2f48438b1fe14e800d7df7bac4cfa79a76f06f0569df54b1ffbe9612568a65ae2fa5de308039bda9b849626367bb8bbb1013881e31799a3","ssdeep":"","tlshash":"eaa0024df095b2245585542c687a105553b66581371801119725c0553a5d4054332ace","size":59,"data":"","first_seen":"2025-06-22T09:39:41.694152Z","last_seen":"2026-02-13T09:50:47.325552Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.webtrends-optimize.com/acs/common/js/5.4/sizzle.min.js","fqdn":"c.webtrends-optimize.com","domain":"webtrends-optimize.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef5064b6ee4dc45eee17aba457a12921","sha1":"be2d43b851bac77420faf4fb0d9182e470d22c8f","sha256":"a70b993e6415ddfd66ea6ee209e3ab2fa3f88b0d3e4329aec59cffedf2c32db6","sha512":"e1498c89718e2c6526a3c23c2c77a168da399f1fe89aaee8f512b5050404f53bc8f1acdc0ebd03b23b44716c3acefc8e192e91995ef4107a123966534c02398b","ssdeep":"384:0XNPDqowHhEyZfhXvkHsTGxMikEJOCVedXXe2pyz+anqp2mh8uHBj3pgR2ivPDt1:0GHhEyjGsTGxMikEJO4edXXe2p1p7lgP","tlshash":"249295dab2c631a2ab7a31a910fb4007f17e9ce6b9489d34f144d4983d78d9a41b7f0d","size":19850,"data":"","first_seen":"2023-03-07T12:21:19Z","last_seen":"2026-04-02T10:58:17.158031Z","times_seen":641,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4fc3047af98c627dbe0e172ffc137010","sha1":"7bdfb08c510896f7fac79d8a8c17187f70ba9e20","sha256":"83b34ed574c9630f2d800fa605bcc5d84e287907f47456c7bd1be0deabd38901","sha512":"ed2209f84253efde79d7acfa2fad87c0483189ef272cc908ba432a7fd66ec9760291b699fbca4bf8778dce64f4b6de93847c86d1fdb5da15c4a3a6b66f2e3cbc","ssdeep":"","tlshash":"65e08c5860fe960c6a272a28c22a13c97111e8e13c45611ced61c2ca50ec4c782aee1b","size":311,"data":"","first_seen":"2023-03-07T01:03:19Z","last_seen":"2026-04-05T01:36:33.017569Z","times_seen":8121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/main.32844814.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"34140166ef0a49199c5622e4dd9bd2d3","sha1":"9cb2877fed2c99084fa83740ee8ea92ccb49fe51","sha256":"ef648a33adbd60c161162751e929f548725618f990633b32e783a2618ab27b69","sha512":"285abff7c13d1430018e677490e149957b20ead7e525800f74d9931f6c09f01f46730f8dad4c4d245e526efbce64d923a5a252e2152c80536dad27d436cf750a","ssdeep":"","tlshash":"9d11afa741554eeef787c2c054b2b8135490806296812401caf6aafc02dffcd27277cd","size":1000,"data":"","first_seen":"2025-07-13T11:27:36.423523Z","last_seen":"2026-02-13T09:50:47.328036Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/79511.256880c4.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e78f6157cbfa9f67dc4c54b0a69049f","sha1":"e68c054f46fa90939ed7f18869a2a0d42235faeb","sha256":"5405830604b1b9be11304f7e4fd8526617b1bc26365325e4a1428dc701bc7c63","sha512":"c5237f64403a09945766e22d0e7d68ec6af29bc4ca660e00333f0e01aaaea7a14f81c98e916ba77dfff0c79dea1258418a4f21d0be6b51fca15e362c1c3090c9","ssdeep":"1536:BXZLd68NJJiodNmxTPT8/pQVlO29zqq3h61vvRQRZldplPrw23+vs9jnkbJRbs7J:BRN6x7T8/k3hoJErOvSSuArHj9Y","tlshash":"bec3e699b182b07163e714a6807b1205f3396944310bc4a4f3a9ead63df619f62b3f7d","size":120952,"data":"","first_seen":"2025-08-08T17:06:48.157216Z","last_seen":"2026-04-04T13:28:46.537904Z","times_seen":458,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9fc1f83e6e481384ddcb7cea8915cce","sha1":"dc39e3bab10f977f3e6474145183262454ee7873","sha256":"e941982ae72a6d2b5979311ea2e4c1fcc6d8862fd8194c1d05335ad62ed69ef6","sha512":"9ffb5c7de0f175adc2f48438b1fe14e800d7df7bac4cfa79a76f06f0569df54b1ffbe9612568a65ae2fa5de308039bda9b849626367bb8bbb1013881e31799a3","ssdeep":"","tlshash":"eaa0024df095b2245585542c687a105553b66581371801119725c0553a5d4054332ace","size":59,"data":"","first_seen":"2025-06-22T09:39:41.694152Z","last_seen":"2026-02-13T09:50:47.325552Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/svg.js?v=1866581867","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b46c27bc263cf4b4b973ecfe22d47f2","sha1":"6bd43b4fe3920b9fdbc25b1b24657125a2d13649","sha256":"2e5eaf8b307739a1e49ad6d98be7e40af8833d836af97bf3dafdde8fcac6e4a8","sha512":"5bdefe7f254c27bb37e94d668f73c5184254b19808d2c05f9fdc30627bc77047ccf9d3f55bde46a2a809c5e36c2267de0be750b58524745e68cc843181f2ba7f","ssdeep":"1536:Xy9zFThc6XHSKa63VOfSoXNXGP8VeUJr52SGffgot3GcSNLGY9k+qEtL/N:Xy9zFTm6XHV3VOfddHJr52ShogcSp9p","tlshash":"bdd319f9e72c919ed18bd77eff20d464131e60fab49482d4899d8b1d60578c2fa0be60","size":132183,"data":"","first_seen":"2025-12-04T17:07:03.707727Z","last_seen":"2026-01-13T08:41:15.476524Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/common.bfadd0e2.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"de98f6e336a18f90286bbcd88ab5f739","sha1":"cb72b04bda25750c0d515f4857b689d8161c33cc","sha256":"aeab68a8b242a5555d0220888dd75ed7bfac32a48f61dccf017195171d285901","sha512":"7fa0271efa2cac58389488d95ea79f48451bf62d09dfa1562f256f8ec44ad8bc62b6546cda7ff6a4676318a5ee1cb421d920905e00c2ac87a99d0670f850e3b7","ssdeep":"24576:nOpAOSI9pKsvsZ4Q4cfg4qRk+oSdbvWO4bXPXzXAXVXNX3XMXtXSXgX8XF:nOpA3Zsvs5cZ","tlshash":"bbd5b5127278519e48de068fb12ebe4df3686fae6131486094d5cc2c71b5efc623e6b4","size":2904233,"data":"","first_seen":"2025-12-20T19:35:38.794405Z","last_seen":"2025-12-20T19:35:42.055271Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/websockets-legacy.d3780a4c.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c48790e3d1a7bf2a32e180f6437d3cc","sha1":"e2570c45deb1c0a63d34b69977ece7e2ab7bd30b","sha256":"ab8bf68bc47083de0786aefdb8fa97d71fa6c1a82530c50a6d9cd72a5c57d911","sha512":"e0dd694379aeb54c0d11f7b66074d023419d640d5ece1c38dbae98f1cd3c2ffec68b066811e4c97d7581a9170065283af846b50a4b0369abf7e14a3dab50f531","ssdeep":"768:2M86xRXCKTZZiklZhm4t3yIpfDoVqvbBCAis/Q0dldpWare4/rpB25mGoKuN/V1N:DLJWareI4Xi","tlshash":"8003d78ab750a40613c7b1b1e87f3407a33a5d485509402cb298e9ed5fbc78d7227fba","size":39566,"data":"","first_seen":"2025-12-20T19:35:38.586157Z","last_seen":"2026-01-13T08:41:15.546239Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3cd2173d4dd685d13b6dfe7f361bcaf8","sha1":"0e4c67a2fdccc95bd358626d6cb03d537417ce3a","sha256":"388eecbdeb2329273e1639c44253afa029f2097d23f3c356722184fe37f455cf","sha512":"d0cb9f0cf3765e3fcae42eab6588b8b2b3a8c092b2583d4a54f72d3905a21afd5e206a4b081e0e98540abdc3ca0bfb9c5861b4a40c726ef8ed51769f46980e44","ssdeep":"","tlshash":"6fb0120eb0203016235320210017608e10328dc04223719042720b22e83c3905243b9f","size":89,"data":"","first_seen":"2024-05-22T15:39:22Z","last_seen":"2026-04-03T22:36:27.068057Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/runtime.f2d7e3ab.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d66d185339fa59dce0e62d340856f8f","sha1":"9fcf453cf63b02baa0f1b12328d5ad7fc17c8fca","sha256":"e474ce9573b6159ff6c8ef5ccbcf750b7d854fb270acb1742c84fd0e76ca0519","sha512":"b09eb79ddd368ee013fee7354d54d71b2a1724b8fb4c20b931387a9f165e97723538441a0e2477bf387f37825343829dafadf9453fdbc6e79925c5cf6515d839","ssdeep":"3072:hjsLfQ7uqP6sia3NA/L0WMmpTCcoUXdD70l:h4LfQ7uqP6sia3NA/L00rr0l","tlshash":"7b24989abd040dfbce5da6887c6afd8101af4b81741264bac370f7718bf884762dd526","size":223433,"data":"","first_seen":"2025-12-20T19:35:38.628736Z","last_seen":"2025-12-20T19:35:41.974196Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f6ebb0e543aaaed5031431bcdd416b6","sha1":"a0ff82ad8bc2034f42967c7867e11a91358fe1af","sha256":"46f50c0f71015b44c1021f800723a3aa9aedd3ebc6b574738d106d196e36c1cb","sha512":"d44dbd9cf174fc9f0b98ca0ea40e0ff7cc549e649a67299b376843ac47f9470278c221c54f48f9deb3bbf1ab12589baa376fdcb3fc2a37fe8ba98feadd27f066","ssdeep":"","tlshash":"eb2114969602a027e3f7005c319f63c19731a3969e4a9c451a29b2004ec579a66a7b47","size":1153,"data":"","first_seen":"2025-12-04T11:39:06.194978Z","last_seen":"2026-02-13T09:50:47.343196Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9fc1f83e6e481384ddcb7cea8915cce","sha1":"dc39e3bab10f977f3e6474145183262454ee7873","sha256":"e941982ae72a6d2b5979311ea2e4c1fcc6d8862fd8194c1d05335ad62ed69ef6","sha512":"9ffb5c7de0f175adc2f48438b1fe14e800d7df7bac4cfa79a76f06f0569df54b1ffbe9612568a65ae2fa5de308039bda9b849626367bb8bbb1013881e31799a3","ssdeep":"","tlshash":"eaa0024df095b2245585542c687a105553b66581371801119725c0553a5d4054332ace","size":59,"data":"","first_seen":"2025-06-22T09:39:41.694152Z","last_seen":"2026-02-13T09:50:47.325552Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9fc1f83e6e481384ddcb7cea8915cce","sha1":"dc39e3bab10f977f3e6474145183262454ee7873","sha256":"e941982ae72a6d2b5979311ea2e4c1fcc6d8862fd8194c1d05335ad62ed69ef6","sha512":"9ffb5c7de0f175adc2f48438b1fe14e800d7df7bac4cfa79a76f06f0569df54b1ffbe9612568a65ae2fa5de308039bda9b849626367bb8bbb1013881e31799a3","ssdeep":"","tlshash":"eaa0024df095b2245585542c687a105553b66581371801119725c0553a5d4054332ace","size":59,"data":"","first_seen":"2025-06-22T09:39:41.694152Z","last_seen":"2026-02-13T09:50:47.325552Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"01b74e233096ffd728c5e307a0c8e36f","sha1":"5aa1dd1599e3f7edf31a42f8760c31fde33a4eb8","sha256":"9f0145af06b60cec9c68b3ef971d7f8df9e7b41c20fa53e53185658e354ceb6b","sha512":"259086eccbfe2c8f9956a09367dc21b15b236c686faa29482aa41914618672dbb1ccc417b616caa829e7a43571768a9fb70d21d3da79b5bebff946af1e2f285c","ssdeep":"","tlshash":"26b0126e71cc64d202173005142a4124281749620684a204727d46e008191474014d98","size":90,"data":"","first_seen":"2025-07-13T11:27:36.421236Z","last_seen":"2026-02-12T03:18:50.738295Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"8ea13d9f9aadab625b2038eaa234c6fe","sha1":"ffa3a94f2f73c2516da8d928c827f2bbe461f76f","sha256":"9adf845257918a083fcb717c9d5d0ce506d009e2866089a4b1cffeced988a130","sha512":"bd77dcc45706bbfc871b466118ccef65d0dd25fe079db44179a0752ff64f36f9abe70244f94fe298c660eb551105310dc74178e2ec0f24225611bab4d9bf59b6","ssdeep":"","tlshash":"97b02bc4f2237355a7491080008a420c723369320c068f29915f5c45550e4000119509","size":129,"data":"","first_seen":"2024-05-17T15:43:10Z","last_seen":"2026-04-03T22:36:27.072683Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"e8961527ee3fe5343e2557b2d07fa466","sha1":"77949bb9e9f198b29a96a7443536a04cabe969cd","sha256":"78c8bdc18839c26595506bc6df8831aa6cfc44eff13f25786502329ad5088af3","sha512":"2c03efb8ef68dee19fbaa800e3fd0c722838474899cc4d01c6e95de2f03462b04bd3c8ed3f5304fabc4920e345dbb5e153d1780c5b417c0a7bf4507e552ea0dc","ssdeep":"","tlshash":"6170008cb0c330208002282c003b000a232a0ac00a0a0002c20000822c220088032a8c","size":25,"data":"","first_seen":"2023-03-07T01:27:45Z","last_seen":"2026-04-05T01:15:37.120277Z","times_seen":13316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"260b4d1e8d7c71eed71d740b73b43b79","sha1":"70951c56b5690767c2bddb80a83459be44511fd7","sha256":"dba9548a74568742c5f058172eb98a0b94a46265c49aec0d1d37c0b53aec661a","sha512":"bb8df2809b3fb86398fd9dcdb275156fe3018b1acd5221f37f5f50b85164c6940e23f3ee53be3075bac3fe511684a3456216948e93ab112949f852a4f8223ca2","ssdeep":"","tlshash":"afa002b46542740a41152b171267655d762544e437467059512024513450507b5a5984","size":68,"data":"","first_seen":"2023-03-07T15:08:32Z","last_seen":"2026-04-05T01:36:33.017094Z","times_seen":2261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"c9fc1f83e6e481384ddcb7cea8915cce","sha1":"dc39e3bab10f977f3e6474145183262454ee7873","sha256":"e941982ae72a6d2b5979311ea2e4c1fcc6d8862fd8194c1d05335ad62ed69ef6","sha512":"9ffb5c7de0f175adc2f48438b1fe14e800d7df7bac4cfa79a76f06f0569df54b1ffbe9612568a65ae2fa5de308039bda9b849626367bb8bbb1013881e31799a3","ssdeep":"","tlshash":"eaa0024df095b2245585542c687a105553b66581371801119725c0553a5d4054332ace","size":59,"data":"","first_seen":"2025-06-22T09:39:41.694152Z","last_seen":"2026-02-13T09:50:47.325552Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"e8961527ee3fe5343e2557b2d07fa466","sha1":"77949bb9e9f198b29a96a7443536a04cabe969cd","sha256":"78c8bdc18839c26595506bc6df8831aa6cfc44eff13f25786502329ad5088af3","sha512":"2c03efb8ef68dee19fbaa800e3fd0c722838474899cc4d01c6e95de2f03462b04bd3c8ed3f5304fabc4920e345dbb5e153d1780c5b417c0a7bf4507e552ea0dc","ssdeep":"","tlshash":"6170008cb0c330208002282c003b000a232a0ac00a0a0002c20000822c220088032a8c","size":25,"data":"","first_seen":"2023-03-07T01:27:45Z","last_seen":"2026-04-05T01:15:37.120277Z","times_seen":13316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/cms-pages_en-entry-index-tsx.6ce7b64f.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"07083289c594a9b9c7e8d48052d09cba","sha1":"ec7c5e0536747969abfcf8a3b77171d01810263f","sha256":"56569c85dade6a54677db12d4633f3100c4f406d8cba2c591f33cace65d7f9c4","sha512":"a2b546f42224ab4622f17091e8d7cf32a18eab377e7dc45647334d5999d0017264cdb57a5f0c0fb6bc73feafc6c9e6eddaa1fa64f80f6fa18c04e174479eecd2","ssdeep":"","tlshash":"f381ba0fdb382bb505850252698f3ae7bb41555a63228450bddd8139f378a2b203efe8","size":3855,"data":"","first_seen":"2025-12-20T19:35:38.622635Z","last_seen":"2026-01-13T08:41:15.423961Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-PH4QS9N\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"790f0c637e448f57f2d617bdb0b0aaab","sha1":"b510f7f0875ca796a5dc760296759ce6f2630f11","sha256":"b5a0a28b874e647c49b93cf7e5a3c2fc104e10aa141e6aa3beba034d9f5fb32c","sha512":"bba3ec2e59ed6bb2e4681f9187cca687aaa2d1ab91eb2a8ffc77b6b8f3ddc80f465e70fbf87f4baef23a0a7d1f64a63a0b9a9dea2093574cf09ffe190dd6b45f","ssdeep":"6144:5grD7E78lkmWeJq2bulKYv9VHDmHYmyBFz0nsDuiWLxxMK:o8Sbu7llAnsDWLxz","tlshash":"21b41acdb6c5687683e26464943f064f757d24e2b14ca890f099cce42e749ba2163fbf","size":511457,"data":"","first_seen":"2025-12-20T19:35:41.994212Z","last_seen":"2025-12-20T19:35:41.994212Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"8ea13d9f9aadab625b2038eaa234c6fe","sha1":"ffa3a94f2f73c2516da8d928c827f2bbe461f76f","sha256":"9adf845257918a083fcb717c9d5d0ce506d009e2866089a4b1cffeced988a130","sha512":"bd77dcc45706bbfc871b466118ccef65d0dd25fe079db44179a0752ff64f36f9abe70244f94fe298c660eb551105310dc74178e2ec0f24225611bab4d9bf59b6","ssdeep":"","tlshash":"97b02bc4f2237355a7491080008a420c723369320c068f29915f5c45550e4000119509","size":129,"data":"","first_seen":"2024-05-17T15:43:10Z","last_seen":"2026-04-03T22:36:27.072683Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"3cd2173d4dd685d13b6dfe7f361bcaf8","sha1":"0e4c67a2fdccc95bd358626d6cb03d537417ce3a","sha256":"388eecbdeb2329273e1639c44253afa029f2097d23f3c356722184fe37f455cf","sha512":"d0cb9f0cf3765e3fcae42eab6588b8b2b3a8c092b2583d4a54f72d3905a21afd5e206a4b081e0e98540abdc3ca0bfb9c5861b4a40c726ef8ed51769f46980e44","ssdeep":"","tlshash":"6fb0120eb0203016235320210017608e10328dc04223719042720b22e83c3905243b9f","size":89,"data":"","first_seen":"2024-05-22T15:39:22Z","last_seen":"2026-04-03T22:36:27.068057Z","times_seen":86,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"8ea13d9f9aadab625b2038eaa234c6fe","sha1":"ffa3a94f2f73c2516da8d928c827f2bbe461f76f","sha256":"9adf845257918a083fcb717c9d5d0ce506d009e2866089a4b1cffeced988a130","sha512":"bd77dcc45706bbfc871b466118ccef65d0dd25fe079db44179a0752ff64f36f9abe70244f94fe298c660eb551105310dc74178e2ec0f24225611bab4d9bf59b6","ssdeep":"","tlshash":"97b02bc4f2237355a7491080008a420c723369320c068f29915f5c45550e4000119509","size":129,"data":"","first_seen":"2024-05-17T15:43:10Z","last_seen":"2026-04-03T22:36:27.072683Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"260b4d1e8d7c71eed71d740b73b43b79","sha1":"70951c56b5690767c2bddb80a83459be44511fd7","sha256":"dba9548a74568742c5f058172eb98a0b94a46265c49aec0d1d37c0b53aec661a","sha512":"bb8df2809b3fb86398fd9dcdb275156fe3018b1acd5221f37f5f50b85164c6940e23f3ee53be3075bac3fe511684a3456216948e93ab112949f852a4f8223ca2","ssdeep":"","tlshash":"afa002b46542740a41152b171267655d762544e437467059512024513450507b5a5984","size":68,"data":"","first_seen":"2023-03-07T15:08:32Z","last_seen":"2026-04-05T01:36:33.017094Z","times_seen":2261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.webtrends-optimize.com/acs/common/js/5.4/wt_debugger.js","fqdn":"c.webtrends-optimize.com","domain":"webtrends-optimize.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f0d38d393b3ad1ba8c74c4e23aaa2ed","sha1":"0e396f7b44d099242dc4114dd49d442732713251","sha256":"0f28f8ef3c65ede1c3171b6e44188fca93e15b53d362d0bbb9a22c93d3f73fdd","sha512":"e5b81c4af5867dacdac6bfd8a7d62bc0a4da44e6d6751e95a215d344a222b325a573a2965be6547b974c2e8043f2d5fad3faf59f2891da02d715be957c6c4c66","ssdeep":"96:S4dO9eJ67NZG9CTA8CxoBVN2OXQXH9XqlzJv5axRs/3uy:S+aNYj8CmrNzXgcpl5axRKv","tlshash":"93918915a334343082f5a6f24d2f06ae7a3185913904f8aebb50fede9ca5f860453e5b","size":4304,"data":"","first_seen":"2023-03-07T12:21:19Z","last_seen":"2026-04-02T10:58:17.177225Z","times_seen":664,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/en-CA/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"4dc6bb20f9564d238111d7f907d28cf8","sha1":"637013b11798da259a1f5fcca31ca981882321ed","sha256":"7f2e840a7eb7ba5cf93a2d67e901ab501a381ec8d81a70ea352084e69e548f73","sha512":"7d71555549536c4f86ce253ff19fd0c6bb68e55b9c0c5f8331c7980ec9418a6073da439ba06d7bbbea4862999b2ae1df2645b2984901149245410cad56646827","ssdeep":"","tlshash":"6db012fb31553c253d183d98203b23796e3324a29a380080c234896438a0d0780831e6","size":98,"data":"","first_seen":"2025-02-22T05:44:22.484322Z","last_seen":"2026-02-12T03:18:50.735372Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"fe364450e1391215f596d043488f989f","sha1":"d1848aa7b5cfd853609db178070771ad67d351e9","sha256":"c77e5168dffda66b8dc13f1425b4d3630a6656a3e5acf707f4393277ba3c8b5e","sha512":"2b11cd287b8fae7a046f160bee092e22c6db19d38b17888aed6f98f5c3e936a46766fb1e947ecc0cc5964548474b7866eb60a71587a04f1af8f816df8afa221e","ssdeep":"","tlshash":"54600088282020000000228008802020000203e02002020020c020202aa02280800200","size":15,"data":"","first_seen":"2023-03-07T01:02:47Z","last_seen":"2026-04-05T01:44:40.880383Z","times_seen":63091,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/payments/color/devcode-banklocal.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/payments/color/devcode-banklocal.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 21 Jun 2024 13:05:05 GMT\r\netag: W/\"66757a81-2b94\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 7806\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a9d99b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11156,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1197bc00f5b75ee0dc4871d11e6b48e","sha1":"a5fd8b31aecaab34e8d3a32b2a47cbdbff635b85","sha256":"5c41f85762145b4f37f8d3e13d91198c1a7233a190b58cd214af72a9553da1f7","sha512":"cdac7b42c267e9e855263afefd1f5410279abb7ba1f3141a8dc7a83dd97393167d04e0033a0d06542ac150f727d3a09c1c743f9d6a788507ab2165db521e0f73","ssdeep":"192:Enx3du4rNs3wf1jb6VGSGsuEOaeBl0wW7M/flSKCl0G:4bVmoOGS/uRaecj8EKQ","tlshash":"373263e163e5f3d0f402e7f8c72ea8b57c372aea7965d19983b07c90991112e48c88d7","first_seen":"2025-02-22T05:44:22.407512Z","last_seen":"2026-02-12T03:18:50.630665Z","times_seen":17,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/images/flag.e8fcc3b6..svg","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /images/flag.e8fcc3b6..svg HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/css/main.a6455864.css\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 19 Dec 2025 11:40:30 GMT\r\netag: W/\"694539ae-132\"\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:54 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2ulVYHJU8q6zvdpCbzwksFDtFk7ltk17SxN0HPK7b5%2Fin9NmXY6vMM04mwsmPoFrhHIg3H3a%2FPwZ1CachDlVbUs5dGjbFpLEBY7qv5XBFUQn9pNH1XnO%2BYh70iIrSoRHwAwets2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946b8ee8712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":306,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"360d4739d8e09dbba624b59e351d9c40","sha1":"489ccc551811f9d8607dfca6cbd0c04baf138c5b","sha256":"22a9719081b1eaa7b569a06e1a3aef91bd1e91e677e269737a9dba2672086cf3","sha512":"0e51d25577b9c6164c6b851d408bdf0f49d4138d5480dc1843fbd28a6de6c708f769684dbc99b4a4a63f3d29985ed10fa41e69bae13da1e30432fe650652cebf","ssdeep":"","tlshash":"10e0cded7729e556f5414320773808ae471244e73546585df951235971913ae0c486a7","first_seen":"2025-07-13T11:27:36.300235Z","last_seen":"2026-02-12T03:18:50.678313Z","times_seen":16,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser-intake-datadoghq.eu/api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A6.6.2%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Aluckydreams.com%2Cversion%3A2.1.86-f54dbe17\u0026dd-api-key=pub6944d0b05408999e2a258fb6e57933fb\u0026dd-evp-origin-version=6.6.2\u0026dd-evp-origin=browser\u0026dd-request-id=3c423888-f393-4b1f-bcf5-e4e9ff5b5e28\u0026batch_time=1766259296408","fqdn":"browser-intake-datadoghq.eu","domain":"browser-intake-datadoghq.eu","tld":"eu"},"ip":{"addr":"34.149.115.139","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:56.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.browser-intake-datadoghq.eu","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 25 May 2025 00:00:00 GMT","end":"Sat, 30 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"62:0A:8C:EB:5B:F0:38:A4:34:6C:43:65:FE:09:67:F7:83:AD:44:C5","sha256":"73:49:93:8C:8C:F9:73:3A:66:03:C0:4D:5A:08:45:09:83:4A:2D:76:73:88:8E:6D:CE:3A:2F:EF:6E:C1:86:09"}}},"request":{"raw":"POST /api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A6.6.2%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Aluckydreams.com%2Cversion%3A2.1.86-f54dbe17\u0026dd-api-key=pub6944d0b05408999e2a258fb6e57933fb\u0026dd-evp-origin-version=6.6.2\u0026dd-evp-origin=browser\u0026dd-request-id=3c423888-f393-4b1f-bcf5-e4e9ff5b5e28\u0026batch_time=1766259296408 HTTP/1.1\r\nHost: browser-intake-datadoghq.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.luckydreams4.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 15646\r\nOrigin: https://www.luckydreams4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15646,"data":"{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294096,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"67227fd0-4677-422d-92a6-49e88c714ecd\",\"type\":\"image\",\"duration\":69000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBL2tCQ2c9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--ca56f6958c697b0539cca91c4d516e445711e973/Belatra.webp\",\"protocol\":\"h3\",\"size\":28334,\"encoded_body_size\":28334,\"decoded_body_size\":28334,\"transfer_size\":29561,\"download\":{\"duration\":4000000,\"start\":65000000},\"first_byte\":{\"duration\":12000000,\"start\":53000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294096,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"46073260-6f33-494c-b193-9d2a08972d34\",\"type\":\"image\",\"duration\":74000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBeHJoQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--6058e01bff283e80cc9080ead8df5d79f217b429/spinomenal-64cccc477cb1a.webp\",\"protocol\":\"h3\",\"size\":11936,\"encoded_body_size\":11936,\"decoded_body_size\":11936,\"transfer_size\":13199,\"download\":{\"duration\":1000000,\"start\":73000000},\"first_byte\":{\"duration\":17000000,\"start\":56000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294097,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"bf943a0e-bb02-4b5e-85c4-67cdc2b471c0\",\"type\":\"image\",\"duration\":84000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBN0QvQ1E9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--1bf2fcc1ea84990dfcb06e0c278cad32439d3754/Yggdrasil.webp\",\"protocol\":\"h3\",\"size\":54702,\"encoded_body_size\":54702,\"decoded_body_size\":54702,\"transfer_size\":55927,\"download\":{\"duration\":1000000,\"start\":83000000},\"first_byte\":{\"duration\":21000000,\"start\":62000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294097,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"7056543a-1173-4ffd-93fa-d479c4eae78d\",\"type\":\"image\",\"duration\":82000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBeWpoQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--f57dd12acf7e5cdd4c5d98f5d79c9f781df4f132/booming-64cccbfe00582.webp\",\"protocol\":\"h3\",\"size\":10826,\"encoded_body_size\":10826,\"decoded_body_size\":10826,\"transfer_size\":12077,\"download\":{\"duration\":2000000,\"start\":80000000},\"first_byte\":{\"duration\":21000000,\"start\":59000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294098,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"cf3ef368-cadb-454d-9832-c94653798f2a\",\"type\":\"image\",\"duration\":86000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBM3ZpQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--1b7214023ff8caa690b0735583df286810a7639e/Group_777-min.webp\",\"protocol\":\"h3\",\"size\":5858,\"encoded_body_size\":5858,\"decoded_body_size\":5858,\"transfer_size\":7098,\"download\":{\"duration\":1000000,\"start\":85000000},\"first_byte\":{\"duration\":12000000,\"start\":73000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294098,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"ca763334-9247-4d74-946b-20eb1080085b\",\"type\":\"image\",\"duration\":88000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBM3JpQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--6d207b114aa834df28a0de46d38345598237ac2b/Group_78-min.webp\",\"protocol\":\"h3\",\"size\":4446,\"encoded_body_size\":4446,\"decoded_body_size\":4446,\"transfer_size\":5676,\"download\":{\"duration\":1000000,\"start\":87000000},\"first_byte\":{\"duration\":14000000,\"start\":73000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294097,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"3437a386-e67e-4fb8-ab62-1b590b505e9e\",\"type\":\"image\",\"duration\":89000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBNmpiQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--b9ac740fb1525f2fe90cac374c9c83e4e9351176/netgame_(2).webp\",\"protocol\":\"h3\",\"size\":5474,\"encoded_body_size\":5474,\"decoded_body_size\":5474,\"transfer_size\":6712,\"download\":{\"duration\":1000000,\"start\":88000000},\"first_byte\":{\"duration\":20000000,\"start\":68000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294098,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"71a2cce6-a47c-4d49-8ae2-8150644379fb\",\"type\":\"image\",\"duration\":88000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBM25pQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--1f9189ad7935e213129743eb40b0d29d1a70fce7/Group_97-min.webp\",\"protocol\":\"h3\",\"size\":4522,\"encoded_body_size\":4522,\"decoded_body_size\":4522,\"transfer_size\":5760,\"download\":{\"duration\":0,\"start\":88000000},\"first_byte\":{\"duration\":15000000,\"start\":73000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294100,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"2bc710cc-7a5c-4fd9-9c65-200bf12ed9c2\",\"type\":\"image\",\"duration\":90000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBNERpQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--e4605e8ae3206dd85ea4e179ad6b1e000a9a4f85/Group_82-min.webp\",\"protocol\":\"h3\",\"size\":2596,\"encoded_body_size\":2596,\"decoded_body_size\":2596,\"transfer_size\":3836,\"download\":{\"duration\":0,\"start\":90000000},\"first_byte\":{\"duration\":18000000,\"start\":72000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294890,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"39a92b6c-ea8a-4f0d-a2c5-ff2b1b0a84aa\",\"type\":\"image\",\"duration\":25000000,\"url\":\"https://www.luckydreams4.com/images/diamond.0f27c73d..png\",\"protocol\":\"h3\",\"size\":5806,\"encoded_body_size\":5806,\"decoded_body_size\":5806,\"transfer_size\":6679,\"download\":{\"duration\":2000000,\"start\":23000000},\"first_byte\":{\"duration\":18000000,\"start\":5000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259295072,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"3169f98b-fdf9-4eef-b814-6748036404ea\",\"type\":\"image\",\"duration\":36000000,\"url\":\"https://netcontent.cc/luckydreams/i/s3/softswiss/SnoopDoggDollars.webp\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259295072,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"80327ac7-ad9b-4be9-ae68-18694c4d5bd9\",\"type\":\"image\",\"duration\":38000000,\"url\":\"https://netcontent.cc/luckydreams/i/s3/pragmaticexternal/GatesofDiamond1000.webp\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259295074,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"0049a08f-983c-45d6-ad1e-68531b814481\",\"type\":\"image\",\"duration\":46000000,\"url\":\"https://netcontent.cc/luckydreams/i/s3/softswiss/ElvisFroginVegas.webp\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ncontent-type: application/json\r\ncontent-length: 53\r\ndd-request-id: 3c423888-f393-4b1f-bcf5-e4e9ff5b5e28\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 20 Dec 2025 19:34:56 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e76e9a06fae0e4dadbedc676ce10ba71","sha1":"bb44e094f314e8baad1054e2af1b565cf2a7d405","sha256":"e72205a46c1b84d52e8ca8d3332aa1892ce5a6b0fa0a10f93978daed8daa677a","sha512":"3ee5aa0f695f2a38a1bc315374c62975340a38bbbebf75febff087fcd85f79c546a45d535d650a6dd3ec2fb095333e41342ce1322caa30b055b9ef34215a884d","ssdeep":"","tlshash":"5290029681220ad591a06902068c85001950d40498060727106441c915ed5096354904","first_seen":"2025-12-20T19:35:41.876031Z","last_seen":"2025-12-20T19:35:41.876031Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/api/restrictions/marks","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /api/restrictions/marks HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.s.v1+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Display-Mode: browser\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/vnd.s.v1+json; charset=utf-8\r\ncontent-length: 304\r\ncf-ray: 9b11945e1a5f712e-OSL\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nx-s-media-type: s.v1\r\netag: W/\"4b130d1d18494cdf6784bf6d2d485bea\"\r\ncache-control: max-age=0, private, must-revalidate\r\nset-cookie: locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; domain=luckydreams4.com; path=/; SameSite=None; Secure\r\nvary: Accept, Origin\r\nx-request-id: 9b11945e1a5f712e-FRA\r\nx-runtime: 0.008604\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aNUU8oeZGDgx8o3U9CCkwT4XKlgv8RrbjQUurE0%2FApad4DK4LD9kzRzUN2PzkG%2BCfp%2B3aWFbvsxhSF35M2Pw%2F32LfREhH4ohuc4WNDJaT%2BFp%2FDB3FqDXAbNXYj5nIfo3s4VXrjXY\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":304,"size_decoded":0,"mime_type":"application/vnd.s.v1+json; charset=utf-8","magic":"JSON text data","md5":"0af7087b99e80f9cfee46f121b442047","sha1":"01eb17474a8cd42c8ff04d2842e210d812342a53","sha256":"4b130d1d18494cdf6784bf6d2d485bea428ce6c471642f27a3030c8639b380dc","sha512":"0714d000290a04f7b2c48c6b10b417c5001170e9728cb6a896a2b0b880c7dea1484411ad5d912fda146e204cc093aabe0cd13b5edd3126b9302a1f982e833110","ssdeep":"","tlshash":"83e0ec6ab36c04b87be387d11608ef751b8b5343e007169d1f9e537a7a18a2660f780c","first_seen":"2025-12-20T19:35:38.676677Z","last_seen":"2026-02-12T03:18:50.686483Z","times_seen":8,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/payments/color/devcode-kluwp_w.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/payments/color/devcode-kluwp_w.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 21 Jun 2024 13:05:05 GMT\r\netag: W/\"66757a81-30b7\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 41816\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a7d77b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12471,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"46625235fb53fedafc296ee8183b15e2","sha1":"835eae9985cc4d0c3e1f2aa08a6b9c74c8041f60","sha256":"38500b40601dd45886028deb832f3d6da607d248d92f2d730188836e6857dc1b","sha512":"7b63c84424f9509d85ba04e82916d430dac6ba97cb57d49c11ec407cf99daf7cda010972489c7382c0b550adafadce57294aae0596ed27dafecf7ad2cb51ef11","ssdeep":"192:Y63ra+cNzRWy5tfiXEdqgH3wxmZmqlBuppo7BeUcj0m1S0kvrhlFar:YMra+c5VfyEdqgH38m1BwPFsvZar","tlshash":"294274eba3d8b2c0e546f3f45416d4753b6334fe7622cb894a95bda0fb1102c9489cc9","first_seen":"2025-02-22T05:44:22.405148Z","last_seen":"2026-02-12T03:18:50.716369Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/images/preview-bg-no-gradient.eddb497d..webp","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /images/preview-bg-no-gradient.eddb497d..webp HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/css/common.0ff8eaf9.css\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/webp\r\ncontent-length: 452082\r\ncf-ray: 9b1194696cc5712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:30 GMT\r\netag: \"694539ae-6e5f2\"\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:53 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=peozAd8w1izW9jzvwnWiQneF41fGDjCSgM1LhNVq8o46bcay6%2B2Tqn%2B7QWsfNxlrkzgs4t%2B9xTAXFeCapxF%2BqSwVLgn8s6Hfr4VkhobxE5%2FIJRYgr%2FzQmYcXIFweZT7dezKVqAHB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":452082,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"33c6afa6fc67fabf17aae4094709eef2","sha1":"1d4edeef9478b3c13c62daede461f7cdc08fe947","sha256":"ec6c29613ea31eb42e64d0a99c962dbe7517678dd35fa374e2b38584c95575a2","sha512":"588ecfb114c74760ec488956531e9c3c139a8932c06ace2d59fcb402b1409d5f45b83d5d32207dc7f3114b2e053f33498f9e8da92442ac591918ad780d09be99","ssdeep":"12288:gxVaHNCcwhn15nelKo5t40NYKlzoqskxA:egwr5nmKo520NYizQkxA","tlshash":"0ca4235fe1b40c6983ec59804ef4f129a345840bf8a84fc93bd44a9774aa51b9d9f33e","first_seen":"2023-05-07T21:16:42Z","last_seen":"2026-02-12T03:18:50.572414Z","times_seen":20,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBMi9UQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--d1c15f21254091f22fe35b868d58d13d71473072/entry-stopwait.svg","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBMi9UQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--d1c15f21254091f22fe35b868d58d13d71473072/entry-stopwait.svg HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-disposition: inline; filename=\"entry-stopwait.svg\"; filename*=UTF-8''entry-stopwait.svg\r\ncontent-security-policy: block-all-mixed-content\r\netag: W/\"5cec048293335012ad99e881394a98c5\"\r\nlast-modified: Tue, 14 May 2024 10:30:24 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 1882AD200934EAB9\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 1\r\nexpires: Sat, 20 Dec 2025 20:34:53 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jMi3DpHYpYZQ8Aaz%2FQv8bqZBRe4QwlwLYUPBFzBcc%2BaZ%2F18sPCg4nROvqQIPL%2FcbWOpXB%2BeosGLJDN9J7d%2B%2BXYiPyBquaAGa7w8H7c%2FUCjxezawPwAhAxJQF7MXnB3DlZ%2FY9k2Hw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b11946a4dba712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1051,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5cec048293335012ad99e881394a98c5","sha1":"7a9e20a2a6839ad5f35da8efd3ab48b44615f99e","sha256":"d6480829fa4471f002bac8ec94249a871b367c3d6b9480a7af8e73367f0735a0","sha512":"31fd8fc8383d7013ed08bf793ab81454e70cf108aea472f2c10af10d08aca3a627cadde89fc63441d7b757f2a4f7dadb9d72b79e90b2f3124fa70394c1394a56","ssdeep":"","tlshash":"3a1112e0fad972c1e45a57bcd600b499399510fdaf38c7ac1281dc2991fb05ec8d9855","first_seen":"2025-07-13T11:27:36.283179Z","last_seen":"2026-01-13T08:41:15.460504Z","times_seen":13,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/images/diamond.0f27c73d..png","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /images/diamond.0f27c73d..png HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/css/main.a6455864.css\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 5806\r\ncf-ray: 9b1194711c04712e-OSL\r\naccess-control-allow-credentials: true\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origSize=6213\r\netag: \"694539ae-1845\"\r\nlast-modified: Fri, 19 Dec 2025 11:40:30 GMT\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:54 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=sohAE0KzLYU5QTmydYUWcQllZRSDEfK%2Fqs%2BSgT71cdtRTHPkXWWA1fxaUXHfaRm%2BV8NwB4q4en1wgZGGY1Fbm6u%2Bdcc04PCKGA1g8bfAPumz3lbhLwdiZ%2FPIn%2FmNfi9%2FJvAtqHes\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5806,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 48, 8-bit/color RGBA, non-interlaced","md5":"4098b14df855b71754fc024a02ab66d9","sha1":"2e4c4573d68550a4b49fd18f0331acf2f9178e54","sha256":"523e461778c45088d4872ce2edc6a2acfee7e7efbe7ae94fde20fad4679779cf","sha512":"75e4c79a09f14fbc343db445f9828407dca1ec45d9fa1600dcb6bd1f236f8cac88878385bead4af7647d27b5a66fe668ae91bb8c3419fc7e5fa1cdcc9aabf3e6","ssdeep":"96:h/4RowL8f5vTxETBAo7i6vzD2zfqggrZl/bqtBQIGRcgI22dWzj5:92F45vTxETWFTL3grvE9gF6s5","tlshash":"d3c18dd3c3edbde9141f9df04ec16b8e0dd1d68a7f80618aaf2a0893bf9d9c42051259","first_seen":"2025-12-06T13:04:27.27687Z","last_seen":"2026-02-13T09:50:47.216802Z","times_seen":8,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/wto.js?v=","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /wto.js?v= HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9b1194540f81712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-31e\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:50 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rt9Mxq144cWzvZcRgmxPZcfO0w7IUkZi1YC9FfB%2FIgpWxRlLf%2B0a%2FEjgxKhqibglo%2B3c%2FcgAIAnya6BHUc603Wv%2BQhE60PVz3jViyExPUO%2FOZnI6isQ0wmkXgFrVrPb3vkbuWT28\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":798,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (798), with no line terminators","md5":"1e637fced898ec65adee45616107c97b","sha1":"eea31b97f0ebec3b33fcd3703f981fbfb5ac362d","sha256":"630ae597b3005f7a041a474621ed3a4ceaa0b75e146b7cd929f0adf4faacdaa6","sha512":"62d5acc5bdd93d4de9cb1a6a6e3b72aef20bba9a3f0f7e67c01003a5ad1fc3767229edcea95dfe2808d79b29e722d28faacd4ed61e9e63a4ab0993ee6dbc6f82","ssdeep":"","tlshash":"5d01d0a675a9d432168c0e5a62b7e7bd3cf120165a43800012ceee7ba679dcb6093cc9","first_seen":"2025-11-30T11:50:30.624339Z","last_seen":"2026-02-12T03:18:50.685232Z","times_seen":12,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/api/restrictions?resource[]=currency\u0026resource[]=auth","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /api/restrictions?resource[]=currency\u0026resource[]=auth HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.s.v1+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Display-Mode: browser\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/vnd.s.v1+json; charset=utf-8\r\ncontent-length: 125\r\ncf-ray: 9b11945e0a5a712e-OSL\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nx-s-media-type: s.v1\r\netag: W/\"c68c129f1aab52f8ee1ceb725376dc43\"\r\ncache-control: max-age=0, private, must-revalidate\r\nset-cookie: referral_params=eJwrSi3OLy1KTo2OtU0uLSpKzUuuVCtCiCWWlmQAAP5qDf4%3D; domain=luckydreams4.com; path=/; expires=Tue, 20 Jan 2026 19:34:51 GMT; SameSite=None; Secure\nlocale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; domain=luckydreams4.com; path=/; SameSite=None; Secure\r\nvary: Origin\r\nx-request-id: 9b11945e0a5a712e-FRA\r\nx-runtime: 0.008403\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vVojUXxJhqlfuZuLqEFvbZd9%2FIJAnEuqw7spDWGhWARveGTbJDna9mA1ygvyESHSf64fBfGaI7tmnWOLxurI7CmenW3Fqkh7evUuriqOgMB6e7ZfCmDG2bJ06TlPL31hMHYsHClK\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125,"size_decoded":0,"mime_type":"application/vnd.s.v1+json; charset=utf-8","magic":"JSON text data","md5":"6b9ce9bc8883254008584159851db1e5","sha1":"32c87dd36b078dc9c4f1c41d2b10b921c6c9a7a4","sha256":"c68c129f1aab52f8ee1ceb725376dc434a45139e78cac2f393172afa989a1aed","sha512":"aa4d403d7658f3d310f87df94f02f784c2a129802287f099854aae9b472ecc6a5e9354a185678592c3cac97a27cd870ae13793cb6a62166388c9d1385f0b886c","ssdeep":"","tlshash":"09b09b05635c147ce7f7ab05a4564f8c06211740d1e149478f6d51b512d2178804f45f","first_seen":"2025-07-13T11:27:36.281261Z","last_seen":"2026-02-12T03:18:50.674273Z","times_seen":16,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBOXNBQ2c9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--26d1268db93ce418888f16220e99733df0d79cd2/Hacksaw.webp","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBOXNBQ2c9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--26d1268db93ce418888f16220e99733df0d79cd2/Hacksaw.webp HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27580\r\ncf-ray: 9b11946c5f73712e-OSL\r\ncontent-disposition: attachment; filename=\"Hacksaw.webp\"; filename*=UTF-8''Hacksaw.webp\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"c020584c925b64a7b10d8a114c946f10\"\r\nlast-modified: Thu, 22 May 2025 04:42:09 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC25C3B69E8\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:54 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Baa%2FRbBcav7%2BQN7qjS8GuvLAuZfU8keUzdTKeZVQR7Yl2oduzSMTA1lOflts37KyHwzaWdrgMByrVTHU29NsTYZUwIC3lTBQ2oduFv1Vc4saWg4VgKkg2ro17vFI78ZO1q%2B0lkzs\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":27580,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c020584c925b64a7b10d8a114c946f10","sha1":"b3fc3bbed26600035cc407e297f4442e4d3e1ae3","sha256":"78e00908eb9c49b5336004aeec5dbd79f356d972ea75f6d17caa66c77549275c","sha512":"ac2fbf464ea600b627adf1bf08f3abe64397f9467f563b81087102ff235960386dad78b37a1479b747c185610fdee46ea30481eed4bb54a6fd6b1dc2f6cadf17","ssdeep":"768:OvGIay1JUzJ1USxltc54NPNgA6OTBP4o7KL1t8i53yTgcq9DB0bY3:OvGpyAzLfA58iA6OT+o7An8i53Ugcq9H","tlshash":"9dc2e16274fb0ceb470acd7e4e04671fc675e152b2a629448bca067701ae2e4865d2ef","first_seen":"2025-07-13T11:27:36.304763Z","last_seen":"2026-02-12T03:18:50.671043Z","times_seen":16,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/i/s3/pragmaticexternal/FortuneRoulette.webp","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:55.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/i/s3/pragmaticexternal/FortuneRoulette.webp HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28142\r\ncf-ray: 9b1194726dedb4f1-OSL\r\nlast-modified: Wed, 08 Jan 2025 12:00:05 GMT\r\netag: \"677e68c5-6dee\"\r\nexpires: Sun, 21 Dec 2025 19:34:55 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nage: 11054\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28142,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 380x380, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8a386b50e980748b02f459b275cffbdb","sha1":"54900e8bf128aa96efae8dc1be0452da97d9704c","sha256":"5e586896da7e0a6c9ccbb519fe399d8454a9cfe0a321fc08ab926d00f6c938c9","sha512":"5f618ea18804c7895193e37a39c89e4376a042f5c67bdc4aef1cfa172fa19954211d9c396257dcd61d9cfba0613e6512c39c1c52eadea82c2ad7b6d08d7383f3","ssdeep":"768:1Pl8716TWRzwG8AUjjceZjBHNmkQO1LVB:NlGvRsb/ceZjBHwkQOR","tlshash":"d1c2e18a2e334f06da03ed48a51e98c85992dc6c42dd568a8c405ed73593c7ea2ccfb9","first_seen":"2025-09-17T05:12:06.22862Z","last_seen":"2026-02-12T03:18:50.714479Z","times_seen":12,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/i/s3/beterlive/GravityBlackjack.webp","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:55.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/i/s3/beterlive/GravityBlackjack.webp HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26896\r\ncf-ray: 9b1194726df6b4f1-OSL\r\nlast-modified: Fri, 13 Sep 2024 10:50:05 GMT\r\netag: \"66e418dd-6910\"\r\nexpires: Sun, 21 Dec 2025 19:34:55 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 7517\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26896,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 380x380, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"93728b6ccafad3c95810d03c19cfddaa","sha1":"301bac0000852064e4427829a5d18ab326572c7e","sha256":"212e082d3fc047100beb6099c40628873acfd704552333e0d69b61fc8f2603a2","sha512":"da743be6f6a233d9fb2a6a1962ac948cc8d54210f164c0bab25d218c497b3ae9e76ed9e3194bb9471d606a5f70ce49946a995f891683b3cd0026ddc5ad5e540e","ssdeep":"768:k6Gq7SJWKojGbh0aISpE5YAaxB3ZZZ/37rpc:k6Gquo4pE5YJP/37rpc","tlshash":"2dc2e1b04c66b113a0252efd62473b1bc756e62e9892ab38e464e4d75131837f898f53","first_seen":"2024-10-04T11:16:28.632261Z","last_seen":"2026-01-13T08:41:15.453245Z","times_seen":21,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/ping","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"52.55.140.37","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:55.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/ping HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 574\r\nOrigin: https://www.luckydreams4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":574,"data":"app_id=x0neyd87\u0026v=3\u0026g=5839509c7ebc3d18eebb2635b5383d33bd89d98f\u0026s=4e115b73-1278-4d31-b951-eb02cf8392c9\u0026r=\u0026platform=web\u0026installation_type=js-snippet\u0026installation_version=undefined\u0026Idempotency-Key=dfb3559b121750f1\u0026internal=%7B%22marketo_tracking_cookie%22%3Anull%2C%22hubspot_tracking_cookie%22%3Anull%7D\u0026is_intersection_booted=false\u0026page_title=Online%20Casino%20Real%20Money.%20Play%20Best%20Online%20Casino%20Free%20%7C%20Lucky%20Dreams\u0026user_active_company_id=undefined\u0026user_data=%7B%7D\u0026source=apiBoot\u0026sampling=false\u0026referer=https%3A%2F%2Fwww.luckydreams4.com%2Fen-CA%2Fentry"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\nvary: Accept,Accept-Encoding\r\nx-intercom-version: f200ec98c04843f7a1afb825d6cc67fcfbca1006\r\naccess-control-expose-headers: x-request-id, x-runtime\r\ncontent-encoding: gzip\r\nx-request-id: 0026enanq75uu3e3scb0\r\netag: W/\"4547f5c6ab3189dcaee37bbc1769a7ec\"\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://www.luckydreams4.com\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.228047\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-0523376fccd5816a1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5840,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5261988573e8fb64219d45e196134b58","sha1":"1b2ddb429541b9e8e4980ad374ed852e219cb96f","sha256":"4547f5c6ab3189dcaee37bbc1769a7ec222b893dd68ec366a20546d4ae16dc94","sha512":"a2114f6dd0ba0db09e146efd36e4b79c13a6a080eadd48c856ac092e54f3ab0e2950275b872ceef046871a99afd20409c49f6ee17159a2499dc1e52009c0fab5","ssdeep":"96:irjwzOpNasD2cx2WkHAURNPjzK6MlzJjGMliBAO/5KuwhPD1O6tLCFt0W:irjwzOpIQ2ngtJ1O4CtN","tlshash":"76c1978cc8581c7e628786dad759be06077c81a7b2946dc8f97ccb2c32df2995277207","first_seen":"2025-12-20T19:35:41.891062Z","last_seen":"2025-12-20T19:35:41.891062Z","times_seen":1,"resource_available":false,"data":null}},"time_used":720,"timings":{"blocked":198,"dns":3,"connect":93,"send":0,"wait":324,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.webtrends-optimize.com/acs/accounts/8dfa23d8-4727-465f-ad65-d6a5cdf8784f/js/wt.js","fqdn":"c.webtrends-optimize.com","domain":"webtrends-optimize.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.webtrends-optimize.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 27 Feb 2025 11:12:15 GMT","end":"Sun, 29 Mar 2026 16:26:35 GMT"},"fingerprint":{"sha1":"01:10:A3:01:70:40:A9:D8:61:1E:E0:15:C9:05:FB:21:F5:69:1A:D0","sha256":"8E:36:F6:A7:EA:52:8B:C5:2E:0C:60:38:5F:0D:12:85:95:19:73:F0:79:6F:0C:2B:23:A9:AA:44:9D:24:B8:F5"}}},"request":{"raw":"GET /acs/accounts/8dfa23d8-4727-465f-ad65-d6a5cdf8784f/js/wt.js HTTP/1.1\r\nHost: c.webtrends-optimize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 19238\r\nlast-modified: Wed, 18 Jun 2025 15:42:51 GMT\r\netag: \"12c24-637da7b5323b1-gzip\"\r\ncache-control: max-age=86400\r\nexpires: Sun, 21 Dec 2025 12:57:43 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-azure-ref: 20251220T193450Z-17f644c5599znfvnhC1SVG1k2400000016d0000000007zr0\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}],"data":{"size":76836,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (639)","md5":"759d42b31f700b6c7a0b414bf745034f","sha1":"37069df8aecd82d0029bb2e633953e6d188dcc14","sha256":"a84d21408b69e9a525caede88e93aa6285d9fb861896a85cd5cd1031cdd1073b","sha512":"9593e25867942259ef6c61e7bde89aa33ee89447057be4820b8745df57c81a249190ea3c245cb7f256185a151cd1569d4d3e1fb205aa309ba9b4deed95adc59f","ssdeep":"1536:Wb1m+3Df7kEOq1Alx5rUCnW/oaNTG/zJF/dSU/y3oWokRwBMbHfn:WpQEO7xUYGNTG/zVyoDon","tlshash":"fc73f99af5f1513a92d576e0a12f13aa7f728687254cc044f06dffe815bcd060227eba","first_seen":"2025-07-13T11:27:36.276897Z","last_seen":"2026-02-12T03:18:50.557175Z","times_seen":15,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":1,"connect":9,"send":0,"wait":18,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/api/current_ip","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /api/current_ip HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.s.v1+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Display-Mode: browser\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/json\r\ncf-ray: 9b11945e0a52712e-OSL\r\nvary: Origin, accept-encoding\r\nx-request-id: 9b11945e0a52712e-FRA\r\nx-runtime: 0.000479\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=P325f8u4KU4r%2BRLySDop5j%2FeQ4kC8a4ndMjKpNFIMciwd75AAfDsksCO0nX80ztDHiEd%2FnCee6Yn4H3wdDFX7mXwkXKqn2k7vwv%2Fc8FvcpWbUDIu7A2q8wrAPpF4U1RvccM5yica\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"604af55874a15e68be100127d87ff709","sha1":"89d74f22fd2bfcb665642348dcd6596a060ffe98","sha256":"89ada8e54b02b913eb44cd29a65adf905661e9945d0d67563166735f8c346684","sha512":"7181eb95fd7c954373ba62b842f9125386bac271c353b146631678cb80b79174945bcb25a14d45d18d73019ace5120c99a3d99deb4efc4885d7ba2e5ab33eeda","ssdeep":"","tlshash":"1da0122820db4e74c971810d833b121241bd8005d15b5444cac41b21c30036c0100125","first_seen":"2024-10-23T02:06:34.708961Z","last_seen":"2026-04-04T10:02:07.96261Z","times_seen":968,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/apple-touch-icon.png","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 2586\r\ncf-ray: 9b119467ab3e712e-OSL\r\naccess-control-allow-credentials: true\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: origSize=6022\r\netag: \"694539af-1786\"\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:53 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=U1PVuElYVIdhfyeGaMeVdNHoVxzn9YRAKbLVt3KZWxmIHz%2B1aEU3MsVRnwWdhSuLa7Y29kV%2BW7Mo88ABA6fNKTIGtFasfeKevMS5K0NNhv1Oxf1DN6tbsoHXM69kZaR%2FCblFAXV8\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2586,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"db46a9102a5b5a4c702f2160350b8fa8","sha1":"4170008a00fb42022487f962e38247a674d83b02","sha256":"3672915fae31f5fdc88dcdb4c245fef4ca60108c2394d2d0c5231ed0a4880e35","sha512":"d22834befe6e6e633622448a1a10752b8cef4d66c0d908ebbc39cf26a43e75017f96081ea9631d310b10463a4cf5de9b9e76d4f355228b76c8fea222b9cbd79d","ssdeep":"","tlshash":"21514a5234495cc4e29caa73fe8791250f1e7b067204b62cec5c706e0a9b8ab3c97d1a","first_seen":"2025-02-22T05:44:22.345323Z","last_seen":"2026-02-12T03:18:50.601379Z","times_seen":17,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBejdiQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--b49e27a76cda0195b22a25aa40a2919102e83543/interac5.svg","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBejdiQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--b49e27a76cda0195b22a25aa40a2919102e83543/interac5.svg HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-disposition: inline; filename=\"interac5.svg\"; filename*=UTF-8''interac5.svg\r\ncontent-security-policy: block-all-mixed-content\r\netag: W/\"270cfe32c09f8230d8379528fd93c86b\"\r\nlast-modified: Tue, 14 May 2024 10:34:09 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC6B0342C30\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 1\r\nexpires: Sat, 20 Dec 2025 20:34:53 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=K3pPF7lgvpMPK6m8HlieFBOJeCs7POl%2BiXYyLZdIB4UdOp4hEdZh6fL7kXAPgVGhr7x%2BOzaRhUI4uOBkzvCQwr6itVbYKqHsSsyzwoi6kCYc9ackC9cv6elTLFDyLKqEyMWkYi4M\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b11946a4dc6712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13714,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"270cfe32c09f8230d8379528fd93c86b","sha1":"4defd8acfb76c1ae7a91ab1329a8b3fab9017852","sha256":"350c00e2fbfa67b0ef28226f5cfc313dd4cc9d5a8f61498f8d5a8ec3069446df","sha512":"c74f2ad05f6f1192d307c48d887b88b5f2ad4261a982dbd46c70691a0b33ed38464673fbfbdbbbddef6a69c0a3c957f2be2457624ab4b1f67ff6413086eff834","ssdeep":"384:34gobbMPBTPtHRXGb6iQGA1mbmCA0H7/bY:NiIJTLAWrsh7jY","tlshash":"c55255e6b3d4b2f0e106e7e0c7266876ba6b30fe3666cb5d4798add0b51116d84c9cc0","first_seen":"2024-08-19T22:13:31.198671Z","last_seen":"2026-01-13T08:41:15.458546Z","times_seen":14,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/payments/color/bitcoin_coinspaid_w.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/payments/color/bitcoin_coinspaid_w.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 21 Jun 2024 13:05:05 GMT\r\netag: W/\"66757a81-17b8\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 7806\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a6d61b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6072,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47c58d766ff3d2a7237313e8abe29ca0","sha1":"217579a9532e39c3631a7b613c78f3d6d4f3673e","sha256":"709ee18f71f1312463f9baab33aff1197a3434e0c0f9dd7b62c3bce52b72bd5f","sha512":"ad6806d9d408f7599dd60d74d3f2201b5f2d00f85d4662675c3c10e7798a145078cd4b52f305df6bc3a15edcf851b8b100d28d22d2858c2bc9cd7df1eb20b3eb","ssdeep":"96:WDJrUeoNqIwNK19cssIaIfLEK9oQxr3o00iYZ5OKTKDyjdylsmv:W71FssO9oQxzH0B6uFjdGv","tlshash":"d2c183c993a8e6e0f149f3f8c216d4b13a7724fd3a67cd44c7656d46b61202d898dcd2","first_seen":"2025-07-13T11:27:36.324003Z","last_seen":"2026-02-12T03:18:50.679925Z","times_seen":16,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/i/s3/pragmaticexternal/MegaRoulette3000.webp","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:55.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/i/s3/pragmaticexternal/MegaRoulette3000.webp HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28932\r\ncf-ray: 9b1194727dfeb4f1-OSL\r\nlast-modified: Tue, 28 Oct 2025 15:00:09 GMT\r\netag: \"6900da79-7104\"\r\nexpires: Sun, 21 Dec 2025 19:34:55 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 81654\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28932,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 380x380, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"253c2e7d2b9922796acef88e13a97718","sha1":"c8cb36b232a1af04d15e59709b6354e64cae6e8b","sha256":"44800356969506fac3b44024ecc430074d70008af8f6dfb4415ce93f022956a7","sha512":"5c401e21c7a56320364b7e62c215c81d7a0446ff0bfc95f061f79482c4180595e5f064859c97598aea935c99a648ed63e86ffbb51dbcd8f9c4cfeba74388f674","ssdeep":"768:bJVbSdEjbnAWi2l3ht9XRhg0MN6tkIDxtlZ1IT0EJ:dFNAFmh3XRhg0ia3lkT0C","tlshash":"26d2e0710d8afb7fdb1e06a467e33636440b4ab2380aa02695c67352692d864dde37e1","first_seen":"2025-11-11T11:18:53.861009Z","last_seen":"2026-03-28T03:37:04.188954Z","times_seen":12,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/locales/en.json?hash=1354493d4cb2a39b4f4f7be4bfe92609","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /locales/en.json?hash=1354493d4cb2a39b4f4f7be4bfe92609 HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/json\r\ncf-ray: 9b11945dfa40712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-1ae42\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hNoBA1ME5RCBD987eMrl2WIjlR%2BkAgIN1b6LQjnb7qCSutytMQVLxAMMC5JFkHOfpK8hIUPB1RznA6dmuYdOqBv1WkOw3kY60W1RoBk5CVQi2FUTgB1xbOqhUZSk9aIxTDjnQ%2FXt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110146,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1354493d4cb2a39b4f4f7be4bfe92609","sha1":"86ddffa2dfbdf5a2a8b6b17a791e845b6744438b","sha256":"b9e147f5c3262170c5cee9ccce9b58ed516a7ed00ab3f97e50e934f94bf56e1c","sha512":"15804317edbd96891c98240f758da30676c749149b61b9a3df65f37b1b32f1db28ee4e7b6be0db43db464e2ccede3569694fadb91cc7180e014c793597805e7f","ssdeep":"1536:6TMshMiqEk0mMKS/IDCS+uyfiRgl2EnFoaDyOHa2f:6TMkMJFPxelr","tlshash":"f2b3422dc6a44ee341d662712cae29837664029b0f143c297fec814d1f4e92f55fbbad","first_seen":"2025-12-20T19:35:38.582915Z","last_seen":"2025-12-20T19:35:41.899349Z","times_seen":3,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/fonts/hero-new-600.f11dde99..woff2","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /fonts/hero-new-600.f11dde99..woff2 HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/css/main.a6455864.css\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 33084\r\ncf-ray: 9b11945e2a73712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:30 GMT\r\netag: \"694539ae-813c\"\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 1\r\nexpires: Sat, 20 Dec 2025 20:34:51 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Yip4uvD22FvDyWTRUt3Ur0J%2Bd0vECWBvVetOT66Z7jneFZ%2BYDCi5NhQsShtKNA0Xclq1TMiPt4z5emN284T8EX8COCU1m7RZdknumKJDBKC2qi3Ce1LfRMo%2FkExYtB0pKlBrlSWm\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33084,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33084, version 1.0","md5":"ee35b121f9dc68b76062666d2300d85e","sha1":"2e1db1632891f078f33c4b0601a07477698c9428","sha256":"4f7d72e564e1ca1b6874df8c7824ca5e89ed85ed9ffe8fca211eee8ddc7320ff","sha512":"bc196d1a36069f14ed03e6a34332593990b77661ba5070175cd8c398cc68f5be25b7eefbb000cc4de4666d826e8e9d34ab148d2d310c1e569a5ebc98a82b0eed","ssdeep":"768:iOIIsGBkvMhVM/2KOU68Cv8NllI/VoqdkN4FnRCqG/TB5AA/Mz/:iuLVMuTUvQ8Nll2SqdY4SqGtNMr","tlshash":"0de2f14f8f957a93a878d0e85fdadb0441ecf62963877af39847811bf438896301f5a0","first_seen":"2023-04-06T21:35:49Z","last_seen":"2026-02-12T03:18:50.598387Z","times_seen":44,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBM0RUQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--06b69523736729cf044cb04da4a87d2bb0f7b94e/entry-support.svg","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBM0RUQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--06b69523736729cf044cb04da4a87d2bb0f7b94e/entry-support.svg HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-disposition: inline; filename=\"entry-support.svg\"; filename*=UTF-8''entry-support.svg\r\ncontent-security-policy: block-all-mixed-content\r\netag: W/\"b2434205f8bc21b5d32eb6392e4d9494\"\r\nlast-modified: Tue, 14 May 2024 10:30:25 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 1882AD200AC3ADAA\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 1\r\nexpires: Sat, 20 Dec 2025 20:34:53 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=C%2FiSnkJv8chcEcBK1OyGsFptc%2Btpn5Rmb%2BPOgCRXOak1OFPVcZ1uv7Oy9%2BTKFVhdiDvA%2Fpzw54x%2Bam0r2X14iHdymcQK9ROVV05B54r6DdhuG2sjx0okbNG9KBIPS4syuLK%2Fj57a\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b11946a3db3712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3271,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b2434205f8bc21b5d32eb6392e4d9494","sha1":"cfd01d82cb2f13cd494f00089570f3dcdf745874","sha256":"f981a3b1cf0b13a2142615cffface82a21ee3d6abdf62022b8f7fa865e30715b","sha512":"2ce252f5e685a11d555c8c408b01b419b879a502710398137adb1b3ab176dc958dbd5a9daf86f942077823d5040480d57793ad2057ebd6108642fa36a7b9e93b","ssdeep":"","tlshash":"296145e063a9a2d4e20bbbf4876378357a2330f67f57cee403d4da64aa5a00d925c4d1","first_seen":"2025-07-13T11:27:36.268846Z","last_seen":"2026-01-13T08:41:15.524914Z","times_seen":13,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBeWpoQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--f57dd12acf7e5cdd4c5d98f5d79c9f781df4f132/booming-64cccbfe00582.webp","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBeWpoQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--f57dd12acf7e5cdd4c5d98f5d79c9f781df4f132/booming-64cccbfe00582.webp HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10826\r\ncf-ray: 9b11946c7f9f712e-OSL\r\ncontent-disposition: attachment; filename=\"booming-64cccbfe00582.webp\"; filename*=UTF-8''booming-64cccbfe00582.webp\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"d6899a607edf4203b065d9ace76374db\"\r\nlast-modified: Tue, 14 May 2024 10:46:03 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC4B00499EC\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:54 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WfhlufJg1YF7mUEfZbUXExo6KE44uiN6rJ2pLPHyltsplUDTNk%2B4loZnv8RNaUKyW%2BR1tyfJX3B8MnJfFNlL1NzCySETTZuZpcXZPBdsz70vSdw%2FcRc2NHCXoYJnDVyFqrvqITG9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10826,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d6899a607edf4203b065d9ace76374db","sha1":"c9c9f25630ca3b6c2fbd6efc66603c3ec7537c3b","sha256":"1e9bc3d88a1c0b809066a4bafb082ab6eb713cfd0866488eaa359ebf132d8036","sha512":"f3db02b0a493b2e30b4f67a5c4a81b21d4678507394c71a29aa829688d749875e8873262932b42545a5867d35fd8d42fd93433c4d76da3f3afd1376d838486d4","ssdeep":"192:DQbkSU9zZovGPnFSgwqIfvviaC7RN+d43cJyBr98tHCxm//lXI7F+hH:DQeVEGPwgzIaa0RN+dDgBlc/lXrhH","tlshash":"2b22b0285bce7fcf481f515994b30b3e9298f9cb036e946b1382de07c69351d4065be8","first_seen":"2024-05-17T15:43:12Z","last_seen":"2026-01-13T08:41:15.535456Z","times_seen":17,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBNERpQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--e4605e8ae3206dd85ea4e179ad6b1e000a9a4f85/Group_82-min.webp","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBNERpQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--e4605e8ae3206dd85ea4e179ad6b1e000a9a4f85/Group_82-min.webp HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2596\r\ncf-ray: 9b11946c8fbe712e-OSL\r\ncontent-disposition: attachment; filename=\"Group_82-min.webp\"; filename*=UTF-8''Group_82-min.webp\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"8d6bb80c05f99287c1fae7274de52af5\"\r\nlast-modified: Tue, 14 May 2024 10:52:45 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC25C7EBB6B\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:54 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gANBq%2BRAC%2FI1KkuHaW4i9hHjzO8dH81ILxZlsNY3kv2JWGOYvs6Bmb%2BXhSPzRRhjezd3nFhiF4vpHjI63hFfIKS4yYW%2FIc0%2F81pQoxG9FSt0Qv3Cwk7zmFv%2B04t%2Bggw0idvChSJy\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2596,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8d6bb80c05f99287c1fae7274de52af5","sha1":"c9bcc9f84eba757b1e087f61790449ae025bed7e","sha256":"ee5ca385b98feb80b35264d4204af33f646ebe6cf91e729c2a17e434f25b665a","sha512":"9780c5c9f0bed804aa6bfe7b0374a6f1b077188614018d29e13b522c2debdc60ffbdc8cd860fc22e6b4f8347268f9c3f4b4f11032a1d0582ccb09f6e530192be","ssdeep":"","tlshash":"47516d63284b68fcaa441271df3d42c615824106679215910d741297db7e4f8a9fcc48","first_seen":"2025-02-22T05:44:22.370522Z","last_seen":"2026-02-12T03:18:50.645925Z","times_seen":17,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=G-Q18MHQV7P9\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:55.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/destination?id=G-Q18MHQV7P9\u0026cx=c\u0026gtm=4e5ca1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 20 Dec 2025 19:34:55 GMT\r\nexpires: Sat, 20 Dec 2025 19:34:55 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 139279\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":420167,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9964)","md5":"5689936028bea263b4b2c91de02837f3","sha1":"77acc48f5d19432475b1a06ccded21277eb7b384","sha256":"8daefc643a85b9249af3a1bf4cd60834ce00b49af524e7f385d3565b96de349b","sha512":"f053784d3bfdb71295b87600a66d8da70c2164e04019d8024d75d223a99ce86a602d2a170b612dcc1f3f7d9846b629aa30fef4494d625d769bedaa923abb0b53","ssdeep":"6144:sCIe7ma2bulKY/1u99xHDmHYmyBFzvnsi1nWoNPad4FpCpQi:0C8bu7/1mbrns6WbMpQ","tlshash":"4e94188e73ca74269396e478503f018ba97b29e2b45cc896f1c9cce02d7459a0277f7d","first_seen":"2025-12-20T19:35:38.595407Z","last_seen":"2025-12-20T19:35:41.904236Z","times_seen":2,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/entry","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-20T19:34:49.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /entry HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: text/html\r\ncf-ray: 9b11945279f4b518-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:49:49 GMT\r\netag: W/\"69453bdd-128a\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; path=/; expires=Sat, 20-Dec-25 20:04:50 GMT; domain=.www.luckydreams4.com; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3c2a1w4WKI%2FeEM6VxVGZu16usPdX23zZTri9iutjJYw31%2BuY9pVrd9SI9T0nRbZZuAAeDtiig7MfIXz5lckGcj3C6QTQwKgFr%2BHdkji7rFawpbsi2VGdgxU2dj%2FNOrOVltOBiJdu\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4746,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4746), with no line terminators","md5":"32ecde1b48cc2cff64a0a60cc8aa5a60","sha1":"b1019e9e9b0177f82f4d3b9529deb428f0d0a69e","sha256":"0c49d2f5716d7d5951a7147e75443554d7ac3fcd8e43f2b3bd3df948cdcd0e12","sha512":"9a63e70a0790f035aeb1ed0873ad178f7a5a58199794aa02abd20b6a47320d955a9b85ec8f92e5455bfe312118aef89f2e40680ded314a88a4913ab24a1a39c1","ssdeep":"96:k2jA89PoXbzLPlK2QWQzNtZIshlNtZIskyvGk+eU5UwknrlsNJuxxp:k4AUuQDKe5Kdhk+e6y6kxp","tlshash":"00a19786ec00805a95330f2795eef109b6785f5fcd61484673f5316e46e6bc502d2b1f","first_seen":"2025-12-20T19:35:38.675193Z","last_seen":"2025-12-20T19:35:41.905568Z","times_seen":3,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":26,"dns":0,"connect":1,"send":0,"wait":55,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/datadog_browser-rum-slim.7cfae171.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /js/datadog_browser-rum-slim.7cfae171.js HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9b11945aaf6b712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-242\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:51 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=wMJCVpHPyQgi6H56aqI3Kc3eik%2B7sQJg0F5RPPVtiSZtPydIRKDeMj1NNOvN6oNimTtL2ZgOtsh6eH9i8%2BmjqYfEuEfflxyrNHe8WT0HDgSNBzBkWzgtnE34vXhEnGzk73AjcQFH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":578,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (509)","md5":"3fd716702b8441c1380c7cadc8732dc7","sha1":"5441bb8f500ac14651a581ce323a37ba589e32ca","sha256":"074e011659abb8af56188e474a80a558c3782d8350de45d16020db43099199d2","sha512":"75b96a1e9e43089135798fc211761b89733f6c15d92e9c44a9d4ae6bdcec0527e9044425490e482acc7fc440ac2408e9cff0cfe874d9801b0377a69e3112e6e8","ssdeep":"","tlshash":"e8f026e0b85df5befe7e64c005ba4289c77890d0be1d40da6dc28de62a794197051adc","first_seen":"2025-08-08T17:06:48.088486Z","last_seen":"2026-04-04T13:28:46.57536Z","times_seen":514,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/api/games/providers?device=desktop","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /api/games/providers?device=desktop HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.s.v1+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Display-Mode: browser\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/vnd.s.v1+json; charset=utf-8\r\ncontent-length: 9011\r\ncf-ray: 9b11945dfa47712e-OSL\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nx-s-media-type: s.v1\r\netag: W/\"974f5af30e6e29f092e1de7d9aee86f7\"\r\ncache-control: max-age=0, private, must-revalidate\r\nset-cookie: referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; domain=luckydreams4.com; path=/; expires=Tue, 20 Jan 2026 19:34:51 GMT; SameSite=None; Secure\nlocale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; domain=luckydreams4.com; path=/; SameSite=None; Secure\r\nvary: Origin\r\nx-request-id: 9b11945dfa47712e-FRA\r\nx-runtime: 0.025358\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tON5p%2BQ2YXg97Brf4DHMDMISa0TFXf6qW%2FB0gsQv4V97n%2FhagFJtLcEK7I%2BNjKbSwSBMjrVqhFLMmIhJP86GcuVGUX6K9O3iL2WgHrfO4Q5fmbsMho9d%2B8j%2BZ4EHajRj0byU17sJ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9011,"size_decoded":0,"mime_type":"application/vnd.s.v1+json; charset=utf-8","magic":"JSON text data","md5":"31f8bb3434d9425c480b784e2f145835","sha1":"1bcf22dbb60fadcf4ed39d44d0e606190b2b4668","sha256":"974f5af30e6e29f092e1de7d9aee86f7a9964b30bec8c7259b0a53dae310d3f1","sha512":"c182f01acc8f9cc59226b242aa7464ef1e96ddcaa426565345e0c54848d24757f14ad6aeb496451b2d18dc2717da8e8356d5808f1181041e6383c952f856cc67","ssdeep":"96:jxDnkClXh+J088u9qXWCOprk20CVDYo+3yO7Was1Up/zNkYG3dOjzE+CZa3e2607:jOmXEJyFXOpo20CVcOQyYG2z93sS3/","tlshash":"ac023216642c1d9eebfe4eb6b8d779fa68ed060bb0d10a2d19c1c81b585cfc89011f27","first_seen":"2025-12-20T19:35:38.642029Z","last_seen":"2025-12-20T19:35:41.908045Z","times_seen":3,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/payments/color/devcode-instadebit.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/payments/color/devcode-instadebit.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 21 Jun 2024 13:05:05 GMT\r\netag: W/\"66757a81-1355\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 14492\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a8d8fb4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4949,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b5170a0f5294d4d4cd61849c51475fb8","sha1":"a1bf493865885e06c80d0752cf2e62c9a3fafe31","sha256":"3428479c735a53cc35a0aa752f6388c377528ce7bba52d70a6fbbef2c1f5b529","sha512":"2f93ddaad00b315f18165248ea2ad1e3ab41d89b12b8cc40f2735e4ce8bce9665c807126d2212b21b330fdf6eee3ba445ba1bbbc2a932af30d3c787da3d5dcb0","ssdeep":"96:gY7uGe+tmwv7RzqyWwgY49iF1uLO/uYJmkQbz:gOzbtfv7AwP49EuLO/xmXbz","tlshash":"76a111d073dce2e46606a3e84a1ad835766360fea756cacdcf907e91fb8042c0d99cd4","first_seen":"2025-07-13T11:27:36.347694Z","last_seen":"2026-02-12T03:18:50.703797Z","times_seen":16,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBN3ovQ1E9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--c6c8aed80af3fddf7010deab347edd351d554463/Bgaming.webp","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBN3ovQ1E9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--c6c8aed80af3fddf7010deab347edd351d554463/Bgaming.webp HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59532\r\ncf-ray: 9b11946c3f5e712e-OSL\r\ncontent-disposition: attachment; filename=\"Bgaming.webp\"; filename*=UTF-8''Bgaming.webp\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"a0966ff802e5489d85355eac1368e06b\"\r\nlast-modified: Wed, 21 May 2025 11:38:01 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC258A582E9\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:54 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=K41tBSyw3MJBKHSPDNfX5prQ1ca16rIE5SvPSHdtxYNXsz7W42PFUU58tufnOPLzQd7nrXRa8Sm9bxgAbF6s037t4OcIt69xLnrezTQLfErwSKNb58bXbLEGtlMpjQTPlgJgsIyx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59532,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a0966ff802e5489d85355eac1368e06b","sha1":"12bb01a97d3c717e74316e63529b8d15d67ec20b","sha256":"c0f88b5b1dce9ce2f6c2a2210c227bbf3d88c8564a56d24fe38dccdc0dcd2cb4","sha512":"9d73d61ac51c5e25d0cbcabef8f7a40a2eeead1a23e454ea5db2c0b5dbac76e94983e864c48f111daa9895c3a383abd89bd11b156323a058c5b721dcc9bdbdbc","ssdeep":"1536:dvGpyAzLfA58iA6OT95hDhN4jo1upxJg5bgh8OdoxI/uYBA:kfAeVDjl4E1utgGB6IZBA","tlshash":"be43f286b1e205befbdf8d2d4d50c781949dd9a7b1962e481a7f165e8637398c30e007","first_seen":"2025-07-13T11:27:36.349269Z","last_seen":"2026-02-12T03:18:50.561447Z","times_seen":16,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser-intake-datadoghq.eu/api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A6.6.2%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Aluckydreams.com%2Cversion%3A2.1.86-f54dbe17\u0026dd-api-key=pub6944d0b05408999e2a258fb6e57933fb\u0026dd-evp-origin-version=6.6.2\u0026dd-evp-origin=browser\u0026dd-request-id=8e21d54b-1e25-4489-8094-991350d02bf6\u0026batch_time=1766259296354","fqdn":"browser-intake-datadoghq.eu","domain":"browser-intake-datadoghq.eu","tld":"eu"},"ip":{"addr":"34.149.115.139","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:56.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.browser-intake-datadoghq.eu","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 25 May 2025 00:00:00 GMT","end":"Sat, 30 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"62:0A:8C:EB:5B:F0:38:A4:34:6C:43:65:FE:09:67:F7:83:AD:44:C5","sha256":"73:49:93:8C:8C:F9:73:3A:66:03:C0:4D:5A:08:45:09:83:4A:2D:76:73:88:8E:6D:CE:3A:2F:EF:6E:C1:86:09"}}},"request":{"raw":"POST /api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A6.6.2%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Aluckydreams.com%2Cversion%3A2.1.86-f54dbe17\u0026dd-api-key=pub6944d0b05408999e2a258fb6e57933fb\u0026dd-evp-origin-version=6.6.2\u0026dd-evp-origin=browser\u0026dd-request-id=8e21d54b-1e25-4489-8094-991350d02bf6\u0026batch_time=1766259296354 HTTP/1.1\r\nHost: browser-intake-datadoghq.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.luckydreams4.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 16361\r\nOrigin: https://www.luckydreams4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":16361,"data":"{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293772,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"9b806a16-1443-4f76-9ab8-4e14dc471f08\",\"type\":\"image\",\"duration\":106000000,\"url\":\"https://netcontent.cc/luckydreams/logos/providers/color/4theplayer.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293772,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"978b226e-c4bf-43c0-a3c8-fcdedbc465e0\",\"type\":\"image\",\"duration\":108000000,\"url\":\"https://netcontent.cc/luckydreams/logos/providers/color/7mojos.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294004,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"6b28f145-6145-4ae9-a127-4f13b98f472a\",\"type\":\"image\",\"duration\":17000000,\"url\":\"https://www.luckydreams4.com/images/flag.e8fcc3b6..svg\",\"protocol\":\"h3\",\"size\":306,\"encoded_body_size\":229,\"decoded_body_size\":306,\"transfer_size\":1028,\"download\":{\"duration\":1000000,\"start\":16000000},\"first_byte\":{\"duration\":12000000,\"start\":4000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294133,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"84b385b2-bd72-41f5-b007-dfc900757715\",\"type\":\"other\",\"duration\":93000000,\"url\":\"https://widget.intercom.io/widget/x0neyd87\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false,\"span_id\":\"1532655572008954269\",\"trace_id\":\"9709926298853411762\"},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294298,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"2cd6de71-187b-4fdd-9c31-349c379b83fd\",\"type\":\"xhr\",\"duration\":316000000,\"method\":\"POST\",\"status_code\":200,\"url\":\"https://www.luckydreams4.com/api/games_filter\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false,\"span_id\":\"135788207006025811\",\"trace_id\":\"15690197743321573281\"},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294300,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"ed92d541-4953-4c9c-b8e1-4dcb20cce3df\",\"type\":\"xhr\",\"duration\":474000000,\"method\":\"POST\",\"status_code\":200,\"url\":\"https://www.luckydreams4.com/api/games_filter\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":-1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294092,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"5caa2434-adbe-4433-b727-6c95fb3fb4b6\",\"type\":\"image\",\"duration\":31000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBekhoQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--014de2aadbf948c7eef31202a007bf9c92c07b01/pragmaticimg-64cccc173c2e4.webp\",\"protocol\":\"h3\",\"size\":11318,\"encoded_body_size\":11318,\"decoded_body_size\":11318,\"transfer_size\":12579,\"download\":{\"duration\":1000000,\"start\":30000000},\"first_byte\":{\"duration\":16000000,\"start\":14000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294093,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"07159933-9ce1-4dc5-a5c1-715fcde346da\",\"type\":\"image\",\"duration\":49000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBN2ovQ1E9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--3a8bad70b79ecf2b1ba4e1989995f233d57b3e02/GamesGlobal.webp\",\"protocol\":\"h3\",\"size\":52598,\"encoded_body_size\":52598,\"decoded_body_size\":52598,\"transfer_size\":53839,\"download\":{\"duration\":1000000,\"start\":48000000},\"first_byte\":{\"duration\":25000000,\"start\":23000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294094,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"7608e5f1-7adc-4536-ad88-580c0e089fe7\",\"type\":\"image\",\"duration\":50000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBN3ovQ1E9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--c6c8aed80af3fddf7010deab347edd351d554463/Bgaming.webp\",\"protocol\":\"h3\",\"size\":59532,\"encoded_body_size\":59532,\"decoded_body_size\":59532,\"transfer_size\":60749,\"download\":{\"duration\":2000000,\"start\":48000000},\"first_byte\":{\"duration\":24000000,\"start\":24000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":2,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294095,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"122ead42-640d-46db-b65c-86dc6d11ce4d\",\"type\":\"image\",\"duration\":53000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBN3YvQ1E9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--1136cadc06bceb14c6b83bc6885550241a4f7495/Octoplay.webp\",\"protocol\":\"h3\",\"size\":53454,\"encoded_body_size\":53454,\"decoded_body_size\":53454,\"transfer_size\":54681,\"download\":{\"duration\":1000000,\"start\":52000000},\"first_byte\":{\"duration\":21000000,\"start\":31000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294095,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"9063b071-aed9-482f-8aec-796acb3117da\",\"type\":\"image\",\"duration\":70000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBN3IvQ1E9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--2c451e6813fe6a941fa7d2b9b70ebe8f37ffb6ff/Novomatic.webp\",\"protocol\":\"h3\",\"size\":42636,\"encoded_body_size\":42636,\"decoded_body_size\":42636,\"transfer_size\":43859,\"download\":{\"duration\":1000000,\"start\":69000000},\"first_byte\":{\"duration\":16000000,\"start\":53000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294095,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"64ebffaf-e386-4cc9-ba44-2d374ad86881\",\"type\":\"image\",\"duration\":53000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBdzdoQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--30b7a97b5de1944cf3405692382e171d8af37e96/playtech-64cccc17218a0.webp\",\"protocol\":\"h3\",\"size\":8536,\"encoded_body_size\":8536,\"decoded_body_size\":8536,\"transfer_size\":9786,\"download\":{\"duration\":1000000,\"start\":52000000},\"first_byte\":{\"duration\":18000000,\"start\":34000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294095,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"514eec71-6c2d-4ce9-81ed-5e6559b7e721\",\"type\":\"image\",\"duration\":57000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBOXNBQ2c9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--26d1268db93ce418888f16220e99733df0d79cd2/Hacksaw.webp\",\"protocol\":\"h3\",\"size\":27580,\"encoded_body_size\":27580,\"decoded_body_size\":27580,\"transfer_size\":28803,\"download\":{\"duration\":1000000,\"start\":56000000},\"first_byte\":{\"duration\":15000000,\"start\":41000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259294096,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"54cb900f-ef97-445e-8b02-ed42c0410052\",\"type\":\"image\",\"duration\":74000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBLzNYQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--22f0a577e20a6e6b815b24b5ab0744268bf167b1/beterlive.webp\",\"protocol\":\"h3\",\"size\":47296,\"encoded_body_size\":47296,\"decoded_body_size\":47296,\"transfer_size\":48531,\"download\":{\"duration\":1000000,\"start\":73000000},\"first_byte\":{\"duration\":16000000,\"start\":57000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ncontent-type: application/json\r\ncontent-length: 53\r\ndd-request-id: 8e21d54b-1e25-4489-8094-991350d02bf6\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 20 Dec 2025 19:34:56 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5b24f7adf2737c4da6127e3405a52629","sha1":"b8a8f8e8e8bc41562631f73b55d8788664bfbde5","sha256":"97adea88147365f6aa8f22645b0657413d18a66b176aff4accd0b7e662562866","sha512":"33370b30dea5613a093bec8f0039c148f6b225ac8f8d41f626a646716cebcf05ac3e46a006dc856b2922ff9fa6f412344bb410e4aaabd0c6d874da03f5ca1025","ssdeep":"","tlshash":"66900241442c05f1d78001060e9719904187a215d80a319d4150624b436532b4a42850","first_seen":"2025-12-20T19:35:41.910679Z","last_seen":"2025-12-20T19:35:41.910679Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/images/entry/preview-bg-no-gradient.webp?hash=e24a32feb2a4f9735a8492bcbbb825ac","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:52.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /images/entry/preview-bg-no-gradient.webp?hash=e24a32feb2a4f9735a8492bcbbb825ac HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:52 GMT\r\ncontent-type: image/webp\r\ncontent-length: 452082\r\ncf-ray: 9b1194615d4e712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:30 GMT\r\netag: \"694539ae-6e5f2\"\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:52 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=9jTLz0Bd89fEDj5r4oBDWK7E73%2FOt9Lo2eHCEgmaklGWuBtqgf06Ehn61LzPGJKhrLtnh3NN8d2PdSsaTIPLV5h8GOxD7JqjdmoprOW9AffedmmOWRtRiNKxpMiYAsSINqVrHxvn\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":452082,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"33c6afa6fc67fabf17aae4094709eef2","sha1":"1d4edeef9478b3c13c62daede461f7cdc08fe947","sha256":"ec6c29613ea31eb42e64d0a99c962dbe7517678dd35fa374e2b38584c95575a2","sha512":"588ecfb114c74760ec488956531e9c3c139a8932c06ace2d59fcb402b1409d5f45b83d5d32207dc7f3114b2e053f33498f9e8da92442ac591918ad780d09be99","ssdeep":"12288:gxVaHNCcwhn15nelKo5t40NYKlzoqskxA:egwr5nmKo520NYizQkxA","tlshash":"0ca4235fe1b40c6983ec59804ef4f129a345840bf8a84fc93bd44a9774aa51b9d9f33e","first_seen":"2023-05-07T21:16:42Z","last_seen":"2026-02-12T03:18:50.572414Z","times_seen":20,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/api/games_filter","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"POST /api/games_filter HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.s.v2+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Display-Mode: browser\r\ntraceparent: 00-0000000000000000aa389b5215c6bd33-45e75463c3cb75a3-01\r\ntracestate: dd=s:1;o:rum\r\nx-datadog-origin: rum\r\nx-datadog-parent-id: 5037087495700575651\r\nx-datadog-sampling-priority: 1\r\nx-datadog-trace-id: 12265724361998515507\r\nContent-Length: 215\r\nOrigin: https://www.luckydreams4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":215,"data":"{\"device\":\"desktop\",\"page\":1,\"filter\":{\"categories\":{\"identifiers\":[\"games-entry\"],\"strategy\":\"OR\"},\"providers\":[]},\"sort\":{\"direction\":\"ASC\",\"type\":\"global\"},\"page_size\":15,\"without_territorial_restrictions\":false}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: application/vnd.s.v2+json; charset=utf-8\r\ncontent-length: 29579\r\ncf-ray: 9b1194667a24712e-OSL\r\naccess-control-allow-origin: https://www.luckydreams4.com\r\naccess-control-allow-methods: GET, HEAD, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\naccess-control-allow-credentials: true\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nx-s-media-type: s.v1\r\netag: W/\"c9abb0f9f48ceffba0c2710c7bf025e4\"\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: 1914d094-fb2e-4610-9e71-590342556703\r\nx-runtime: 0.023470\r\nvary: Accept, Origin\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AgT%2BDzWZ5wstjimXj9d0tFeFprSiSShS05B4wxssGE%2BxtKrZNHUtKcW6mV4THDygCQowrDGRKOtgc4O4cpVrZj8hkASXESB13zV%2FFOLzeAvUmF4Z%2Fe8dpXfDk2uevoFqRAHhEjDE\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29579,"size_decoded":0,"mime_type":"application/vnd.s.v2+json; charset=utf-8","magic":"JSON text data","md5":"c6fe2efa848b5eba39fce831985c30a4","sha1":"d571044fff61e8cae2d4e34272ff71d4200d2ffc","sha256":"c9abb0f9f48ceffba0c2710c7bf025e44459a01f46d2dcc170b41c33575e7bb7","sha512":"369cdbdb2e3c4a9390bbbd759c993944b6afb91c3d4958ad7d1f80ae19c5404f73008830072fca3f1204338e73b5b66bdab0bafbc5c803fe40a29f9ee6bcb605","ssdeep":"384:DqvX/euy86O1xyUQFTZ4FxiCLgX2NKGzfjLNfdp:QCMdKQ","tlshash":"92d27c47869f3aaddfd66bc65ca13ee113ed253b104a0c86c5914fd540c6bdc22a8b2f","first_seen":"2025-12-20T19:35:38.731451Z","last_seen":"2025-12-20T19:35:41.912745Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/providers/color/7mojos.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/providers/color/7mojos.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 09 Jul 2024 14:45:05 GMT\r\netag: W/\"668d4cf1-1c7d\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 14684\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946aadbdb4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7293,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d88941d02db835e1ba64cc934260f81","sha1":"1669467c2d4583ebefdc8f0af549a28e40b01876","sha256":"cb30e72d3d58362837bdb769416c5fc4a9d52cbd0152f43e8f40b95c9b719573","sha512":"64d17df58baa0bc1d0e26ff42024ab0c543679be57988e287629173a93e99ce90a287a39accfc39d4bf73b918c5808ab9738929fb102372acfc1ac7aacefb0b1","ssdeep":"192:2i8maiQVG7clVAXLgRWDmIj+1gbhK6x6Tjor:t8m9QY7clibgRWxk2","tlshash":"aee1a6a277b9a6bdf106b3fcce26c8f17aa31ae97681d550c3e17d06a91019e0c44dd3","first_seen":"2025-07-13T11:27:36.34324Z","last_seen":"2026-02-06T08:34:03.486527Z","times_seen":11,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBdzdoQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--30b7a97b5de1944cf3405692382e171d8af37e96/playtech-64cccc17218a0.webp","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBdzdoQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--30b7a97b5de1944cf3405692382e171d8af37e96/playtech-64cccc17218a0.webp HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8536\r\ncf-ray: 9b11946c4f6c712e-OSL\r\ncontent-disposition: attachment; filename=\"playtech-64cccc17218a0.webp\"; filename*=UTF-8''playtech-64cccc17218a0.webp\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"679dc4cd717dfc68fb0db0127a409841\"\r\nlast-modified: Tue, 14 May 2024 10:46:00 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC3C6E45D50\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:54 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=r6cOMBIcBqR7w6INAxwYzIVRXTcMJKBiYinT3UpTTnHloSRTE29orUD9Ytvxgjy0%2Bl4S3hRzKumbXnd7SmN5BgCReYOB3lhkPnvwNg5u%2FYMyE50YnvWBnJmJzg3qQawNgzpioeVQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8536,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"679dc4cd717dfc68fb0db0127a409841","sha1":"6ab3026eba819d6390f9bb473c2925a8592c2a2d","sha256":"e0408ebc56e437a65011274021b9686e173665e0e61263090c49a163adbe29e0","sha512":"9cdc0a19a4e98232bf03a590cba0d907f5d3b25a164eb434371e82ffccb82d061b83f83ad39f6f4549c38946bcd3e5ce6a8ede329c32b1bf6fdbe9ca535d5713","ssdeep":"192:6QbkSU9zZovGPnFSgwqIfvviaC7RNY6hYBJ/e0:6QeVEGPwgzIaa0RNY20","tlshash":"a902b09026cb7bcf8d0b712494c31b5285a6a2c90bd8482f53d09c564db32b655b5ffc","first_seen":"2024-05-17T15:43:11Z","last_seen":"2026-02-12T03:18:50.712708Z","times_seen":20,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBN3IvQ1E9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--2c451e6813fe6a941fa7d2b9b70ebe8f37ffb6ff/Novomatic.webp","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBN3IvQ1E9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--2c451e6813fe6a941fa7d2b9b70ebe8f37ffb6ff/Novomatic.webp HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42636\r\ncf-ray: 9b11946c6f8d712e-OSL\r\ncontent-disposition: attachment; filename=\"Novomatic.webp\"; filename*=UTF-8''Novomatic.webp\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"e8fb41aac2fd70c6e5ce007a797b59f1\"\r\nlast-modified: Wed, 21 May 2025 11:38:03 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC25E18B903\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:54 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WTGP1vujBCx08Ffw0lnl6yvjF0b7E2RFHteLYsHVQaipQtCMM299mNWxA%2FkeZWNX6yI1Mchluu2sVDdzOOmNnPQpmy35COG37q3Q5gxQfXPA4zFQNb8xIyA2pXX9fstT6yJvG35U\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42636,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e8fb41aac2fd70c6e5ce007a797b59f1","sha1":"21c4bfb8259c5c3b3480ea4ac15f274a437f172b","sha256":"1ad463f312a80c003c1f6fb0e1180d294b08906fd9467744e73e3bccc13c8ed6","sha512":"4b2e152720d87ab3d7264430baacca4a581fd5876621e154f7f194a6e55f77ee0decd7093e0bfee41bcf15271dcf7e59cd52cd08195603858b085820347f8280","ssdeep":"768:7vGIay1JUzJ1USxltc54NPNgA6OTBPE5u3jMaMjOk5dkoK+aLuVwek+n6fyW4FXf:7vGpyAzLfA58iA6OTmiBMjh5y+aLwwep","tlshash":"0913f1a1757f05bfda894c198a93c22d4e3acd26fea8297426cb25344c371e9834d49f","first_seen":"2025-07-13T11:27:36.362061Z","last_seen":"2026-01-13T08:41:15.516142Z","times_seen":13,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/i/s3/pragmaticexternal/MoneyTime.webp","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:55.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/i/s3/pragmaticexternal/MoneyTime.webp HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22144\r\ncf-ray: 9b1194727df9b4f1-OSL\r\nlast-modified: Tue, 23 Sep 2025 14:35:16 GMT\r\netag: \"68d2b024-5680\"\r\nexpires: Sun, 21 Dec 2025 19:34:55 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 21633\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22144,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"831de10efde4375c4daa8ee3546daf55","sha1":"da16923e3f2da170e55777ab69a4607ac15e4ee8","sha256":"997502fc73cb0786bc8718d8da7950b4d0f6af32629cf6ceb8e84b68d2884ff5","sha512":"faa74db88349e83277f9d61e51f7cf5f20655ba1bf32731690045d5ae8da86e80eb557d256e4135894797c79f4373670a0e803f4819e49f6e8e142655aa82a2a","ssdeep":"384:MwmjK+N7XQNkwmoIW8uge09I1rWggVr/VNX6co1zokFT7N7bUIcdihW1AjYM7qaC:5muzNNIW8ugE1WlRLq7zHT7xUIcd31AM","tlshash":"29a2e123c6113d69d6cd7fbc596e87a863174732849a1187220f13e983e409533ffb45","first_seen":"2025-10-22T03:04:00.072556Z","last_seen":"2026-03-28T03:37:04.217798Z","times_seen":20,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.webtrends-optimize.com/acs/common/js/6.0/wt_lib.js","fqdn":"c.webtrends-optimize.com","domain":"webtrends-optimize.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.webtrends-optimize.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 27 Feb 2025 11:12:15 GMT","end":"Sun, 29 Mar 2026 16:26:35 GMT"},"fingerprint":{"sha1":"01:10:A3:01:70:40:A9:D8:61:1E:E0:15:C9:05:FB:21:F5:69:1A:D0","sha256":"8E:36:F6:A7:EA:52:8B:C5:2E:0C:60:38:5F:0D:12:85:95:19:73:F0:79:6F:0C:2B:23:A9:AA:44:9D:24:B8:F5"}}},"request":{"raw":"GET /acs/common/js/6.0/wt_lib.js HTTP/1.1\r\nHost: c.webtrends-optimize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 20687\r\nlast-modified: Thu, 12 Jun 2025 11:08:37 GMT\r\netag: \"10e91-6375df38671c6-gzip\"\r\ncache-control: public, max-age=2678400\r\nexpires: Thu, 18 Dec 2025 12:24:10 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-azure-ref: 20251220T193450Z-17f644c5599znfvnhC1SVG1k2400000016d0000000007zrq\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":69265,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"9b595636d1593dceb2dcdb4fdcfbbbd8","sha1":"c8acca2b165087c8157b95acc763821aafc89049","sha256":"a53138d7c78530872c26a419a87b5f58ec88d57c654bded13ad0e0a59d94d1ae","sha512":"408c9c88c7c5101b0dd72dd8066c90f978d796cb766ce072b6f60af9933a0b385e33bab1e075610977c3295c37b3a448cb4db62f00ecb74bf74d0a9722a2aabe","ssdeep":"768:9g5FAnXOmQVqJCo6b18LOCjlILLRDAtl7UiCSP1xjvSyS+j/W:2OXLD6xvwzSypje","tlshash":"d1632a1832a1e65943d203c1672f62917b3291cb3a4c85f9f145dee4297ce9b212bff6","first_seen":"2025-06-20T10:45:36.360499Z","last_seen":"2026-04-02T10:58:17.16384Z","times_seen":285,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/api/games_filter","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"POST /api/games_filter HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.s.v2+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Display-Mode: browser\r\ntraceparent: 00-0000000000000000ae93aab57f799df6-31ce620e85d5e55e-01\r\ntracestate: dd=s:1;o:rum\r\nx-datadog-origin: rum\r\nx-datadog-parent-id: 3588913767575315806\r\nx-datadog-sampling-priority: 1\r\nx-datadog-trace-id: 12579585880680406518\r\nContent-Length: 219\r\nOrigin: https://www.luckydreams4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":219,"data":"{\"device\":\"desktop\",\"page\":1,\"filter\":{\"categories\":{\"identifiers\":[\"livegames-entry\"],\"strategy\":\"OR\"},\"providers\":[]},\"sort\":{\"direction\":\"ASC\",\"type\":\"global\"},\"page_size\":15,\"without_territorial_restrictions\":false}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: application/vnd.s.v2+json; charset=utf-8\r\ncontent-length: 86593\r\ncf-ray: 9b1194667a26712e-OSL\r\naccess-control-allow-origin: https://www.luckydreams4.com\r\naccess-control-allow-methods: GET, HEAD, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\naccess-control-allow-credentials: true\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nx-s-media-type: s.v1\r\netag: W/\"97cc93c831bd50c8c95a568c9dc5bb82\"\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: 9b1194667a26712e-FRA\r\nx-runtime: 0.027248\r\nvary: Accept, Origin\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QFJC%2FnRMdot5l2LXCrIScTMlVcF62UVPvnd0lnW%2BluwahZaP%2FBC78tQq8UPWqdX1CLxkQ2PYMa8zgNaRkUTu1NvIt%2FnOsknobm0SgYPojycIW501QNT%2B%2FO9%2FFBdU2Fwx3UpCqWF%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86593,"size_decoded":0,"mime_type":"application/vnd.s.v2+json; charset=utf-8","magic":"JSON text data","md5":"76441c4d13aa05669a9ec8b2fb1a655f","sha1":"a89cad633a76d9f396bcd6d32d6c4b1d1cfd4b4c","sha256":"97cc93c831bd50c8c95a568c9dc5bb8224d25b607ff42ac2916ea4289fa24bb1","sha512":"03a662eb38114b6cfd8d431e789153064bb4f4e70ab7d7f1033abf065b1a40c86720ebbf1f07a4311974685ce619068af5c2588ebc68fc4619825de8fd755738","ssdeep":"384:t2bbrGYT+/VBcDjkj5bSmEIXuJ9hzE/0c3RbnX2UN6JEWPyi6r/7:8bnwA81WmN2vXMX2DEbVX","tlshash":"88837d42430e16e8ef79c9c07e6db9a05a98bb3b41c7d9ca914ace4014f65bef1409f7","first_seen":"2025-12-20T19:35:38.766977Z","last_seen":"2025-12-20T19:35:41.918379Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/cms-pages_en-CA-entry-index-tsx.c0923eb3.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /js/cms-pages_en-CA-entry-index-tsx.c0923eb3.js HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9b1194694cad712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-f4b\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:53 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=dxIdys9uPGo8PkwAf5bcAM5KIqTop7CuZ6RCXJ6urVbhy%2Bgf1%2FqUL%2F0AnFjnck%2F3LnQe7J5F%2BdHlOdS2bfhHm74GrLdW77Z7sBRrIkC%2BwGnRFGWbcM2bfHDLWROG4B2C6Z8Cnb2C\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3915,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3827)","md5":"6277d857af265d2320620621ba1b888e","sha1":"d6f9bf585da0512bafe9fcfac3a4fefbd5730e96","sha256":"138c37fa2abba552c0774bfd2fab51a5445ac77b7a26f05a88457bf6b15021bd","sha512":"0039d7f7bc5b075fc4fb46433b24e5938243f6a66c17bd6c9b3888f346b0818c40e86e111d9793157ede21ade11c238fe111664c8a95d16d540a1767e075854f","ssdeep":"","tlshash":"2481961fe63827b515850282798f76e7ab41559a2322c490bddd8539b37ca2f303efd8","first_seen":"2025-12-06T13:04:27.253408Z","last_seen":"2025-12-25T02:16:58.145682Z","times_seen":6,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geo.webtrends-optimize.workers.dev/","fqdn":"geo.webtrends-optimize.workers.dev","domain":"webtrends-optimize.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.199.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webtrends-optimize.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Nov 2025 12:32:06 GMT","end":"Mon, 02 Feb 2026 13:29:33 GMT"},"fingerprint":{"sha1":"30:16:5D:66:BF:DA:FC:95:E7:0D:3C:EB:4E:64:FF:AE:53:12:EB:CB","sha256":"5B:E6:5A:8C:4F:EF:DD:04:CA:FC:44:50:D4:A2:A9:59:2D:5B:7C:9A:0C:70:8E:88:0E:8E:81:75:B3:10:CA:6D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: geo.webtrends-optimize.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.luckydreams4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HYvnSfn%2BUEU1c22fP6K3f%2BSOOgNbLuqoH3F1L1Nd7KfJHw%2FeEd%2F0Kbig1G5nNy1s0Xnz0pMCLGutwsZ6JN%2FqlEtafWY7Yb2swfRIP50jgkFaXOxbB0zwUx%2FLUO5Ip3Ne\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b119456bcb70b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":957,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b5347651ec7294699cad71c0a95645fb","sha1":"7a96912a3cc4dc979edf45642ecc1d6e1ce0348a","sha256":"b14af5b047874d1b4a1507752ab06cdd9b06d7d8782708c4f0afe77df21bfdc9","sha512":"765628b93c292f2b8bae9904330984523191a78425b80529b80c860c65fd94ad7b97640ec29c144e5232f6bfc2a6e8b4bb2be7972b00523828542fe7b565c5b4","ssdeep":"","tlshash":"fa1159359a5cdebe4699333cdacb83c200784107ced945c1d685ea769acb5c833aa40d","first_seen":"2025-12-20T19:35:38.681667Z","last_seen":"2025-12-20T19:35:41.920352Z","times_seen":3,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":34,"dns":2,"connect":1,"send":0,"wait":13,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/flags/square/en-CA.svg?v3","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/flags/square/en-CA.svg?v3 HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 26 Mar 2024 11:45:05 GMT\r\netag: W/\"6602b541-3dd\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 1589\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a2d20b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":989,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1780c9320a8d6d0a89ded8b9ecae083a","sha1":"ac4ddfc46cda7efb9fc86613a6f1763a1d23f02f","sha256":"c61a73f2cf4c6d1f73e56d65e54b2932b57c9eb1c6e434fbd71e3cb97773605b","sha512":"9c2385d15b5e189eecf84a1eaa1ca70bcde6f6efc33925f177f3cb572cca18926334994a4a3b88d79a72a43ae22519f65beab30bb7d42acab560d683cd2a7a39","ssdeep":"","tlshash":"fd1197c46360ab50a50adbf0882a38b1329335ff3fed859c4712a2071d7853d9c1c5a2","first_seen":"2025-07-13T11:27:36.290796Z","last_seen":"2026-01-13T08:41:15.426706Z","times_seen":13,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/x0neyd87","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"52.84.50.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"GET /widget/x0neyd87 HTTP/1.1\r\nHost: widget.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 3157\r\nage: 341\r\nlast-modified: Sat, 20 Dec 2025 14:34:21 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: S8WFNW7EVGss0uonEm7EC45t.a3BO3Vv\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 20 Dec 2025 19:29:42 GMT\r\ncache-control: max-age=300, s-maxage=300, public\r\netag: \"d275dca7e57648b77fd102925116d469\"\r\nvary: accept-encoding, Origin\r\nx-cache: Error from cloudfront\r\nvia: 1.1 fd72662d19f1605cb71a8fd4814daf52.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-amz-cf-id: dMBCllEr_s4uJyJUQ6R4c1xEUBqDm89xQriIi-POVUMizIv2ORO0ig==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7591,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7591), with no line terminators","md5":"7bcae2cf00f4cd9671ac437fa44770b9","sha1":"f63fb33828a4b12ce617551778dc368214b97313","sha256":"43e90a9ecff1f35c7214e10397febade8c1c63620feaf9ad0746070c833d5f21","sha512":"21b1296de46d586bc87c854b07469a10fc7669e887906cc8b989d639cf9a0e5ad02562222d3e85f68114744f1e8cd47433fcc6cd208bdf5fdc5ed4fd71650178","ssdeep":"96:v2NH8/xVRyhsXtpZ8HEZgOM09SP0Ffpv7vWYzfDsJ0dMw938I5Zv1JVqUP:v2YVNCH8bMFOAYMSdZ935pqUP","tlshash":"49f163feb6c2793806a31566623f770c7f3b654428494890d065c8c87a7addbc12bfad","first_seen":"2025-12-20T15:01:59.644551Z","last_seen":"2026-01-13T02:20:23.182557Z","times_seen":917,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"www.luckydreams4.com/cent/connection/websocket","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cent/connection/websocket HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.luckydreams4.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: qz0CKzxpmNiSybSr+nbOjg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 20 Dec 2025 19:34:54 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 3RqDEdI7J9DDWgQV5UTFKCOqLxs=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Rtjahf2cZrgLF9KeKO%2FIGS2Zy8C6ehUREu9BP9s9VfK7pxXfkHhMHZY1rnbGLs2TVTgQxZKB4kq9YuYObxcBFC%2BOrJUodpX%2B96qqEIZQarBfTucm9Q137TRJ2QdL6CuFiKWm9dQe\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b11946e1c6349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T01:47:03.978699Z","times_seen":13354468,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":0,"dns":27,"connect":34,"send":0,"wait":206,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser-intake-datadoghq.eu/api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A6.6.2%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Aluckydreams.com%2Cversion%3A2.1.86-f54dbe17\u0026dd-api-key=pub6944d0b05408999e2a258fb6e57933fb\u0026dd-evp-origin-version=6.6.2\u0026dd-evp-origin=browser\u0026dd-request-id=f0e81e79-90fe-4f92-bdc0-406dd707378f\u0026batch_time=1766259296713","fqdn":"browser-intake-datadoghq.eu","domain":"browser-intake-datadoghq.eu","tld":"eu"},"ip":{"addr":"34.149.115.139","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:56.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.browser-intake-datadoghq.eu","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 25 May 2025 00:00:00 GMT","end":"Sat, 30 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"62:0A:8C:EB:5B:F0:38:A4:34:6C:43:65:FE:09:67:F7:83:AD:44:C5","sha256":"73:49:93:8C:8C:F9:73:3A:66:03:C0:4D:5A:08:45:09:83:4A:2D:76:73:88:8E:6D:CE:3A:2F:EF:6E:C1:86:09"}}},"request":{"raw":"POST /api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A6.6.2%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Aluckydreams.com%2Cversion%3A2.1.86-f54dbe17\u0026dd-api-key=pub6944d0b05408999e2a258fb6e57933fb\u0026dd-evp-origin-version=6.6.2\u0026dd-evp-origin=browser\u0026dd-request-id=f0e81e79-90fe-4f92-bdc0-406dd707378f\u0026batch_time=1766259296713 HTTP/1.1\r\nHost: browser-intake-datadoghq.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.luckydreams4.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 16368\r\nOrigin: https://www.luckydreams4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":16368,"data":"{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259295073,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"327d1a3d-4b5d-4569-9162-079fc186a117\",\"type\":\"image\",\"duration\":36000000,\"url\":\"https://netcontent.cc/luckydreams/i/s3/endorphina/endorphina2_CrownCoins.webp\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259295073,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"482e4e8f-a2f1-42dd-8735-be6b30b4bb4e\",\"type\":\"image\",\"duration\":39000000,\"url\":\"https://netcontent.cc/luckydreams/i/s3/pragmaticexternal/GatesofOlympusSuperScatter.webp\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259295074,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"39f246cf-bf3e-4867-a5c5-9ca8d6f00317\",\"type\":\"image\",\"duration\":58000000,\"url\":\"https://netcontent.cc/luckydreams/i/s3/popiplay/Moneyfest.webp\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259295075,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"1d1931bb-066b-491f-8c83-53a22e317c45\",\"type\":\"image\",\"duration\":47000000,\"url\":\"https://netcontent.cc/luckydreams/i/s3/bsg/3PotsofLunarWolfHoldWin.webp\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259295075,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"83a31d35-1b78-4577-afc7-0f058439fb94\",\"type\":\"image\",\"duration\":48000000,\"url\":\"https://netcontent.cc/luckydreams/i/s3/pragmaticexternal/FortuneRoulette.webp\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259295076,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"82bcf21c-5c60-4f98-a896-770634ee490c\",\"type\":\"image\",\"duration\":53000000,\"url\":\"https://netcontent.cc/luckydreams/i/s3/beterlive/GravityBlackjack.webp\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259295076,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"2ec980c9-9a1b-4059-95ad-d9d1448077ff\",\"type\":\"image\",\"duration\":49000000,\"url\":\"https://netcontent.cc/luckydreams/i/s3/pragmaticexternal/SweetBonanzaCandyland.webp\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259295076,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"ebaff2ad-0f5f-4d94-b7bc-a205caeb702b\",\"type\":\"image\",\"duration\":56000000,\"url\":\"https://netcontent.cc/luckydreams/i/s3/pragmaticexternal/MoneyTime.webp\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259295077,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"4b31396f-9d15-41bb-9f9d-0906f61448db\",\"type\":\"image\",\"duration\":57000000,\"url\":\"https://netcontent.cc/luckydreams/i/s3/pragmaticexternal/MegaRoulette3000.webp\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259295077,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"040c775f-5fa8-4b19-844a-ca9a37c3188f\",\"type\":\"image\",\"duration\":53000000,\"url\":\"https://netcontent.cc/luckydreams/i/s3/beterlive/GravityRoulette.webp\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259295076,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"462be466-ed81-423c-9473-b4a1f8ce7e9f\",\"type\":\"image\",\"duration\":55000000,\"url\":\"https://netcontent.cc/luckydreams/i/s3/beterlive/RoyalRoulette.webp\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259295271,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"bbe8a022-9e5f-431d-81f6-75f0d826b8fe\",\"type\":\"other\",\"duration\":52000000,\"url\":\"https://www.googletagmanager.com/gtag/destination?id=G-Q18MHQV7P9\u0026cx=c\u0026gtm=4e5ca1\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259295486,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"c8139ac6-2291-4abe-9a0b-71d25adf95ce\",\"type\":\"other\",\"duration\":0,\"url\":\"https://pixel.mathtag.com/event/js?mt_id=1573753\u0026mt_adid=250635\u0026mt_exem=\u0026mt_excl=\u0026v1=\u0026v2=\u0026v3=\u0026s1=undefined\u0026s2=\u0026s3=\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259295489,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"d3bfe9d2-b8a7-4bd5-b38b-2535e45bc6e6\",\"type\":\"js\",\"duration\":0,\"url\":\"https://s2.adform.net/banners/scripts/st/trackpoint-async.js\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259295696,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"f7507023-6d01-4353-a544-400ce1702216\",\"type\":\"fetch\",\"duration\":272000000,\"method\":\"POST\",\"status_code\":0,\"url\":\"https://region1.google-analytics.com/g/collect?v=2\u0026tid=G-Q18MHQV7P9\u0026gtm=45je5ca1v876936874z8849833908za20gzb849833908zd849833908\u0026_p=1766259293083\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=775605810.1766259296\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_s=1\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391252~115583767~115616986~115938466~115938469~116184927~116184929~116251938~116251940~116682875\u0026dl=https%3A%2F%2Fwww.luckydreams4.com%2Fen-CA%2Fentry\u0026sid=1766259295\u0026sct=1\u0026seg=0\u0026dt=Online%20Casino%20Real%20Money.%20Play%20Best%20Online%20Casino%20Free%20%7C%20Lucky%20Dreams\u0026en=redirect_user\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026ep.browser_language=en-US\u0026ep.path_clean=%2Fen-CA%2Fentry\u0026ep.gtm_container_and_version_id=GTM-PH4QS9N%20versionID%3A220\u0026ep.custom_timestamp=2025-12-20T19%3A34%3A55.231%2B00%3A00\u0026ep.full_referrer=\u0026ep.user_agent0=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026ep.user_agent1=\u0026ep.custom_hour=19\u0026ep.login_status=false\u0026ep.save_data=false\u0026ep.connection_type=unknown\u0026ep.prefer_saved_data=false\u0026ep.custom_screen_resolution=1280x1024\u0026ep.hostname_redirect=www.luckydreams4.com\u0026tfd=5756\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259295574,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"287af10a-e02e-4cd4-85c0-fe7577ea7ca1\",\"type\":\"other\",\"duration\":61000000,\"url\":\"https://www.googletagmanager.com/gtag/js?id=G-Q18MHQV7P9\u0026cx=c\u0026gtm=4e5ca1\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ncontent-type: application/json\r\ncontent-length: 53\r\ndd-request-id: f0e81e79-90fe-4f92-bdc0-406dd707378f\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 20 Dec 2025 19:34:56 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8e1fe57e8abab1250f592a3dea7fd7b3","sha1":"dd9b5e1bdc00d5389679b904c2a20e8dcc677734","sha256":"0800394b5a4e243a87ffae5a572d0e797b46e52a27517acb0a6706a36de32835","sha512":"f670fcfb2d9d8db47cad0ddfba967d051f8897d3d645ba936d3d0ba8c5bc2734dcfa85b6a293a05d6598c55e1b34dbbc6a5766581dbc7effa2014fe58f59ea88","ssdeep":"","tlshash":"1d900285962058f19178409b0c15151845dd5563b8cc10ed653252b802041218729c41","first_seen":"2025-12-20T19:35:41.923798Z","last_seen":"2025-12-20T19:35:41.923798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/icon.svg","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /icon.svg HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-608\"\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:53 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fjYy8xiojEHMGf5sUdbb%2FwG4fC6ZXQzMEQBB1VY1yqQFKlpXRld12CjXCPZWDYrNFInhXZp%2FJgul50ll5IbW50bZsICwD%2BGLRZqZjhznc4Wm6v59RydlC9elzuF1vi%2FT7nRrk8xQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b119467ab40712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1544,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b99971d7c5ee4b6dd385591985e5caec","sha1":"753a1de363ebcd46539c81eea6dd5c992767fcfa","sha256":"b9b7804c5343188c54595f40d37a17e461c911ae4b3e0528fd729bf567b90e15","sha512":"c6161de07f5751fa434711e03b970c0c92b8c29b3ca1f92b915738c0e576805bcdf36e8e038e9c71888afa24cb0f1bba6379a96791ff16eb4b76f39562c1f5d9","ssdeep":"","tlshash":"6e31657be3bde19cc90653408d8b9c70329b61e25d46c8f182e1350cb09c4ae5e3de81","first_seen":"2025-07-13T11:27:36.310469Z","last_seen":"2026-02-12T03:18:50.692141Z","times_seen":16,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/providers/color/3oaks.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/providers/color/3oaks.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 09 Jul 2024 14:45:05 GMT\r\netag: W/\"668d4cf1-2357\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 7777\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946aadafb4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9047,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b7c1ccbb30f7e4b71f4bb12c1005765","sha1":"07d20b226b72bdfeab1cd7060e67b11dd2964c9e","sha256":"7b7ee477a6d0a0f8a32204bb67fff297ca3c4f3f205b2c83f2f0764a79ce57de","sha512":"979f0dbb232f63ea06b5596b8e05a1726d43b68650e5e80187c2617dc3256536f4e29f89205ce57c7bb8168ce063f00ae47d028d44c517094836a0422bd4241a","ssdeep":"192:66jGIXKekRonIb1xqiCFKr57gLdCh41hR3NunTGrUmdyDWosnH:HjGIXJkRSIb1siCFKr57iwhm9unTGQmp","tlshash":"f01252f567e9e6d0e00df3fccb59a8b1362328fbb656c498c3e07d55661006e4a9c9c2","first_seen":"2025-07-13T11:27:36.378979Z","last_seen":"2026-02-06T08:34:03.466242Z","times_seen":11,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBL2tCQ2c9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--ca56f6958c697b0539cca91c4d516e445711e973/Belatra.webp","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBL2tCQ2c9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--ca56f6958c697b0539cca91c4d516e445711e973/Belatra.webp HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28334\r\ncf-ray: 9b11946c6f8f712e-OSL\r\ncontent-disposition: attachment; filename=\"Belatra.webp\"; filename*=UTF-8''Belatra.webp\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"a0a4a14dc5fcb5bfd9b03a66021a06c0\"\r\nlast-modified: Thu, 22 May 2025 10:42:35 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC25A852C5E\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:54 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8pUc3qDQjVbw8BuWeT8xI4SrOXj8SHr1eDXuJlw7yGdju2B7fEVEDFArRHYm%2Fh0%2FxrKnvqgY%2F92pTqEV8yPWjbojSgqaZW4IrWwC14MEONmPFx0I1Owp7Dw%2BWouyHFb3oM%2BgtnGv\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":28334,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a0a4a14dc5fcb5bfd9b03a66021a06c0","sha1":"098bf6262cbd9eb20981e366bfe850386af17df3","sha256":"7df12b7853f7c093bfc4af668005be99cf2e5b7477d0ce7d30b692ba75a71bd7","sha512":"58050304d41a14ffdda169e48bb5d7afa8599c754be4782c35cb7dc833922dd631ff4259a256b1e1c9082f3c4bba6e0b9428d874436f76681e7a01a187dcb00f","ssdeep":"768:FvGIay1JUzJ1USxltc54NPNgA6OTBPbnHp052PwEh8CCxj:FvGpyAzLfA58iA6OTpWwWN","tlshash":"6ed2d0a1b57d0c6b830e8c374e41472eca36c463f289198dc6b90419686fee8e78b15f","first_seen":"2025-07-13T11:27:36.350612Z","last_seen":"2026-01-13T08:41:15.500562Z","times_seen":13,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/api/info/locales","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"HEAD /api/info/locales HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.s.v1+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Display-Mode: browser\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/vnd.s.v1+json; charset=utf-8\r\ncontent-length: 0\r\ncf-ray: 9b11945dfa4a712e-OSL\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nx-s-media-type: s.v1\r\netag: W/\"9dede2e656c17aeaab597d3a7b7cca29\"\r\ncache-control: max-age=0, private, must-revalidate\r\nset-cookie: locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; domain=luckydreams4.com; path=/; SameSite=None; Secure\r\nvary: Origin\r\nx-request-id: 9b11945dfa4a712e-FRA\r\nx-runtime: 0.007345\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=pEtfTWIRu8XooD1kOftPWiDEsWhIKZMQbu7RCLIlWn4y3gBNAISfKi%2B8GaRXHW7pqJrQ9DuWjqcSNABjPxJViOn6cqRXcMk5Pc5W4zaszSwBzbY%2Ba3ibqomM51YQHgInYw7UfbAY\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/vnd.s.v1+json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T01:47:03.978699Z","times_seen":13354468,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/favicon.ico","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:52.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:52 GMT\r\ncontent-type: image/x-icon\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-25be\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 1\r\nexpires: Sat, 20 Dec 2025 20:34:52 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cCURhC34%2B%2Bcl7MtoR9tEcP3jl0EmYBC%2F1YorPr8%2BA59WpqSy%2BSdyVwLu4oG0nCT4800A5HgeYJ53Ua3VOLPaZQadbZVcloHBbEoZn3cQZEMefx0g%2F%2FJ0PTZ67wTV3xcOUV%2Fa8gGJ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b1194612d22712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"69b79a10cfe38e746e943455da033ee4","sha1":"2490380f770276d1c99c211a26fb19385e2ab565","sha256":"73cd7b4760b3ab4a97bdd03788d4ab1dd8b6a0d8d8f1292a0f9fde8b5e55e76c","sha512":"20e6a9de95f4d091775ed78bc561b0bad92e23ab4fd5bfb278a6f2794970882b3a45ce9eb1ea3c7c4189aeca9d2ab2729a5f6c157fcdbfc6d9dcc7e5cceb5ba8","ssdeep":"192:P4rdplxpuKCPGpOnbdX+F55Zcz5MCIIC4P1:P4rdplxpuKCPG6dyZcz5MCIIC4P1","tlshash":"8012ae836373007ce4b6a2b515716567119a8fd9d9bcb05f4388f37f0a38c62869cb6e","first_seen":"2025-07-13T11:27:36.380651Z","last_seen":"2026-02-12T03:18:50.679371Z","times_seen":16,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/payments/color/devcode-bankintl_w.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/payments/color/devcode-bankintl_w.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 24 Jun 2024 07:15:05 GMT\r\netag: W/\"66791cf9-1d66\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 14492\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a8d94b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7526,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a596c6c596f0c2716f662616c3705b5d","sha1":"14f21bf4e6710fc59de988d43c23e2a0d43fd8eb","sha256":"39dde5aa1897616e39060d8a0b6db914ec61ffaefb391470c554eaaccc4fd6cc","sha512":"4764ba50b0e1ed76d312f5ed4028341964000b110edad0639d0741d7855f56a2f78871d9e28d19632f1d6f3123d5f617b93864339e333bcebe27b3c9ed6accd1","ssdeep":"192:k5H3wQ+GCYTnnb5HMOVnhJJqKvb5mWeEroP9i2CSNtKdnAHGHE3T:k5H3BP9TnRMODJJPuES9igtKdQG2T","tlshash":"d0f111e1b3f972f4a116f3d6c22598627d6330fa37dbda48cb919d95a54201dcacc8c1","first_seen":"2025-07-13T11:27:36.267922Z","last_seen":"2026-02-12T03:18:50.611393Z","times_seen":16,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/providers/color/5men.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/providers/color/5men.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 09 Jul 2024 14:45:05 GMT\r\netag: W/\"668d4cf1-27f0\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 14402\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946aadb7b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10224,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"70cfd040577847639684cf35f7d6d8bc","sha1":"d813a683e9013a871e8ec4a9214ca58062ce8470","sha256":"c170f3be6b2199641549a3020c35f899b7d9b776e979ee57b9227636e84b7023","sha512":"f9813d600aeb2570b4341d79437b4f1c744b77a4861df4cf1be3bcf2711a31d7b2333cfd7b8eec9f0738bc63f1e0622a78290d9447aa1a684af398f80127f45d","ssdeep":"192:3ROM8GrQEZ4Cb807N3jWppMWV0rNb5mtMUTR3p6JzKF:BmgQEZr1VjGrVwsHcK","tlshash":"a92283d4a3b95bf8f001f3f94927a8656eab1ef1b7418542c7507c92e8e141c0e9adc3","first_seen":"2025-07-13T11:27:36.362886Z","last_seen":"2026-02-06T08:34:03.555704Z","times_seen":11,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBekhoQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--014de2aadbf948c7eef31202a007bf9c92c07b01/pragmaticimg-64cccc173c2e4.webp","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBekhoQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--014de2aadbf948c7eef31202a007bf9c92c07b01/pragmaticimg-64cccc173c2e4.webp HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11318\r\ncf-ray: 9b11946c2f54712e-OSL\r\ncontent-disposition: attachment; filename=\"pragmaticimg-64cccc173c2e4.webp\"; filename*=UTF-8''pragmaticimg-64cccc173c2e4.webp\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"7e8401841933cd486b4220dffc14e4cc\"\r\nlast-modified: Tue, 14 May 2024 10:46:04 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC25CFFB819\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:54 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jita3pj7Zp0MTVaARjLXOx%2FVKryFRFv6xJTOFBDWRN0P8DAU8mlkbgrknlrR5h8H1ZzEkWD9%2Fm%2FA8jbPGvETRQ6KrefrOWLeLMbbyX4TbMFrGGAOrbumGWSZSFptL5CVNShl7GEx\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11318,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e8401841933cd486b4220dffc14e4cc","sha1":"b063643db68a9cd9bfb1d77624d53c3ed6514ad9","sha256":"fa12352662acabd0d0f70208f088af89f2ecea806c2bbf4434fce656ce6b1e5c","sha512":"be2191a6484ef550640082b58a05378f7a0e4905c9d765097ca30cb67a81040205d961e030b712c5116d7b8e9fe36cf1e8000b2cc27927da49eeb7d329df8e89","ssdeep":"192:xQbkSU9zZovGPnFSgwqIfvviaC7RNlqV1ccelilgti+Dw6tTwSLe:xQeVEGPwgzIaa0RNvPCCc6tUSLe","tlshash":"d332c0d06199b3ce6403a218c9d35b85858492cd07ac9e6e1b954d0ec7f324f497cbf8","first_seen":"2024-05-17T15:43:11Z","last_seen":"2026-02-12T03:18:50.612327Z","times_seen":20,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/defaultVendors.52b32e95.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /js/defaultVendors.52b32e95.js HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9b1194545fde712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-e5edc\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:50 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HRGxbNbr6O5XyBw1%2BnjueKeLHAlua%2F5dSnqiXGHrIxOZWj7uLzqbrj6bkg6li8nNXF9pka1OOOnUogUXqYJNZAHYRmVEcOS2ge83NUcMsFc1PxrEhS50YY4YZc%2BC67aHhM1drii8\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":941788,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"500c0be889380cc8f2adb8039df4d42f","sha1":"952bffba5fa6da706505d94225a63c94be490938","sha256":"cc933116fe2fea8fd4dbdd70bacd770137993d972a987ac86fd2e5f71b692523","sha512":"6739d92cc26c77956ac2758def321bb239338e3aabc92d8f692be039030da1f265ad1be9d99da7fde82a8f6dddd654606c029d0cfa2fc37394c102e72a15bee4","ssdeep":"12288:ync1YbMD1J7HfSS4hx1Z2UX8XQNr+DbGP3042O+g57qNnP1Og:yc1t1J7HqSCZ2UX8UobGPH2OX2NnP5","tlshash":"251507c97292f0a147e361e6807f040bf33a2919784d9464f254e8e67cb994e923bf7d","first_seen":"2025-12-20T19:35:38.612055Z","last_seen":"2026-02-06T08:34:03.478998Z","times_seen":6,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/payments/color/astropay_direct_w.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/payments/color/astropay_direct_w.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 21 Jun 2024 13:05:05 GMT\r\netag: W/\"66757a81-63cc\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 37304\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a7d79b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25548,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e908f8449967ea3b4f50f07a195956bb","sha1":"34c2baba6457bd90124ffe16218baebc4ab6dc40","sha256":"41a26e2ff5dc77aa49121043afce274d431399a5b8518cd45a3dd036d34ba7eb","sha512":"51687dec0fc133a42ef5a7e333489f5a839593d2886abc2fcdd235cd87b016ac2c8040d7ee3046833b3ccdd4271fd55d8ff7fd4452894201a0b3349bfde124c1","ssdeep":"384:tRJBTPP7U7p1+Pf0eVrIzLfijJGXAezMooa6s+Pr3nNPRyL/rn9MijkZhJ:rP6WnDrIzLKj4RzMo2r3njy39MPZz","tlshash":"41b2da9ca72492e8f806a3fc831668b53ab76ce97d11c08983e92d55ddc202d4dbddd3","first_seen":"2025-02-22T05:44:22.449862Z","last_seen":"2026-02-12T03:18:50.594521Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/i/s3/endorphina/endorphina2_CrownCoins.webp","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:55.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/i/s3/endorphina/endorphina2_CrownCoins.webp HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27422\r\ncf-ray: 9b1194725dd8b4f1-OSL\r\nlast-modified: Tue, 25 Jun 2024 15:30:05 GMT\r\netag: \"667ae27d-6b1e\"\r\nexpires: Sun, 21 Dec 2025 19:34:55 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nage: 13053\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27422,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 380x380, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a52d7bf77aaed652ead9659720dc64cc","sha1":"95ca5d533656149df88c382507c8d36ce7f909cd","sha256":"912f49e23e033d0421a3a39f30523c3ce49e007cfbeadeeb8868d368dac7cefa","sha512":"622209d82f7af620bf981f837c12f37d330c611e6dd7dfa8a717017fcb9e2e7148c0b9a9c70a1c2f30d81d1ec3ad6d3646e48e277b88a7707a51406e033aa480","ssdeep":"768:i2m6QoQ6fZXE7ZD2nC9xkBlbe/1rVfUyFyQYD6XeUJNVob:ihxknCnsg/j88yQY4DNVob","tlshash":"1cc2f14a7a5310fd063df1e9ed455f341a25336de3838aa3919e4c0cdde68e03580e97","first_seen":"2025-03-04T00:59:39.281337Z","last_seen":"2026-01-13T08:41:15.475719Z","times_seen":32,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/i/s3/popiplay/Moneyfest.webp","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:55.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/i/s3/popiplay/Moneyfest.webp HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16222\r\ncf-ray: 9b1194726de7b4f1-OSL\r\nlast-modified: Tue, 15 Aug 2023 10:10:04 GMT\r\netag: \"64db4efc-3f5e\"\r\nexpires: Sun, 21 Dec 2025 19:34:55 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 7517\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16222,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 380x380, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"837c485f889d03eaacf00ec920c46fad","sha1":"a34352c10f4837ae18d3ab4ba9732206ce48c5d3","sha256":"0eae66bf84bd908ead625fdb8ac2a819a9980c1fd774f2466753746406a08040","sha512":"c2cede395e5d16760ca75f3aba8693ba1f7902b2bd35cb828b8e36a7d251ba1933c5db7c4a17e5c8122ce00d4d678c9651290724f008c0c0c9604e4e00e91371","ssdeep":"384:vKH2TOLuDaWgJCYRNQl4cxiymuiFbVW3j7EQO:vaFLSaWgrg4cxi7BW3j7EQO","tlshash":"7172d06ca59c128c4c0d113689bd632a46778a76bf1e4687d7da7700ae4dbb708d8522","first_seen":"2023-09-03T07:39:46Z","last_seen":"2026-03-28T08:50:40.949365Z","times_seen":43,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/i/s3/pragmaticexternal/SweetBonanzaCandyland.webp","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:55.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/i/s3/pragmaticexternal/SweetBonanzaCandyland.webp HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43540\r\ncf-ray: 9b1194726df2b4f1-OSL\r\nlast-modified: Thu, 11 Nov 2021 07:50:02 GMT\r\netag: \"618ccb2a-aa14\"\r\nexpires: Sun, 21 Dec 2025 19:34:55 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 74445\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43540,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 380x380, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"be38e5f6c7aa6c249d5359f6fab073b1","sha1":"e3e5a082bc7102e29cd98fc8b39ed36091949208","sha256":"d798e6db640b2e30171cf5553bc1f354d9b5c885e2ff4dfbad704624dce595f4","sha512":"1efdfab17c9af2d3292a267767d1dd3fec35439de2ae4d17f2080bc15b865b4f5ab1e8574eb868bbf7f28a2d17057e474ba7bfcf9fcecb25253eccb7093bdf35","ssdeep":"768:XfxSSJ4dxv30ZT0JUYX6Q2OADBCJlRd2FLxj+fefK7VwmwmqpaIuPBBHUU:XfxSL1RUjcADMKlj+WKFEp03","tlshash":"9c13f14c129be8249331fda8bce1640be8f567e1c577a7389f05df91601d0c9aaeb918","first_seen":"2023-04-24T13:18:37Z","last_seen":"2026-03-31T04:48:16.346296Z","times_seen":92,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/defaultVendors.52b32e95.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /js/defaultVendors.52b32e95.js HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9b1194540f85712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-e5edc\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:50 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=clc4QsqNrgQNBwJJSYe63%2BWpvEcYtasJlsA14NJLl2tKRxrBNDrrD8LaSd%2BVubeZDzf4KRrgBSPHtVBFqUKDWwdkDZUP426zKFRTb5by3eLJk9cHV%2B17Mg%2FYUKXxbY43Kxi9GF7d\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":941788,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"500c0be889380cc8f2adb8039df4d42f","sha1":"952bffba5fa6da706505d94225a63c94be490938","sha256":"cc933116fe2fea8fd4dbdd70bacd770137993d972a987ac86fd2e5f71b692523","sha512":"6739d92cc26c77956ac2758def321bb239338e3aabc92d8f692be039030da1f265ad1be9d99da7fde82a8f6dddd654606c029d0cfa2fc37394c102e72a15bee4","ssdeep":"12288:ync1YbMD1J7HfSS4hx1Z2UX8XQNr+DbGP3042O+g57qNnP1Og:yc1t1J7HqSCZ2UX8UobGPH2OX2NnP5","tlshash":"251507c97292f0a147e361e6807f040bf33a2919784d9464f254e8e67cb994e923bf7d","first_seen":"2025-12-20T19:35:38.612055Z","last_seen":"2026-02-06T08:34:03.478998Z","times_seen":6,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.webtrends-optimize.com/acs/common/js/5.4/sizzle.min.js","fqdn":"c.webtrends-optimize.com","domain":"webtrends-optimize.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.webtrends-optimize.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 27 Feb 2025 11:12:15 GMT","end":"Sun, 29 Mar 2026 16:26:35 GMT"},"fingerprint":{"sha1":"01:10:A3:01:70:40:A9:D8:61:1E:E0:15:C9:05:FB:21:F5:69:1A:D0","sha256":"8E:36:F6:A7:EA:52:8B:C5:2E:0C:60:38:5F:0D:12:85:95:19:73:F0:79:6F:0C:2B:23:A9:AA:44:9D:24:B8:F5"}}},"request":{"raw":"GET /acs/common/js/5.4/sizzle.min.js HTTP/1.1\r\nHost: c.webtrends-optimize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 7375\r\nlast-modified: Tue, 19 Feb 2019 17:53:50 GMT\r\netag: \"4d8a-58242ec738780-gzip\"\r\ncache-control: public, max-age=2678400\r\nexpires: Mon, 15 Dec 2025 18:11:01 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-azure-ref: 20251220T193450Z-17f644c5599znfvnhC1SVG1k2400000016d0000000007zrm\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":19850,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19773)","md5":"ef5064b6ee4dc45eee17aba457a12921","sha1":"be2d43b851bac77420faf4fb0d9182e470d22c8f","sha256":"a70b993e6415ddfd66ea6ee209e3ab2fa3f88b0d3e4329aec59cffedf2c32db6","sha512":"e1498c89718e2c6526a3c23c2c77a168da399f1fe89aaee8f512b5050404f53bc8f1acdc0ebd03b23b44716c3acefc8e192e91995ef4107a123966534c02398b","ssdeep":"384:0XNPDqowHhEyZfhXvkHsTGxMikEJOCVedXXe2pyz+anqp2mh8uHBj3pgR2ivPDt1:0GHhEyjGsTGxMikEJO4edXXe2p1p7lgP","tlshash":"249295dab2c631a2ab7a31a910fb4007f17e9ce6b9489d34f144d4983d78d9a41b7f0d","first_seen":"2023-03-07T12:21:19Z","last_seen":"2026-04-02T10:58:17.158031Z","times_seen":641,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/providers/color/1x2gaming.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/providers/color/1x2gaming.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 09 Jul 2024 14:45:05 GMT\r\netag: W/\"668d4cf1-29f7\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 50637\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a9dadb4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10743,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b8bf0e1cd45b1aa0ce7e782708951976","sha1":"009b94d475ce9ceb41f906870eff2adce4a4e6f5","sha256":"09c802eba15b6fdb62fab8fb4fdcceb70d91c5b2fe27fa18294f187aec077218","sha512":"e9928e2836f1a6e89537d921275d3c760053c1622e61bbe4b6429063bf65188a1ae6d365b661ec569712ebc290f1376089accecd81eb95cbf33762dd16c950e3","ssdeep":"192:0f8fI5Ccvi1yI6tDXTetkE+jszpjcu7lMEYcAtyrCf4jpCvIPR3BGks+Er29ou4A:0aI5Cca176hoEQ11W/JWY2WIPR3B/s+v","tlshash":"f82295f493e9a3f4e445f3f8c61a58a47f6324fa3662d97ec7b22d50e51206e4488cc6","first_seen":"2025-02-22T05:44:22.401798Z","last_seen":"2026-02-06T08:34:03.543204Z","times_seen":12,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/i/s3/beterlive/RoyalRoulette.webp","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:55.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/i/s3/beterlive/RoyalRoulette.webp HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 65458\r\ncf-ray: 9b1194727dfdb4f1-OSL\r\nlast-modified: Wed, 15 Jan 2025 14:50:06 GMT\r\netag: \"6787cb1e-ffb2\"\r\nexpires: Sun, 21 Dec 2025 19:34:55 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 7517\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65458,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 380x380, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"10a0e237f182d9242d7b6fa40954263e","sha1":"326eb0b5e7840727bc0122f6bce9270b76c15314","sha256":"21e244524dd6aed909b469c56a9f462c4efd6d428c6c7a10b1c396ae78530cf3","sha512":"9552d1dd86ef37f876f5fa44b1738ecd9d44485be12a08afdfc1154756c894643ae385bd8f798a0cb9472af0c5c38a35a82ad14a30d01f51ea180d49b3e40502","ssdeep":"1536:NZKtt6644w1QbSuJ/FYo2ZSTwcpdKc0GmCEbzTQMlsUKD4xz:ym644wESrc3NnzEHTvlsA","tlshash":"16530254f186486827c11e189cc81c5bbc5f6235620cfb6bc63a0af6c9b1f55e8ef196","first_seen":"2025-02-16T02:06:11.871619Z","last_seen":"2026-01-13T08:41:15.54157Z","times_seen":8,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/css/main.a6455864.css","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /css/main.a6455864.css HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: text/css\r\ncf-ray: 9b1194541fad712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-9809f\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:50 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TB0QxqMryX9r%2Brta6G2K5%2F8YCPhUqefz8qesVDgjclUOaonQm4xQ1DjujlDxCHZztFzUHmpMnd%2BTO5xoIvQCuNfESDrZXikFsMdGCHk%2B07BzJwoth7PKbdXZYpeCv3rqJc9OvAqw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":622751,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"386c6700e43c313df9360837fe1a51ef","sha1":"c28349fae7c5438577bca559cd97f10d9ef5bcc0","sha256":"24330961e2756ae091989b00bb351563cddc7b3b6bec6724c332b4cb896fd7f6","sha512":"80b52a4da237e84cd78799b563541d20ba108177ad7c4c0550e6717a2c8572230f27cae1438a93f536ba4b4ec5dbce2e55c94b0c035edb76811b74482a862ee1","ssdeep":"3072:PllrpJdebQ75EMhNfXcBn5HbgQeAr6Pgv0TNftEU:PllrpOQ75EMhNfXcN5HGPgv0TNftEU","tlshash":"d6d4d6a1291c213cb1bfc52bb4e1b955b32de805f79b5ab4d671825ccbca7c203a3749","first_seen":"2025-12-20T19:35:38.665554Z","last_seen":"2026-01-13T08:41:15.469521Z","times_seen":5,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/css/common.0ff8eaf9.css","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /css/common.0ff8eaf9.css HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: text/css\r\ncf-ray: 9b1194541fb0712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-8af1f\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:50 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jH0B2CHTvQIjaBSdUOFamy6Oh6dr9ci3FnpCrsqtrIAV81C6ftkNb037oDE8uGiE3A0LrQQRCkqbm3O5lEy%2Fu7ADahVm3tvChVPf%2FxHcc9a7yz6BGaJleqVRjTahCkrRkhEjsKwc\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":569119,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ca9a79f1044261ca62e9615c2c4ae462","sha1":"78468a056c1b19f21156484aafd868666ddb33ad","sha256":"2cb944e9dab473313eee15a619a514c62b1eae5dfacb3f89ce3b0753d703de87","sha512":"2b2bb6aa21dd6804d69bdb47ee950fcce835a19457b53748aa7826939c611ee90cb2480897bc56b91ea7dadaf81065332eb26303eb8163526fb4494f1fca9b39","ssdeep":"3072:z5UbFVt2AaMqWJsNl3Ai3qc0jTKUaoMcjonBZhd:z8Vt2AaMqWJsNl3Ai3qBjonBZ3","tlshash":"8bc483a1255c213872bf457ef2a9a928b33d9801f7cb6af4c975869c87cd3910377389","first_seen":"2025-12-20T19:35:38.637007Z","last_seen":"2025-12-25T02:16:58.22606Z","times_seen":4,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/pages_entry-tsx.0f834983.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /js/pages_entry-tsx.0f834983.js HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9b11945c58cd712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-668\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:51 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=A1Oj7An%2FlqDGbmp3BHgRvUTho%2Fls5m0uOQQd%2FOjmxWLqCEO7JuAcU1osANZVWbIZWLAb%2FGX6O6Ahbd3ZKDRyKmXbL4ba8PkGvzUYLzg%2BPfKm7KRtOHI0RdFHe4FWcuOkGhDePLEO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1640,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1580)","md5":"a11fe9ebcdd08109ecc4b7020bf2a1b7","sha1":"be4d895c4c72aef504c59b91b65b7546b7502495","sha256":"43f89ce6f3d8ce6fcc23e3f6e2222b6b630384a4ad471e2f3c0c08d920549701","sha512":"2ef91e1f809147f02ca4e00ff0afd72a7f1c428d0f26e6c27f3a024ad366e2ac56892214031ca74c2e886bfb2b2a3aa1db38bbc73a7d51c3dd27551bc273c1ef","ssdeep":"","tlshash":"3431fcc4b974a9fd48fa5ecb9dba0516e29c3f4994308820a4e39e0db634f87751873d","first_seen":"2025-12-04T17:07:03.772987Z","last_seen":"2025-12-25T02:16:58.179535Z","times_seen":7,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/api/info/locales","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /api/info/locales HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.s.v1+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Display-Mode: browser\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/vnd.s.v1+json; charset=utf-8\r\ncontent-length: 1314\r\ncf-ray: 9b11945e0a4f712e-OSL\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nx-s-media-type: s.v1\r\netag: W/\"9dede2e656c17aeaab597d3a7b7cca29\"\r\ncache-control: max-age=0, private, must-revalidate\r\nset-cookie: locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; domain=luckydreams4.com; path=/; SameSite=None; Secure\r\nvary: Origin\r\nx-request-id: 9b11945e0a4f712e-FRA\r\nx-runtime: 0.008080\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mpTqJveShhl120iqogrhVXbMv8tbfPPPow5H3hO721j12%2FW6bOCJ%2Fk9R32724TnH9wRkN3YuEI3SQ9UtwPhSWckP2Kuga0hESfy9NWReJvXCZOt4z73H2ViV1V3FTENafUj%2BlSAd\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1314,"size_decoded":0,"mime_type":"application/vnd.s.v1+json; charset=utf-8","magic":"JSON text data","md5":"a72571b7c7698b44ecb2c0444d3247c9","sha1":"a70e8df012f1f1558c0bb13fce573d278b19086a","sha256":"9dede2e656c17aeaab597d3a7b7cca29c5c977cb04c1cea1ae07a86099821d55","sha512":"943906b663611de68dc0f7826ac1eb666f110a34f863134bf47f5a62ea2cb3bd493a9187e8a8577de665b7596201079301833729a0d6760c16d29b2ef87ed768","ssdeep":"","tlshash":"e72195ec3809ac7f171785f1599e9f84bedb18ab90ce7c0d6cd74b6912c63281195164","first_seen":"2025-11-21T09:29:21.110816Z","last_seen":"2026-01-13T08:41:15.419545Z","times_seen":10,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/payments/color/devcode-idebit_w.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/payments/color/devcode-idebit_w.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 21 Jun 2024 13:05:05 GMT\r\netag: W/\"66757a81-1034\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 7806\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a8d93b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4148,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd07afdccbb768b723897823f6c5bdbe","sha1":"5b168d105ba74e0d6aea394cc5fbbb9dd49daa6e","sha256":"8c778c37134e8f68fca5564a41fc7a685e445868ee12179c6ba6f609a82769ec","sha512":"cd191892d250b4720d5890ad8a8dacca7a1425df398a1ef79197ee634576446812841dd10fa3591f3d285ec94f55ddeef18ae074cc2526656454b98edd78bc15","ssdeep":"96:jh8q6bC/fcLPacN8kMxIL2yPs6l3mIR74Z3iBdE29:jKq6bKKN5Mxy7l3mIRs3ch","tlshash":"688185d553d7b2e0b102e7a44b55a4343e5b28fbbfa6c19ccbb06d90fa4112e898d8c1","first_seen":"2025-07-13T11:27:36.29705Z","last_seen":"2026-02-12T03:18:50.728465Z","times_seen":16,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"browser-intake-datadoghq.eu/api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A6.6.2%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Aluckydreams.com%2Cversion%3A2.1.86-f54dbe17\u0026dd-api-key=pub6944d0b05408999e2a258fb6e57933fb\u0026dd-evp-origin-version=6.6.2\u0026dd-evp-origin=browser\u0026dd-request-id=81d8886b-9374-48ea-a9a5-ae924ad12f00\u0026batch_time=1766259294550","fqdn":"browser-intake-datadoghq.eu","domain":"browser-intake-datadoghq.eu","tld":"eu"},"ip":{"addr":"34.149.115.139","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.browser-intake-datadoghq.eu","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 25 May 2025 00:00:00 GMT","end":"Sat, 30 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"62:0A:8C:EB:5B:F0:38:A4:34:6C:43:65:FE:09:67:F7:83:AD:44:C5","sha256":"73:49:93:8C:8C:F9:73:3A:66:03:C0:4D:5A:08:45:09:83:4A:2D:76:73:88:8E:6D:CE:3A:2F:EF:6E:C1:86:09"}}},"request":{"raw":"POST /api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A6.6.2%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Aluckydreams.com%2Cversion%3A2.1.86-f54dbe17\u0026dd-api-key=pub6944d0b05408999e2a258fb6e57933fb\u0026dd-evp-origin-version=6.6.2\u0026dd-evp-origin=browser\u0026dd-request-id=81d8886b-9374-48ea-a9a5-ae924ad12f00\u0026batch_time=1766259294550 HTTP/1.1\r\nHost: browser-intake-datadoghq.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.luckydreams4.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 16095\r\nOrigin: https://www.luckydreams4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":16095,"data":"{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259290687,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"69c6aae5-680d-4bae-b23f-33cbf7b79654\",\"type\":\"js\",\"duration\":68000000,\"url\":\"https://c.webtrends-optimize.com/acs/common/js/5.4/common.js\"},\"usr\":{\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259290688,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"005f282f-c6d5-412e-8046-8b65a62d4870\",\"type\":\"js\",\"duration\":70000000,\"url\":\"https://c.webtrends-optimize.com/acs/common/js/5.4/wt_debugger.js\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259290687,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"c7ad465a-ecb8-4a79-b298-36bb1d5a4873\",\"type\":\"js\",\"duration\":72000000,\"url\":\"https://c.webtrends-optimize.com/acs/common/js/6.0/wt_lib.js\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":2,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259291301,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"089de914-370e-4adf-a48b-3c1e378410d0\",\"type\":\"js\",\"duration\":21000000,\"url\":\"https://www.luckydreams4.com/js/79511.256880c4.js\",\"protocol\":\"h3\",\"size\":120952,\"encoded_body_size\":48725,\"decoded_body_size\":120952,\"transfer_size\":49533,\"download\":{\"duration\":2000000,\"start\":19000000},\"first_byte\":{\"duration\":15000000,\"start\":4000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259291306,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"8d28293b-4aac-4018-b332-c4c221b20fad\",\"type\":\"js\",\"duration\":29000000,\"url\":\"https://www.luckydreams4.com/js/datadog_browser-rum-slim.7cfae171.js\",\"protocol\":\"h3\",\"size\":578,\"encoded_body_size\":420,\"decoded_body_size\":578,\"transfer_size\":1226,\"download\":{\"duration\":0,\"start\":29000000},\"first_byte\":{\"duration\":24000000,\"start\":5000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259291308,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"d778aec3-0034-4a89-abec-348dda8b73db\",\"type\":\"js\",\"duration\":23000000,\"url\":\"https://www.luckydreams4.com/js/dexie.84dcb01d.js\",\"protocol\":\"h3\",\"size\":75719,\"encoded_body_size\":30066,\"decoded_body_size\":75719,\"transfer_size\":30874,\"download\":{\"duration\":1000000,\"start\":22000000},\"first_byte\":{\"duration\":13000000,\"start\":9000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259291558,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"bee073ea-3f04-444e-a840-9e5061fed06c\",\"type\":\"js\",\"duration\":26000000,\"url\":\"https://www.luckydreams4.com/js/cms-pages_en-entry-index-tsx.6ce7b64f.js\",\"protocol\":\"h3\",\"size\":3855,\"encoded_body_size\":1904,\"decoded_body_size\":3855,\"transfer_size\":2720,\"download\":{\"duration\":2000000,\"start\":24000000},\"first_byte\":{\"duration\":16000000,\"start\":8000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259291570,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"c8795cff-686a-4f56-937e-bd217be5e58e\",\"type\":\"css\",\"duration\":27000000,\"url\":\"https://www.luckydreams4.com/css/pages_entry-tsx.d089bdf0.css\",\"protocol\":\"h3\",\"size\":1897,\"encoded_body_size\":710,\"decoded_body_size\":1897,\"transfer_size\":1504,\"download\":{\"duration\":1000000,\"start\":26000000},\"first_byte\":{\"duration\":18000000,\"start\":8000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259291572,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"4417d5f9-b002-4af8-9b9c-c1d513eb5403\",\"type\":\"js\",\"duration\":23000000,\"url\":\"https://www.luckydreams4.com/js/pages_entry-tsx.0f834983.js\",\"protocol\":\"h3\",\"size\":1640,\"encoded_body_size\":812,\"decoded_body_size\":1640,\"transfer_size\":1624,\"download\":{\"duration\":0,\"start\":23000000},\"first_byte\":{\"duration\":16000000,\"start\":7000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259291690,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"862721a3-d2b8-4dbb-89a2-a56636fd71fe\",\"type\":\"other\",\"duration\":19000000,\"url\":\"https://widget.intercom.io/widget/x0neyd87\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259291706,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"d4f15899-657b-4fc8-b9d3-d9cd0882fb7a\",\"type\":\"js\",\"duration\":155000000,\"url\":\"https://cdn.onesignal.com/sdks/OneSignalSDK.js\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259290254,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"1ba4b7a1-a7aa-42fc-8e68-af6eae4637a7\",\"type\":\"image\",\"duration\":2115000000,\"url\":\"https://www.luckydreams4.com/favicon.ico\",\"protocol\":\"h3\",\"size\":9662,\"encoded_body_size\":1808,\"decoded_body_size\":9662,\"transfer_size\":2627,\"download\":{\"duration\":2000000,\"start\":2113000000},\"first_byte\":{\"duration\":15000000,\"start\":2098000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259291702,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"c1886619-f883-474b-843c-12632c347ca1\",\"type\":\"image\",\"duration\":224000000,\"url\":\"https://netcontent.cc/ping.png?1766259291700\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259291724,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"e8616b62-5b7d-4c23-959d-2c0afbcc50f0\",\"type\":\"other\",\"duration\":131000000,\"url\":\"https://www.luckydreams4.com/images/footer-bg-1920.12be9c59..webp\",\"protocol\":\"h3\",\"size\":24346,\"encoded_body_size\":24346,\"decoded_body_size\":24346,\"transfer_size\":25172,\"download\":{\"duration\":2000000,\"start\":129000000},\"first_byte\":{\"duration\":19000000,\"start\":110000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0,\"start_session_replay_recording_manually\":true},\"page_states\":[{\"state\":\"passive\",\"start\":2123000000}],\"document_version\":2},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259289937,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\",\"sampled_for_replay\":false},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"view\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\",\"action\":{\"count\":0},\"frustration\":{\"count\":0},\"error\":{\"count\":0},\"first_contentful_paint\":1848000000,\"is_active\":false,\"loading_type\":\"initial_load\",\"long_task\":{\"count\":0},\"performance\":{\"fcp\":{\"timestamp\":1848000000}},\"resource\":{\"count\":16},\"time_spent\":3574000000},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"privacy\":{\"replay_level\":\"mask\"},\"usr\":{\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0,\"start_session_replay_recording_manually\":true},\"page_states\":[{\"state\":\"passive\",\"start\":-1451000000}],\"document_version\":1},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293512,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\",\"sampled_for_replay\":false},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"view\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\",\"action\":{\"count\":0},\"frustration\":{\"count\":0},\"error\":{\"count\":0},\"is_active\":true,\"loading_type\":\"route_change\",\"long_task\":{\"count\":0},\"performance\":{},\"resource\":{\"count\":0},\"time_spent\":0},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"privacy\":{\"replay_level\":\"mask\"},\"usr\":{\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ncontent-type: application/json\r\ncontent-length: 53\r\ndd-request-id: 81d8886b-9374-48ea-a9a5-ae924ad12f00\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5d7788dfee9006bcb433c62d5391c681","sha1":"4a400b52f5a9f63af6135f539c2657f7096c26bb","sha256":"4fa68421eb03fd3d0497417227637e2051ef2c3ee45b80c0c3754f83e989abef","sha512":"8f0dabae52f3c12cc99696819945027a8f6d397510bd5a70a1e3128c98f27382b015bb40eb1c8e4cecc40a45d541624495ebe2d36294665f6125fb101156a680","ssdeep":"","tlshash":"aa900285d77481d6c1d2d78a240c22000111a608540049276d1480d856a587b4718564","first_seen":"2025-12-20T19:35:41.945165Z","last_seen":"2025-12-20T19:35:41.945165Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/i/s3/beterlive/GravityRoulette.webp","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:55.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/i/s3/beterlive/GravityRoulette.webp HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21740\r\ncf-ray: 9b1194727dfab4f1-OSL\r\nlast-modified: Fri, 13 Sep 2024 11:05:05 GMT\r\netag: \"66e41c61-54ec\"\r\nexpires: Sun, 21 Dec 2025 19:34:55 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nage: 22220\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21740,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 380x380, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c9f4673fd2cda19e9ef6af3e5a138994","sha1":"efbc86ca2cb57e41cfb78aca3af54316687bbf4f","sha256":"ce07d29441bba7b4678736d6825de2c511e9c5a3efdf2ba7b5e9a7d9fa88091c","sha512":"14bf01b505ee9a32c15fd75d9ec21186b52d4abb296be456ba7a5f8d1884aadd5cb00f5f2f9b455a2900b76d905b6c942aa9cd0693094bc098fb67461d4aec04","ssdeep":"384:Vpe7AOH9mxxPsC4mE7Q+sw3mifwoZHCRBYJB5ytZBtbZgV/x3zj:Vw7A+YDPzpP+BWifwGHBODgRx3P","tlshash":"a3a2f17f5f3027b388f4aea4404060702a5da8faef5c85894c2939d7a0bd4b5a3749e3","first_seen":"2024-10-04T11:16:28.618501Z","last_seen":"2026-01-31T18:03:26.390167Z","times_seen":10,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"browser-intake-datadoghq.eu/api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A6.6.2%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Aluckydreams.com%2Cversion%3A2.1.86-f54dbe17\u0026dd-api-key=pub6944d0b05408999e2a258fb6e57933fb\u0026dd-evp-origin-version=6.6.2\u0026dd-evp-origin=browser\u0026dd-request-id=7695d385-63bd-4bbc-b677-abda27a9c156\u0026batch_time=1766259296089","fqdn":"browser-intake-datadoghq.eu","domain":"browser-intake-datadoghq.eu","tld":"eu"},"ip":{"addr":"34.149.115.139","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:56.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.browser-intake-datadoghq.eu","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 25 May 2025 00:00:00 GMT","end":"Sat, 30 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"62:0A:8C:EB:5B:F0:38:A4:34:6C:43:65:FE:09:67:F7:83:AD:44:C5","sha256":"73:49:93:8C:8C:F9:73:3A:66:03:C0:4D:5A:08:45:09:83:4A:2D:76:73:88:8E:6D:CE:3A:2F:EF:6E:C1:86:09"}}},"request":{"raw":"POST /api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A6.6.2%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Aluckydreams.com%2Cversion%3A2.1.86-f54dbe17\u0026dd-api-key=pub6944d0b05408999e2a258fb6e57933fb\u0026dd-evp-origin-version=6.6.2\u0026dd-evp-origin=browser\u0026dd-request-id=7695d385-63bd-4bbc-b677-abda27a9c156\u0026batch_time=1766259296089 HTTP/1.1\r\nHost: browser-intake-datadoghq.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.luckydreams4.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 15529\r\nOrigin: https://www.luckydreams4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15529,"data":"{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293663,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"0840c200-f5c2-486f-948f-3d0067df885d\",\"type\":\"other\",\"duration\":38000000,\"url\":\"https://www.luckydreams4.com/images/preview-bg-no-gradient.eddb497d..webp\",\"protocol\":\"h3\",\"size\":452082,\"encoded_body_size\":452082,\"decoded_body_size\":452082,\"transfer_size\":452906,\"download\":{\"duration\":19000000,\"start\":19000000},\"first_byte\":{\"duration\":16000000,\"start\":3000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293762,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"944d388b-446a-40d4-b87b-491468415a4c\",\"type\":\"image\",\"duration\":40000000,\"url\":\"https://netcontent.cc/luckydreams/flags/square/en-CA.svg?v3\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293762,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"fb0a7c16-bae3-429d-829a-3597432023f4\",\"type\":\"image\",\"duration\":55000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBM0RUQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--06b69523736729cf044cb04da4a87d2bb0f7b94e/entry-support.svg\",\"protocol\":\"h3\",\"size\":3271,\"encoded_body_size\":1502,\"decoded_body_size\":3271,\"transfer_size\":2723,\"download\":{\"duration\":0,\"start\":55000000},\"first_byte\":{\"duration\":16000000,\"start\":39000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293762,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"14fdc643-c933-4ba7-8360-4ec5551e61cd\",\"type\":\"image\",\"duration\":47000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBMjdUQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--b8d2c5ff849f19eb82b8112ece2f78c670d10a66/entry-huge.svg\",\"protocol\":\"h3\",\"size\":2729,\"encoded_body_size\":996,\"decoded_body_size\":2729,\"transfer_size\":2197,\"download\":{\"duration\":0,\"start\":47000000},\"first_byte\":{\"duration\":13000000,\"start\":34000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293763,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"0b7b218c-9aff-4763-9979-54be86bc0439\",\"type\":\"image\",\"duration\":70000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBejdiQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--b49e27a76cda0195b22a25aa40a2919102e83543/interac5.svg\",\"protocol\":\"h3\",\"size\":13714,\"encoded_body_size\":5791,\"decoded_body_size\":13714,\"transfer_size\":6992,\"download\":{\"duration\":0,\"start\":70000000},\"first_byte\":{\"duration\":23000000,\"start\":47000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293762,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"5a05c24f-791a-449c-919e-f405e99f1586\",\"type\":\"image\",\"duration\":62000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBemJiQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--91aa5b01695ef30bb9d99d2d98931a73bb9c1737/visa5.svg\",\"protocol\":\"h3\",\"size\":2264,\"encoded_body_size\":922,\"decoded_body_size\":2264,\"transfer_size\":2123,\"download\":{\"duration\":1000000,\"start\":61000000},\"first_byte\":{\"duration\":12000000,\"start\":49000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293762,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"f353f230-adee-4c2a-b4f4-950c436da019\",\"type\":\"image\",\"duration\":69000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBeFhiQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--277a2ef42b974fd374f9674ea8ebaf320f5dcd8d/mastercard5.svg\",\"protocol\":\"h3\",\"size\":7547,\"encoded_body_size\":2710,\"decoded_body_size\":7547,\"transfer_size\":3919,\"download\":{\"duration\":1000000,\"start\":68000000},\"first_byte\":{\"duration\":11000000,\"start\":57000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293762,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"3ab540bd-a7e4-46c7-811f-757c457fc352\",\"type\":\"image\",\"duration\":72000000,\"url\":\"https://netcontent.cc/luckydreams/logos/payments/color/visa.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293763,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"68435ac1-e131-4641-a40e-f87d110b45dc\",\"type\":\"image\",\"duration\":71000000,\"url\":\"https://netcontent.cc/luckydreams/logos/payments/color/mastercard_w.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293762,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"8b49ee03-05a6-4a85-83d5-52b87e6b2551\",\"type\":\"image\",\"duration\":54000000,\"url\":\"https://www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBMi9UQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--d1c15f21254091f22fe35b868d58d13d71473072/entry-stopwait.svg\",\"protocol\":\"h3\",\"size\":1051,\"encoded_body_size\":540,\"decoded_body_size\":1051,\"transfer_size\":1767,\"download\":{\"duration\":1000000,\"start\":53000000},\"first_byte\":{\"duration\":12000000,\"start\":41000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293764,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"71bc0be3-cdbe-40f1-b6d7-6034932d6fa9\",\"type\":\"image\",\"duration\":72000000,\"url\":\"https://netcontent.cc/luckydreams/logos/payments/color/bitcoin_coinspaid_w.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293764,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"cc559d29-d2ee-430f-911c-ca163311995f\",\"type\":\"image\",\"duration\":73000000,\"url\":\"https://netcontent.cc/luckydreams/logos/payments/color/bitcoincash_coinspaid_w.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293765,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"a4492495-4f47-4a96-9be8-81d255816820\",\"type\":\"image\",\"duration\":75000000,\"url\":\"https://netcontent.cc/luckydreams/logos/payments/color/tether_coinspaid_w.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293765,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"9c9a9c6b-15cd-485c-84a6-db8c3b471bf9\",\"type\":\"image\",\"duration\":79000000,\"url\":\"https://netcontent.cc/luckydreams/logos/payments/color/devcode-combined.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ncontent-type: application/json\r\ncontent-length: 53\r\ndd-request-id: 7695d385-63bd-4bbc-b677-abda27a9c156\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 20 Dec 2025 19:34:55 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8c8fff60a3610a92a41d285a80f67ff7","sha1":"f512410d5ccfdcf0a9377210c36aff8866e2d99f","sha256":"ef6dd50d7e5188039b9f4ad434b4eb6ef49f3a0bbc87d264aa5c4309cf03d9f6","sha512":"69007b9c5797244fff9228c198328c47274f026541117d29abdc160ff90369567fe8a9fa168d2b452ddc0fd0b013583049d5d8a107d21e201a15aec4b598be9e","ssdeep":"","tlshash":"af90025af47467d365a1d251159137104851e911d530419581006894a78de51c3b05e1","first_seen":"2025-12-20T19:35:41.948209Z","last_seen":"2025-12-20T19:35:41.948209Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/79511.256880c4.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /js/79511.256880c4.js HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9b11945aaf5d712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-1d878\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:51 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CSwYuUBh33btk8QxfpnOxf8Ec1XIuf8a6tHq4xPANXlZIApTPBS3ZwM7gu9nfm7XaSwZz7JJRc%2Fyuv%2FxLY4i5qpejziW5TFkWgSi2t0ekMXNjq4N2SMS2Am91KHS5fPShnPejMlU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120952,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0e78f6157cbfa9f67dc4c54b0a69049f","sha1":"e68c054f46fa90939ed7f18869a2a0d42235faeb","sha256":"5405830604b1b9be11304f7e4fd8526617b1bc26365325e4a1428dc701bc7c63","sha512":"c5237f64403a09945766e22d0e7d68ec6af29bc4ca660e00333f0e01aaaea7a14f81c98e916ba77dfff0c79dea1258418a4f21d0be6b51fca15e362c1c3090c9","ssdeep":"1536:BXZLd68NJJiodNmxTPT8/pQVlO29zqq3h61vvRQRZldplPrw23+vs9jnkbJRbs7J:BRN6x7T8/k3hoJErOvSSuArHj9Y","tlshash":"bec3e699b182b07163e714a6807b1205f3396944310bc4a4f3a9ead63df619f62b3f7d","first_seen":"2025-08-08T17:06:48.157216Z","last_seen":"2026-04-04T13:28:46.537904Z","times_seen":458,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/cms-pages_en-entry-index-tsx.6ce7b64f.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /js/cms-pages_en-entry-index-tsx.6ce7b64f.js HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9b11945c48ba712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-f0f\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:51 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=8Ds%2BsEFdaQdjljuByh1fiOX24PNC8BrnTnrdY8%2Bhw2%2BcSGbkTcs5FfzxzJGxGQT3bnLO6%2B%2BYBMMOTFzscQa%2BZT8wAs5m5e5HZpl82TGeyO%2Bv8LcEXo2Hs2mF4M95bNno83dKjUBv\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3855,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3780)","md5":"07083289c594a9b9c7e8d48052d09cba","sha1":"ec7c5e0536747969abfcf8a3b77171d01810263f","sha256":"56569c85dade6a54677db12d4633f3100c4f406d8cba2c591f33cace65d7f9c4","sha512":"a2b546f42224ab4622f17091e8d7cf32a18eab377e7dc45647334d5999d0017264cdb57a5f0c0fb6bc73feafc6c9e6eddaa1fa64f80f6fa18c04e174479eecd2","ssdeep":"","tlshash":"f381ba0fdb382bb505850252698f3ae7bb41555a63228450bddd8139f378a2b203efe8","first_seen":"2025-12-20T19:35:38.622635Z","last_seen":"2026-01-13T08:41:15.423961Z","times_seen":5,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/api/games_filter","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"POST /api/games_filter HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.s.v2+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Display-Mode: browser\r\ntraceparent: 00-0000000000000000d9bec7b7a25167a1-01e26aa7a3480853-01\r\ntracestate: dd=s:1;o:rum\r\nx-datadog-origin: rum\r\nx-datadog-parent-id: 135788207006025811\r\nx-datadog-sampling-priority: 1\r\nx-datadog-trace-id: 15690197743321573281\r\nContent-Length: 228\r\nOrigin: https://www.luckydreams4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":228,"data":"{\"device\":\"desktop\",\"page\":1,\"filter\":{\"categories\":{\"identifiers\":[\"livegames-entry-canadian\"],\"strategy\":\"OR\"},\"providers\":[]},\"sort\":{\"direction\":\"ASC\",\"type\":\"global\"},\"page_size\":15,\"without_territorial_restrictions\":false}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: application/vnd.s.v2+json; charset=utf-8\r\ncontent-length: 27405\r\ncf-ray: 9b11946d7892712e-OSL\r\naccess-control-allow-origin: https://www.luckydreams4.com\r\naccess-control-allow-methods: GET, HEAD, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\naccess-control-allow-credentials: true\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nx-s-media-type: s.v1\r\netag: W/\"a23df3a8f3c84e8b538c32e7c9fa23c7\"\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: 9b11946d7892712e-FRA\r\nx-runtime: 0.022768\r\nvary: Accept, Origin\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=96v2ozhFU1cEcxpkSMLkvamNAB%2Ff910t%2F0fLl4evRU9Z1EMNyiXQSPwYODkgmUVHlG4kqZfPpdafcu5fYwHOul1rR3KqDvV3ob4d8KgcOqj1XPlZn1OvTrrOhUaDsEV4dIJw53ps\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27405,"size_decoded":0,"mime_type":"application/vnd.s.v2+json; charset=utf-8","magic":"JSON text data","md5":"fb678e0c903b1b12b2500dadf00422e2","sha1":"a0bfffa5c57e18fbd0c6435102298d08afbd4d79","sha256":"a23df3a8f3c84e8b538c32e7c9fa23c7d6662ce629669ec337d1a5ef082dd76c","sha512":"0899cb9e8c40f472975bda4fe594d9ea78e939f6cafe5539b4577109ed1305080fd6daae3edd627949f0ea8c8358abbd9f3dc8059a66897072843fdbdf1d730e","ssdeep":"192:Awugv7doGPwwNQYJxKS6YPefY0Dm7YLku0EcXybn+v7cVqgmYACy6BDYlEUanZYn:HjhVremEIaAR96JtbnXENqdCFdGTWP5","tlshash":"a2c2ad56c54679adceb49b96946e3dd063ed243b00829c66c2c48fc690caff82351b3f","first_seen":"2025-12-20T19:35:38.618659Z","last_seen":"2025-12-20T19:35:41.951958Z","times_seen":3,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/frame.48acc92d.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /frame.48acc92d.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.luckydreams4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 237122\r\nlast-modified: Sat, 20 Dec 2025 14:31:39 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: Elj0UdJn6bzretPqrFFHt9ncKu1WpI1B\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 20 Dec 2025 18:34:23 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"0616612ca5e86d5ac4021fd2ef73fd3f\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: g9V6Noo7UyBMT_P2uh7Clf9h4iNmKhf3seHg08BRBKfbJmSsm1B02g==\r\nage: 3632\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1108884,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65464)","md5":"ad9220d8c881aca9f950556a0b543f03","sha1":"9f2aef18c47d74eb2e2c2018bbe1f475b06147d9","sha256":"f64ca4198743d84ffa13297142086d447cdc1b1344ce366f342705bf05e87988","sha512":"b73b93468282c42de2ca1ffcd656177a95baa640a51c3108db1c4ffd285efec92642cf6a7f2934779c096c94eba3ec09673b686a4b73e27f60e9d307c9cd23c2","ssdeep":"12288:rY2hwT5wJLfV1R+D54hTguKsiBuZLEiGLV:WcbED54Isi9","tlshash":"6325b5ccb2d2f06a43976575812f200bf33ea999b54d8050e629d8d1bcb958da237f78","first_seen":"2025-12-20T15:01:59.651469Z","last_seen":"2026-01-13T02:20:23.272879Z","times_seen":915,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"nexus-websocket-a.intercom.io/pubsub/5-MWKEzlvzpmKjmU_H__0l7QcwiVSLz5xASKuJD_Pj5S-_fKOYpmMtyc4Bu8XJ7MbixzoLW_IJmBWKg_ydBlFtaOxLyVT_QLPXUzbm?X-Nexus-New-Client=true\u0026X-Nexus-Version=0.17.4\u0026user_role=visitor","fqdn":"nexus-websocket-a.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"18.97.36.62","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:56.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexus-websocket-a.intercom.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 08 Sep 2025 00:00:00 GMT","end":"Wed, 07 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5B:20:11:79:9E:6F:58:15:2B:89:DD:5C:DE:80:08:89:D6:0E:18:4D","sha256":"B8:10:76:1A:37:66:06:C7:4D:AE:50:03:73:69:52:0C:37:BD:46:1C:EA:36:07:26:E8:3C:FF:FA:39:BA:CA:81"}}},"request":{"raw":"GET /pubsub/5-MWKEzlvzpmKjmU_H__0l7QcwiVSLz5xASKuJD_Pj5S-_fKOYpmMtyc4Bu8XJ7MbixzoLW_IJmBWKg_ydBlFtaOxLyVT_QLPXUzbm?X-Nexus-New-Client=true\u0026X-Nexus-Version=0.17.4\u0026user_role=visitor HTTP/1.1\r\nHost: nexus-websocket-a.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.luckydreams4.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: xpTRDKcejw+oVJyRsuUEOg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Sat, 20 Dec 2025 19:34:56 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 6DcHWKDpiKWZ3qpcAwg3LE0/mOY=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover; client_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T01:47:03.978699Z","times_seen":13354468,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":12,"dns":0,"connect":95,"send":0,"wait":94,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/payments/color/devcode-mifinity_w.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/payments/color/devcode-mifinity_w.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 21 Jun 2024 13:05:05 GMT\r\netag: W/\"66757a81-3c0e\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 37326\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a8d8eb4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15374,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"08b76f82738a99db13eb8bbe45e8da4f","sha1":"ecdde1aa2a1070bcd162113629c95681e0e6ad69","sha256":"7b7fd2f7494fab3e2c01f3a827c28eedac472e9bc59ee66da2c3f1cdc010bc16","sha512":"778351296b30fcbd3c57d32564e9157ddd8f3190cf7773b5e8d2db190d8c99feff32fe71986c137c626fac69f39758f5558fea12e970dc2934e15c45466f7575","ssdeep":"192:L6S81YXdiWEwI/SS7tdMmB8q8oNH6rPRPbPjZZ5rJZ0wwtwVif/fMvU/Sfvv:t8Wa0NQ8q8o0BPjPVDV0/fMsaXv","tlshash":"506247e7f3d8e6f2f04ae39ce815d0367a6724bb2695c7808254ef5fa6184516c8dec0","first_seen":"2025-02-22T05:44:22.453359Z","last_seen":"2026-02-12T03:18:50.650255Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBLzNYQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--22f0a577e20a6e6b815b24b5ab0744268bf167b1/beterlive.webp","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBLzNYQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--22f0a577e20a6e6b815b24b5ab0744268bf167b1/beterlive.webp HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 47296\r\ncf-ray: 9b11946c7f99712e-OSL\r\ncontent-disposition: attachment; filename=\"beterlive.webp\"; filename*=UTF-8''beterlive.webp\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"d2ed1bdf1a76f591a4b07350333d3f3c\"\r\nlast-modified: Tue, 14 May 2024 10:32:32 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC2598DCF30\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:54 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vaOr50sLx20fsiEu9r%2BERn%2Bp8hPgWEN7C%2FjPHvsOUtvhQtr6JpZW0SZpXZMp9YNKV1AmHe3Fv2lOJqHqz%2B6qLuRNlQeO63VKQ2Vz8MIQID%2Fo3tvWa5itEES%2FaFa%2BwQnmtwKC9ZRQ\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47296,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d2ed1bdf1a76f591a4b07350333d3f3c","sha1":"516e28d586c1b62e95ddfc2b4cf79f27c69640e1","sha256":"0e5d0dd97db83aa15dc8235698dfc38485ebf216f8eb96cfeb5d94bbb3f7a457","sha512":"f083e50d84e51c1f11eac75ba18a52ed21158a14aba47af0c19ecd6640d2ab2970c9d88efab00ee63c45f47e7f259c0895e16713d7c58c0186662ec1f1764d0d","ssdeep":"768:XFax2SGTcZCeRi5ibIfn5jmMLg9e63g+4AoVKzGaxRaS3ub/fGQO3cxDLu1uuKUW:Xu2NECci595jW9ew7QaaO3chC1uuKU8N","tlshash":"d42301e418b0b259ea3e19febc412973ccdb585c1a0b1ad08814eab47d13773e6a36d5","first_seen":"2025-07-13T11:27:36.341713Z","last_seen":"2026-01-13T08:41:15.496187Z","times_seen":13,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/i/s3/pragmaticexternal/GatesofOlympusSuperScatter.webp","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:55.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/i/s3/pragmaticexternal/GatesofOlympusSuperScatter.webp HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 34916\r\ncf-ray: 9b1194725dddb4f1-OSL\r\nlast-modified: Fri, 25 Apr 2025 15:25:05 GMT\r\netag: \"680ba951-8864\"\r\nexpires: Sun, 21 Dec 2025 19:34:55 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 80246\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 380x380, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"955fc450d011becc4a127f89d99dc7de","sha1":"a3425f02ba884315f3c22848d70a0651bb66cff3","sha256":"856acf9b355efe7120f53f119b1dd6b4263c789b78feb8fea76effbf4efc344c","sha512":"c5812f78ba3b93b97e47bb02ee78248d920537251a1eafd4d5b13dd83e367c14635d5afffbd9b3949bd29c70533beecde9dd65a4b8f932db265aaa69d5f84ed9","ssdeep":"768:iH+9EwR1glFj6nMp9uodP2NGbo0t0zSl1Pj/PBdyl/:dKN15dP2N8rlBjXBo","tlshash":"95f2f1130e0479720f172c245cdca1d052c9c358e62edcd97558ee26e69ac9bb39eb0b","first_seen":"2025-05-20T12:25:57.577301Z","last_seen":"2026-04-01T11:15:29.414142Z","times_seen":92,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"browser-intake-datadoghq.eu/api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A6.6.2%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Aluckydreams.com%2Cversion%3A2.1.86-f54dbe17\u0026dd-api-key=pub6944d0b05408999e2a258fb6e57933fb\u0026dd-evp-origin-version=6.6.2\u0026dd-evp-origin=browser\u0026dd-request-id=63c8825d-d2d9-4a3e-b6c0-c12896547523\u0026batch_time=1766259296078","fqdn":"browser-intake-datadoghq.eu","domain":"browser-intake-datadoghq.eu","tld":"eu"},"ip":{"addr":"34.149.115.139","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:56.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.browser-intake-datadoghq.eu","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 25 May 2025 00:00:00 GMT","end":"Sat, 30 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"62:0A:8C:EB:5B:F0:38:A4:34:6C:43:65:FE:09:67:F7:83:AD:44:C5","sha256":"73:49:93:8C:8C:F9:73:3A:66:03:C0:4D:5A:08:45:09:83:4A:2D:76:73:88:8E:6D:CE:3A:2F:EF:6E:C1:86:09"}}},"request":{"raw":"POST /api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A6.6.2%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Aluckydreams.com%2Cversion%3A2.1.86-f54dbe17\u0026dd-api-key=pub6944d0b05408999e2a258fb6e57933fb\u0026dd-evp-origin-version=6.6.2\u0026dd-evp-origin=browser\u0026dd-request-id=63c8825d-d2d9-4a3e-b6c0-c12896547523\u0026batch_time=1766259296078 HTTP/1.1\r\nHost: browser-intake-datadoghq.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.luckydreams4.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 15371\r\nOrigin: https://www.luckydreams4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15371,"data":"{\"_dd\":{\"format_version\":2,\"drift\":2,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259291781,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"1a1c4ef0-d677-46da-918d-861587214326\",\"type\":\"image\",\"duration\":82000000,\"url\":\"https://www.luckydreams4.com/images/decorations/christmas/logo--1248.webp?hash=a9b518d72446564a3b87602f73bb9ea2\",\"protocol\":\"h3\",\"size\":11314,\"encoded_body_size\":11314,\"decoded_body_size\":11314,\"transfer_size\":12130,\"download\":{\"duration\":1000000,\"start\":81000000},\"first_byte\":{\"duration\":23000000,\"start\":58000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259291802,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"c3e48afc-26c0-477c-bc7f-f5792ba8e5dc\",\"type\":\"font\",\"duration\":80000000,\"url\":\"https://www.luckydreams4.com/fonts/hero-new-600.f11dde99..woff2\",\"protocol\":\"h3\",\"size\":33084,\"encoded_body_size\":33084,\"decoded_body_size\":33084,\"transfer_size\":33900,\"download\":{\"duration\":2000000,\"start\":78000000},\"first_byte\":{\"duration\":13000000,\"start\":65000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259291807,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"348dd215-a97c-4272-9dac-266c2878b54a\",\"type\":\"font\",\"duration\":102000000,\"url\":\"https://www.luckydreams4.com/fonts/hero-new-700.598ff042..woff2\",\"protocol\":\"h3\",\"size\":32848,\"encoded_body_size\":32848,\"decoded_body_size\":32848,\"transfer_size\":33674,\"download\":{\"duration\":2000000,\"start\":100000000},\"first_byte\":{\"duration\":17000000,\"start\":83000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259291808,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"2d689fc3-bf1c-43b4-9049-98b8fa1cf899\",\"type\":\"font\",\"duration\":97000000,\"url\":\"https://www.luckydreams4.com/fonts/font-icons.93a30ad2..ttf\",\"protocol\":\"h3\",\"size\":38540,\"encoded_body_size\":38540,\"decoded_body_size\":38540,\"transfer_size\":39368,\"download\":{\"duration\":1000000,\"start\":96000000},\"first_byte\":{\"duration\":13000000,\"start\":83000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259292208,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"2a67db27-a166-4a50-b8b8-d581f1649096\",\"type\":\"other\",\"duration\":208000000,\"url\":\"https://www.luckydreams4.com/images/entry/preview-bg-no-gradient.webp?hash=e24a32feb2a4f9735a8492bcbbb825ac\",\"protocol\":\"h3\",\"size\":452082,\"encoded_body_size\":452082,\"decoded_body_size\":452082,\"transfer_size\":452896,\"download\":{\"duration\":22000000,\"start\":186000000},\"first_byte\":{\"duration\":14000000,\"start\":172000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259292231,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"4cc8231e-6465-4652-b5e9-cf0e396fc25a\",\"type\":\"font\",\"duration\":186000000,\"url\":\"https://www.luckydreams4.com/fonts/hero-new-500.dfebb89d..woff2\",\"protocol\":\"h3\",\"size\":32760,\"encoded_body_size\":32760,\"decoded_body_size\":32760,\"transfer_size\":33584,\"download\":{\"duration\":23000000,\"start\":163000000},\"first_byte\":{\"duration\":12000000,\"start\":151000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false,\"span_id\":\"5037087495700575651\",\"trace_id\":\"12265724361998515507\"},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293167,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"5223881c-6413-4327-b50c-d42a688d3644\",\"type\":\"xhr\",\"duration\":622000000,\"method\":\"POST\",\"status_code\":200,\"url\":\"https://www.luckydreams4.com/api/games_filter\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false,\"span_id\":\"3588913767575315806\",\"trace_id\":\"12579585880680406518\"},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293170,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"4a66a20f-54e3-42c2-ad50-3f15babcf833\",\"type\":\"xhr\",\"duration\":140000000,\"method\":\"POST\",\"status_code\":200,\"protocol\":\"h3\",\"url\":\"https://www.luckydreams4.com/api/games_filter\",\"size\":86593,\"encoded_body_size\":86593,\"decoded_body_size\":86593,\"transfer_size\":87873,\"download\":{\"duration\":41000000,\"start\":99000000},\"first_byte\":{\"duration\":69000000,\"start\":30000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293505,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"79f47f8e-578a-41e5-82ef-b100b751935f\",\"type\":\"xhr\",\"duration\":56000000,\"method\":\"GET\",\"status_code\":200,\"protocol\":\"h3\",\"url\":\"https://www.luckydreams4.com/locales/en-CA.json?hash=5b0adf013b088bf6645c9b90e06dae48\",\"size\":24945,\"encoded_body_size\":7336,\"decoded_body_size\":24945,\"transfer_size\":8064,\"download\":{\"duration\":1000000,\"start\":55000000},\"first_byte\":{\"duration\":51000000,\"start\":4000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293083,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"1b7e1b63-692f-431e-ad5c-045149a6c1be\",\"type\":\"js\",\"duration\":249000000,\"url\":\"https://www.googletagmanager.com/gtm.js?id=GTM-PH4QS9N\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293084,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"ddcb8feb-a07a-4dbd-974c-34b7e03947f3\",\"type\":\"image\",\"duration\":324000000,\"url\":\"https://www.luckydreams4.com/apple-touch-icon.png\",\"protocol\":\"h3\",\"size\":2586,\"encoded_body_size\":2586,\"decoded_body_size\":2586,\"transfer_size\":3451,\"download\":{\"duration\":1000000,\"start\":323000000},\"first_byte\":{\"duration\":19000000,\"start\":304000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293085,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"533b8937-114a-40ca-b46c-29834e89a87c\",\"type\":\"image\",\"duration\":320000000,\"url\":\"https://www.luckydreams4.com/icon.svg\",\"protocol\":\"h3\",\"size\":1544,\"encoded_body_size\":750,\"decoded_body_size\":1544,\"transfer_size\":1551,\"download\":{\"duration\":0,\"start\":320000000},\"first_byte\":{\"duration\":16000000,\"start\":304000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":2,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293415,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"cc01c06d-10c2-4293-a637-97172d2402b2\",\"type\":\"js\",\"duration\":20000000,\"url\":\"https://www.luckydreams4.com/js/websockets-legacy.d3780a4c.js\",\"protocol\":\"h3\",\"size\":39566,\"encoded_body_size\":13906,\"decoded_body_size\":39566,\"transfer_size\":14713,\"download\":{\"duration\":0,\"start\":20000000},\"first_byte\":{\"duration\":13000000,\"start\":7000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293648,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"4b9ed2bf-79d3-4fb0-b099-926d5b58b243\",\"type\":\"js\",\"duration\":22000000,\"url\":\"https://www.luckydreams4.com/js/cms-pages_en-CA-entry-index-tsx.c0923eb3.js\",\"protocol\":\"h3\",\"size\":3915,\"encoded_body_size\":1952,\"decoded_body_size\":3915,\"transfer_size\":2766,\"download\":{\"duration\":1000000,\"start\":21000000},\"first_byte\":{\"duration\":18000000,\"start\":3000000}},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ncontent-type: application/json\r\ncontent-length: 53\r\ndd-request-id: 63c8825d-d2d9-4a3e-b6c0-c12896547523\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 20 Dec 2025 19:34:55 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"681d189d35ff01bc8b9c15c399ad8bdd","sha1":"1a86583c2a405a9149c67068fed8864a5c671cdf","sha256":"4f0459e1de44ad163c892a898a651622f2cd49d146c6322904ab194413ef703f","sha512":"57c09fbd3eff4861acd45153237db27b953b9e458abde6ede9eb53f7593701cbad1cfc50aa49d838c45b4bad6021b54df65cc8584673614dbd6322d9f7825144","ssdeep":"","tlshash":"fc900443c45414cf54cc10134c544f4414d1fd5155404c3d1cd151f55117130570dc37","first_seen":"2025-12-20T19:35:41.956463Z","last_seen":"2025-12-20T19:35:41.956463Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/fonts/hero-new-400.a46bf92d..woff2","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /fonts/hero-new-400.a46bf92d..woff2 HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/css/main.a6455864.css\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 32916\r\ncf-ray: 9b11945659dc712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:30 GMT\r\netag: \"694539ae-8094\"\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:50 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LC1X55lLrw6SnPhLDfQJRxUq33KVK1R7XEu9JQGp%2Fs%2FDS6XozrHtElut%2BdqWdS6Q84lqK7tf38Lup%2BcpKoiKqGVWbFClHFKrFSh5kKV7RzejZ7g7F2wSEJqZ729jxhthsvVl%2BAq%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32916,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32916, version 1.0","md5":"a6e9108ededa61d5511d3ace860bc073","sha1":"97cc44ea0d565ab1a174a8bd2077a3e164b2581c","sha256":"f8dcd32fcd54050faa5e5a77dccb5deea0fc7e5fb5dd1bde72c4cce3a420da35","sha512":"856e161813564c676b03a4154f3b0850035ea0434fa0ffe99341f72c02b9c661556ff64205dd08a6a1052e8ab752e56320ba8006b661dd839dd5ff655a0d89d7","ssdeep":"768:yvD+Z4lbHeB3OVh7d8Yql6MJxxV9x22ayeqRxYgJk:yiZ46OVI16yrxIyeqRtJk","tlshash":"eee2e171d4c90e6fe35e125e2c1a0a1ecc2ac4798405172a7b726d4e889df67bf42ba4","first_seen":"2023-04-06T21:35:48Z","last_seen":"2026-03-24T13:19:28.907553Z","times_seen":448,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.webtrends-optimize.com/acs/common/js/5.4/wt_debugger.js","fqdn":"c.webtrends-optimize.com","domain":"webtrends-optimize.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.webtrends-optimize.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 27 Feb 2025 11:12:15 GMT","end":"Sun, 29 Mar 2026 16:26:35 GMT"},"fingerprint":{"sha1":"01:10:A3:01:70:40:A9:D8:61:1E:E0:15:C9:05:FB:21:F5:69:1A:D0","sha256":"8E:36:F6:A7:EA:52:8B:C5:2E:0C:60:38:5F:0D:12:85:95:19:73:F0:79:6F:0C:2B:23:A9:AA:44:9D:24:B8:F5"}}},"request":{"raw":"GET /acs/common/js/5.4/wt_debugger.js HTTP/1.1\r\nHost: c.webtrends-optimize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 1720\r\nlast-modified: Mon, 08 Mar 2021 17:39:43 GMT\r\netag: \"10d0-5bd09eb4d5758-gzip\"\r\ncache-control: public, max-age=2678400\r\nexpires: Thu, 18 Dec 2025 12:24:11 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-azure-ref: 20251220T193450Z-17f644c5599znfvnhC1SVG1k2400000016d0000000007zrp\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":4304,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4005)","md5":"8f0d38d393b3ad1ba8c74c4e23aaa2ed","sha1":"0e396f7b44d099242dc4114dd49d442732713251","sha256":"0f28f8ef3c65ede1c3171b6e44188fca93e15b53d362d0bbb9a22c93d3f73fdd","sha512":"e5b81c4af5867dacdac6bfd8a7d62bc0a4da44e6d6751e95a215d344a222b325a573a2965be6547b974c2e8043f2d5fad3faf59f2891da02d715be957c6c4c66","ssdeep":"96:S4dO9eJ67NZG9CTA8CxoBVN2OXQXH9XqlzJv5axRs/3uy:S+aNYj8CmrNzXgcpl5axRKv","tlshash":"93918915a334343082f5a6f24d2f06ae7a3185913904f8aebb50fede9ca5f860453e5b","first_seen":"2023-03-07T12:21:19Z","last_seen":"2026-04-02T10:58:17.177225Z","times_seen":664,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/payments/color/devcode-muchbetter.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/payments/color/devcode-muchbetter.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 01 Jun 2023 06:20:03 GMT\r\netag: W/\"64783893-2255\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 14492\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a9da0b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8789,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f9e2cf8611abac7cf288c416e84b560","sha1":"d9ffe22059f7af2d54cd103ee0b890de57c0b5ac","sha256":"c28b8b4ba9e9009e07160e69e09c78005524a5ce4107adc0242001495f4cd567","sha512":"ab3966788d724f911eb97edeff5f703920e71c411a83e0416c58f7d861db7bdf640a59de8325938c200eff3b6d22d52b5f5d572735dec0d87f30aaa82d386063","ssdeep":"192:5zWgLX0pqeCtRYD10RdZ2NRItiDdE2fujwzdifiZoDh4Y6usU:5L0pCRYC92kihhxUiZoDh4Y6uD","tlshash":"3602a6d173a0b2f4b649f7bce8135521bd6f3cbe7b55c689c3a15ea4b5620188a8ccd0","first_seen":"2025-07-13T11:27:36.377321Z","last_seen":"2026-02-28T10:29:16.992955Z","times_seen":20,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBemJiQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--91aa5b01695ef30bb9d99d2d98931a73bb9c1737/visa5.svg","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBemJiQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--91aa5b01695ef30bb9d99d2d98931a73bb9c1737/visa5.svg HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-disposition: inline; filename=\"visa5.svg\"; filename*=UTF-8''visa5.svg\r\ncontent-security-policy: block-all-mixed-content\r\netag: W/\"7b9c5cd8e774bfaea3afe46b847f2a23\"\r\nlast-modified: Tue, 14 May 2024 10:34:09 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC6B326C5DD\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 1\r\nexpires: Sat, 20 Dec 2025 20:34:53 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2FJIAan4aYzVUgxbJh3y05Eqg8Ub1X%2B4k2eoKktou6ShUTDQlf4mdOjHykAFGfCBur2qj%2B782YOeiX3EDLWfKFNv83Tf%2B9JazlVQuyk2VpdUWgd8uxXqz5IlJgQ9et0Zl%2BVx9j3Z1\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b11946a5dca712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2264,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b9c5cd8e774bfaea3afe46b847f2a23","sha1":"ea0973dd3c9aa4a72d43385344a585295282995a","sha256":"56f005d9b96a635a48d0c9826e8b41effbc067fef67308ebc049c4f35231c284","sha512":"741fbf2ca5e0f9517fee8022f14958a2aee4db917a5ca7a66ef8f7f2faa712c6f46cb91de3596fc719d3abac60e599bfb06ef83df88c5370bebc84ad2751df12","ssdeep":"","tlshash":"b44143d0a348c185c8015bbdc77a21e0353724fdb1188a8473e9fe96396e6be588ded3","first_seen":"2025-07-13T11:27:36.342452Z","last_seen":"2026-02-12T03:18:50.676037Z","times_seen":16,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/payments/color/devcode-combined.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/payments/color/devcode-combined.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 21 Jun 2024 13:05:05 GMT\r\netag: W/\"66757a81-3c6f\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 14589\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a7d72b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15471,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"261317de8969d3b41ac55880768812e9","sha1":"db3aafe78261a4dcc46bac9b66134479a9d87f67","sha256":"23e34fdbd34023d3652661bb0659db1fafe0ef9c69c59c49ffa0a326791dd964","sha512":"c88683488e081f5dde3b646fd9a5f639526eab2d9fd76a9446982f3e619841808872b6ff69f2f85f8e0a61ef3389b8d31cb68b80dee2491a5d26d84a3eda8e6d","ssdeep":"384:Vy4YbiB28qYUI/KGo6A9avW6qRxrqF73K3NaFF0Mr5:VN3RyCvW6qDUO8FF0g5","tlshash":"f36250a5b3e5b2f4f045f7f88211d8717e6328bf3a32c7994be16da5aa0101c48d9cd6","first_seen":"2025-02-22T05:44:22.437506Z","last_seen":"2026-02-12T03:18:50.610067Z","times_seen":17,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBN3YvQ1E9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--1136cadc06bceb14c6b83bc6885550241a4f7495/Octoplay.webp","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBN3YvQ1E9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--1136cadc06bceb14c6b83bc6885550241a4f7495/Octoplay.webp HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 53454\r\ncf-ray: 9b11946c4f63712e-OSL\r\ncontent-disposition: attachment; filename=\"Octoplay.webp\"; filename*=UTF-8''Octoplay.webp\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"001cc25e93952174e9dce3320e6b7a06\"\r\nlast-modified: Wed, 21 May 2025 11:38:01 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC259E0766E\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:54 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YI9zPJ2c33SWqt%2F9BN677e1mkXzLRZGrutuL9tbEhQkh1S1W8oOGgSiFfweld0N4s9mUXwWdELev6QhU0LUvEfs22QInH%2FWS%2BwPXDTCNsWPwBs3dp%2BiRIBPGMuBg5Kpd3s5tKzjP\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53454,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"001cc25e93952174e9dce3320e6b7a06","sha1":"8a01af9b3827191ac43d4a3d38f66c31543b7ca3","sha256":"10ee8a06afe698dd3677a680c3f21858a30c62241e9b0a1bd3383150ea418be3","sha512":"715c35795143175a7c9eaaf0c8762b9c78f485843b449bcb753c81d17d92bdbeadf9f06f22e5681f9c51d1c8d9fb7c5e5da61c6e4c7a7b1da2392ac0eb848823","ssdeep":"1536:jvGpyAzLfA58iA6OTRsCGIkh7SxKbCoC/Qb2vfOh7kVyorF:OfAeVDlEIkRStdoyOO7","tlshash":"1c33014378b804bb9b8edd1d6ed19b0c8b31d407769de8891ab428370d06f7c462a0e7","first_seen":"2025-07-13T11:27:36.400554Z","last_seen":"2026-02-12T03:18:50.683618Z","times_seen":16,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBN0QvQ1E9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--1bf2fcc1ea84990dfcb06e0c278cad32439d3754/Yggdrasil.webp","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBN0QvQ1E9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--1bf2fcc1ea84990dfcb06e0c278cad32439d3754/Yggdrasil.webp HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 54702\r\ncf-ray: 9b11946c7fa6712e-OSL\r\ncontent-disposition: attachment; filename=\"Yggdrasil.webp\"; filename*=UTF-8''Yggdrasil.webp\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"a3da54d13ef3b22f8024f63d40341b48\"\r\nlast-modified: Wed, 21 May 2025 11:37:51 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC25BE383A4\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:54 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=q2NI4bswBG6%2FFKr2p2cKR0GljKCmmTMUMZnVd%2BQytDixoQmqfJoSROEMWIzT9IZ4VZx2k4wexDOdl9XZ6axKNcmEAt0RbeVWJsZawT5RgEmBz43SUsQ36qTVKR4Zb5SGH8hp4EDk\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54702,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a3da54d13ef3b22f8024f63d40341b48","sha1":"9341d732e8b7ca4a3957af1bf51bbacb97a15980","sha256":"19da5b9ee7c84d85b5fd8f231382a2f895d49e1bb9f52a4583a9926d56f111f5","sha512":"14a1188a31dbd4bb84aaa7079154dece607e3f011a44f6ed85b54c8a69d6278e1acd2698786e9a0c6ef8d801f1902e1b152f0920d2f610e485bf659d9f7159bc","ssdeep":"768:+vGIay1JUzJ1USxltc54NPNgA6OTBPJYrATQ1v1ZHWlyBinWW0SwVCNaRQqsu1I5:+vGpyAzLfA58iA6OTo71tZ2lhp0TVCSA","tlshash":"d833f1d3a0ab14bb429b98370c16330e4f21f156f65115b9d7fa229ec05ebe1877d846","first_seen":"2025-07-13T11:27:36.401238Z","last_seen":"2026-02-12T03:18:50.584422Z","times_seen":16,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/i/s3/pragmaticexternal/GatesofDiamond1000.webp","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:55.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/i/s3/pragmaticexternal/GatesofDiamond1000.webp HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30522\r\ncf-ray: 9b1194725dd4b4f1-OSL\r\nlast-modified: Mon, 21 Jul 2025 09:20:08 GMT\r\netag: \"687e0648-773a\"\r\nexpires: Sun, 21 Dec 2025 19:34:55 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 74445\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30522,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 380x380, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"da45966a83ff50d06f2bb6df0cc8a05a","sha1":"6c2da5edd84f968698891a7134c3ba3f03d9e964","sha256":"63874c033ce3e75cb4a06191f1350247952df113016e3e15af8c79368643a236","sha512":"6f340668c4acd885a0fe2f653ea0367341f48118fd219b344b1d01b8b2ea58f0b5329c9ca260e78a9f3a46975380db8e57b135b816e99acc3ab8d50156f5303b","ssdeep":"384:K2zZz+jIM73UFn4/mFD7Mnt7kGvWdNRKkxfItGMACJiPEUk/mkEBWO3CCfOFEt4F:KGZmN3mFPmL4ykxQtGPIYQMr3XOpXFQ8","tlshash":"d6d2f1b9ff39968d86a4064c8d87c2020df604e136dec0562d27ed7e73074627a5a2bd","first_seen":"2025-11-30T11:50:30.650659Z","last_seen":"2026-01-13T08:41:15.530754Z","times_seen":9,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/payments/color/bitcoincash_coinspaid_w.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/payments/color/bitcoincash_coinspaid_w.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 21 Jun 2024 13:05:05 GMT\r\netag: W/\"66757a81-260b\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 49979\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a6d5bb4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9739,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e6540e65bddae95aae64426ebbe094f","sha1":"692d92cc3de08ea63b9ac1b54a01628f73f00549","sha256":"b13a423668ff45d2ed7c290891a2c00ae370a01b32e29e0a7f43b8161e5d38cc","sha512":"0fa15d6cc9a8f237c182b325b1794a7a060866af35e9724cb27284e721d773ae29875b05c6ffb8f3e2015457537c527e931828911ce01cc0ed1af57f0b3afeec","ssdeep":"192:sGu6u9a+fbLZaMVZt818nEy3rPRRUq5Vljl5c8G7ueCggb43mmxfFTfP:sGJkNnZVR8iEYrPRRp5T27TC+L","tlshash":"321252e1a7eca3f8600af3e8a12694753ea324fe7356ce59c7506d99b50241e1cc9cc6","first_seen":"2025-07-13T11:27:36.357484Z","last_seen":"2026-02-12T03:18:50.730223Z","times_seen":16,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/providers/color/100hp.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/providers/color/100hp.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 28 May 2024 11:45:04 GMT\r\netag: W/\"6655c3c0-923\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 60090\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a9da7b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2339,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d6a24e4a3679b2da89c530b2623e4fe2","sha1":"5f7e5f21a3e492101fbe11e653386b0c2713d3b0","sha256":"1b4b9c56a897643707a3620662ba5140e236a2fdc418813c02625116a4108563","sha512":"6cb5ac54576262f739be8fc48001a2b68caff39fc4c13c1b833ad71df3c1f77da3e708396579cad7f64138015ce0d5ecab3b7c93f1c084190c622c65e6a39690","ssdeep":"","tlshash":"0b419de73048a0f0ae084b62a59d2cbf717185fcddf18a9496a7251b34c86772d5cec6","first_seen":"2025-07-13T11:27:36.271125Z","last_seen":"2026-02-06T08:34:03.520685Z","times_seen":11,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBeHJoQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--6058e01bff283e80cc9080ead8df5d79f217b429/spinomenal-64cccc477cb1a.webp","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBeHJoQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--6058e01bff283e80cc9080ead8df5d79f217b429/spinomenal-64cccc477cb1a.webp HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11936\r\ncf-ray: 9b11946c7f9b712e-OSL\r\ncontent-disposition: attachment; filename=\"spinomenal-64cccc477cb1a.webp\"; filename*=UTF-8''spinomenal-64cccc477cb1a.webp\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"b193a5c43a6a25bfddc26c42b047cf61\"\r\nlast-modified: Tue, 14 May 2024 10:46:02 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC25B8DFB34\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:54 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Anqucs%2BY9CM1jM5bt%2BlhWkxqcSVDOghUn5NyLfVjRZr70Aw%2F%2B7%2Fap7E6XNtGaTPXdrTQrRy4Gv24jos8wHt4YnwS3nAbKQ4fdF6jzCf9ho%2FKZ9LbBYhZgI5be8teDywWdB56aFDa\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11936,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b193a5c43a6a25bfddc26c42b047cf61","sha1":"23aba995da72167eed5c392dd0be297f6b90375a","sha256":"e51268aecaedfe808af50cee49cba674d2a823863bcfa68b4169bf02910c1ee3","sha512":"68e1873d6aa6b80458a75c0749b638ad64389ec7432802def2d7216d9bdbb5172d0a4316b0c56109b84a606815599249d8748d3ae2401baf85db278e58636152","ssdeep":"192:xQbkSU9zZovGPnFSgwqIfvviaC7RNBCr834aaX2dS1aYTh38XkExuYCzO:xQeVEGPwgzIaa0RNMr834NX8+t6x78O","tlshash":"4732c01c15abbfc7411d71649ba30b1bd9d5bacc039cd91e22446c0a59b3bea5054ff8","first_seen":"2024-05-22T15:39:23Z","last_seen":"2026-01-13T08:41:15.534248Z","times_seen":16,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/i/s3/softswiss/ElvisFroginVegas.webp","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:55.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/i/s3/softswiss/ElvisFroginVegas.webp HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42094\r\ncf-ray: 9b1194726de2b4f1-OSL\r\nlast-modified: Thu, 07 Apr 2022 09:25:02 GMT\r\netag: \"624eadee-a46e\"\r\nexpires: Sun, 21 Dec 2025 19:34:55 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 80246\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42094,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 380x380, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f57d7cf8be0849e33f189ae85669c39c","sha1":"de0da88294127861a23ec22845551fa7ace15696","sha256":"4e130c9c8dc824cb4c4e52b989ead89de2b5256d0ee1fafcfc98a168c4ed2864","sha512":"4c88519e147871ddab930f1c460888a4f06ca0a540e1464d26150f54abc5dbbc2552d4f3006de9028bb2c84a52e92909a29bff3f40b86ff2e309773b898b0e4c","ssdeep":"768:Xwy/hIFn2UBxxXCtd2+qpe2onRV8tqPaoLQCQuz/QngkOEk8Tb+MItQtZU7a6OfK:Xj/hIpdyie2yTiYp1NQgZebnICkuxS","tlshash":"13130202cb6ccd7d159a7df1322305d5b49bbdc689078d69d5b6068152efb08087df8a","first_seen":"2023-04-06T19:54:32Z","last_seen":"2026-03-28T08:50:41.094988Z","times_seen":156,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/payments-lib/v1/index.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /payments-lib/v1/index.js HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9b1194541f9b712e-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 94937\r\ncache-control: max-age=300\r\netag: W/\"index.164a18df3b.js\"\r\nexpires: Mon, 22 Dec 2025 19:34:50 GMT\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5gfFskN4Hp9Bz6IeskR9ykYR%2FQ%2BHi2OY6Ky%2FcaBoptv1BVoDdNCXDKUy%2FVYf8cr%2FAGWY%2B88EZlcDzxUM40Q7v4zz0Z47PzB5FH76tdeETtlaxYh1B5lzo0hfpx4%2Bx3tSg1we%2FFLf\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1896,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"3bd920194369bfe77af1226f66ee76fc","sha1":"e0947bab79db686430196920806575d292a58c2e","sha256":"7462f379efe2492c17e12a15f08a600709193cc6c9e9fb77a117611c884ddf7e","sha512":"a6e7d66d0f1078bc25e96c93ccab34070cd7bb1f080b3915de1c1340c14571ad2f432ab21526fbbdd7ddbac3113e598c89d17f7210f56cdc7671c75b36ebc3ac","ssdeep":"","tlshash":"d041b95efd46f47221abe1b910bb861f179235122484cc06c471c8947dfad7f942f92c","first_seen":"2025-08-20T04:46:58.58583Z","last_seen":"2026-03-26T06:43:48.833589Z","times_seen":757,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser-intake-datadoghq.eu/api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A6.6.2%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Aluckydreams.com%2Cversion%3A2.1.86-f54dbe17\u0026dd-api-key=pub6944d0b05408999e2a258fb6e57933fb\u0026dd-evp-origin-version=6.6.2\u0026dd-evp-origin=browser\u0026dd-request-id=f4f02c85-a31d-4a70-8911-a4c71da953aa\u0026batch_time=1766259292819","fqdn":"browser-intake-datadoghq.eu","domain":"browser-intake-datadoghq.eu","tld":"eu"},"ip":{"addr":"34.149.115.139","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:52.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.browser-intake-datadoghq.eu","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 25 May 2025 00:00:00 GMT","end":"Sat, 30 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"62:0A:8C:EB:5B:F0:38:A4:34:6C:43:65:FE:09:67:F7:83:AD:44:C5","sha256":"73:49:93:8C:8C:F9:73:3A:66:03:C0:4D:5A:08:45:09:83:4A:2D:76:73:88:8E:6D:CE:3A:2F:EF:6E:C1:86:09"}}},"request":{"raw":"POST /api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A6.6.2%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Aluckydreams.com%2Cversion%3A2.1.86-f54dbe17\u0026dd-api-key=pub6944d0b05408999e2a258fb6e57933fb\u0026dd-evp-origin-version=6.6.2\u0026dd-evp-origin=browser\u0026dd-request-id=f4f02c85-a31d-4a70-8911-a4c71da953aa\u0026batch_time=1766259292819 HTTP/1.1\r\nHost: browser-intake-datadoghq.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.luckydreams4.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 15909\r\nOrigin: https://www.luckydreams4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":15909,"data":"{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259289938,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"fb1851ab-64a1-4cad-8ea6-6eea9a848b97\",\"type\":\"document\",\"duration\":114000000,\"url\":\"https://www.luckydreams4.com/entry\",\"protocol\":\"h2\",\"size\":4746,\"encoded_body_size\":1810,\"decoded_body_size\":4746,\"transfer_size\":2802,\"download\":{\"duration\":1000000,\"start\":113000000},\"first_byte\":{\"duration\":55000000,\"start\":58000000},\"connect\":{\"duration\":25000000,\"start\":33000000},\"ssl\":{\"duration\":20000000,\"start\":38000000},\"dns\":{\"duration\":0,\"start\":33000000}},\"usr\":{\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259290212,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"a634298a-d8fb-4e93-a41c-781506f2dafb\",\"type\":\"js\",\"duration\":72000000,\"url\":\"https://www.luckydreams4.com/js/defaultVendors.52b32e95.js\",\"protocol\":\"h3\",\"size\":941788,\"encoded_body_size\":330523,\"decoded_body_size\":941788,\"transfer_size\":331335,\"download\":{\"duration\":16000000,\"start\":56000000},\"first_byte\":{\"duration\":20000000,\"start\":36000000}},\"usr\":{\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259290213,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"b571ad70-031f-456a-bda3-829645c88a98\",\"type\":\"js\",\"duration\":106000000,\"url\":\"https://www.luckydreams4.com/js/common.bfadd0e2.js\",\"protocol\":\"h3\",\"size\":2904233,\"encoded_body_size\":672598,\"decoded_body_size\":2904233,\"transfer_size\":673409,\"download\":{\"duration\":29000000,\"start\":77000000},\"first_byte\":{\"duration\":40000000,\"start\":37000000}},\"usr\":{\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259290212,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"97f73a59-e3cb-4a55-bcc4-27e9fb5f22d9\",\"type\":\"js\",\"duration\":56000000,\"url\":\"https://www.luckydreams4.com/wto.js?v=\",\"protocol\":\"h3\",\"size\":798,\"encoded_body_size\":461,\"decoded_body_size\":798,\"transfer_size\":1277,\"download\":{\"duration\":0,\"start\":56000000},\"first_byte\":{\"duration\":22000000,\"start\":34000000}},\"usr\":{\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259290214,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"7a81f1b5-160a-42cd-a02c-8b2ec65cd2f8\",\"type\":\"js\",\"duration\":169000000,\"url\":\"https://www.luckydreams4.com/js/main.32844814.js\",\"protocol\":\"h3\",\"size\":7468240,\"encoded_body_size\":1524869,\"decoded_body_size\":7468240,\"transfer_size\":1525678,\"download\":{\"duration\":110000000,\"start\":59000000},\"first_byte\":{\"duration\":22000000,\"start\":37000000}},\"usr\":{\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259290213,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"58d1bcff-8e7f-4ac0-80be-9eceb0f4a312\",\"type\":\"js\",\"duration\":127000000,\"url\":\"https://www.luckydreams4.com/js/runtime.f2d7e3ab.js\",\"protocol\":\"h3\",\"size\":223433,\"encoded_body_size\":66510,\"decoded_body_size\":223433,\"transfer_size\":67320,\"download\":{\"duration\":66000000,\"start\":61000000},\"first_byte\":{\"duration\":22000000,\"start\":39000000}},\"usr\":{\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259290213,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"1738b2e1-ffc8-46bc-8e04-c11ae4d5569d\",\"type\":\"js\",\"duration\":128000000,\"url\":\"https://www.luckydreams4.com/payments-lib/v1/index.js\",\"protocol\":\"h3\",\"size\":1896,\"encoded_body_size\":986,\"decoded_body_size\":1896,\"transfer_size\":1767,\"download\":{\"duration\":1000000,\"start\":127000000},\"first_byte\":{\"duration\":86000000,\"start\":41000000}},\"usr\":{\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259290215,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"f5075241-9557-4607-9036-0d459ce18938\",\"type\":\"css\",\"duration\":72000000,\"url\":\"https://www.luckydreams4.com/css/main.a6455864.css\",\"protocol\":\"h3\",\"size\":622751,\"encoded_body_size\":114323,\"decoded_body_size\":622751,\"transfer_size\":115121,\"download\":{\"duration\":2000000,\"start\":70000000},\"first_byte\":{\"duration\":25000000,\"start\":45000000}},\"usr\":{\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259290214,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"b4e11428-720f-4a1d-9866-22cb93df07a2\",\"type\":\"css\",\"duration\":82000000,\"url\":\"https://www.luckydreams4.com/css/defaultVendors.ea314ba7.css\",\"protocol\":\"h3\",\"size\":17896,\"encoded_body_size\":5705,\"decoded_body_size\":17896,\"transfer_size\":6500,\"download\":{\"duration\":1000000,\"start\":81000000},\"first_byte\":{\"duration\":37000000,\"start\":44000000}},\"usr\":{\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259290215,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"529da3e0-d44e-4d8c-88fe-74f428374302\",\"type\":\"css\",\"duration\":89000000,\"url\":\"https://www.luckydreams4.com/css/common.0ff8eaf9.css\",\"protocol\":\"h3\",\"size\":569119,\"encoded_body_size\":91816,\"decoded_body_size\":569119,\"transfer_size\":92610,\"download\":{\"duration\":4000000,\"start\":85000000},\"first_byte\":{\"duration\":39000000,\"start\":46000000}},\"usr\":{\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259290216,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"1a5c5a77-5439-4976-9e66-8380ffb28b11\",\"type\":\"js\",\"duration\":126000000,\"url\":\"https://www.luckydreams4.com/svg.js?v=1866581867\",\"protocol\":\"h3\",\"size\":132183,\"encoded_body_size\":42779,\"decoded_body_size\":132183,\"transfer_size\":43585,\"download\":{\"duration\":0,\"start\":126000000},\"first_byte\":{\"duration\":76000000,\"start\":50000000}},\"usr\":{\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259290234,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"08182617-8352-4287-8b3c-5b7e77972004\",\"type\":\"js\",\"duration\":114000000,\"url\":\"https://www.luckydreams4.com/js/defaultVendors.52b32e95.js\",\"protocol\":\"h3\",\"size\":941788,\"encoded_body_size\":330523,\"decoded_body_size\":941788,\"transfer_size\":331333,\"download\":{\"duration\":5000000,\"start\":109000000},\"first_byte\":{\"duration\":46000000,\"start\":63000000}},\"usr\":{\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259290298,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"150843ec-1723-45e8-b6c7-ef235dc2d339\",\"type\":\"js\",\"duration\":271000000,\"url\":\"https://c.webtrends-optimize.com/acs/accounts/8dfa23d8-4727-465f-ad65-d6a5cdf8784f/js/wt.js\"},\"usr\":{\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259290504,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"d87168a1-2e52-4fa3-bd34-fc6138c9a441\",\"type\":\"font\",\"duration\":145000000,\"url\":\"https://www.luckydreams4.com/fonts/hero-new-400.a46bf92d..woff2\",\"protocol\":\"h3\",\"size\":32916,\"encoded_body_size\":32916,\"decoded_body_size\":32916,\"transfer_size\":33738,\"download\":{\"duration\":1000000,\"start\":144000000},\"first_byte\":{\"duration\":27000000,\"start\":117000000}},\"usr\":{\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259290687,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"57b29881-0563-4540-9b51-d35a2370897e\",\"type\":\"js\",\"duration\":68000000,\"url\":\"https://c.webtrends-optimize.com/acs/common/js/5.4/sizzle.min.js\"},\"usr\":{\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0,\"start_session_replay_recording_manually\":true},\"page_states\":[{\"state\":\"passive\",\"start\":2123000000}],\"document_version\":1},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259289937,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\",\"sampled_for_replay\":false},\"connectivity\":{\"status\":\"connected\"},\"type\":\"view\",\"view\":{\"url\":\"https://www.luckydreams4.com/entry\",\"referrer\":\"\",\"id\":\"c82f2424-78de-4e55-ae17-209999a0330a\",\"action\":{\"count\":0},\"frustration\":{\"count\":0},\"error\":{\"count\":0},\"is_active\":true,\"loading_type\":\"initial_load\",\"long_task\":{\"count\":0},\"performance\":{},\"resource\":{\"count\":0},\"time_spent\":2127000000},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"privacy\":{\"replay_level\":\"mask\"},\"usr\":{\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ncontent-type: application/json\r\ncontent-length: 53\r\ndd-request-id: f4f02c85-a31d-4a70-8911-a4c71da953aa\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 20 Dec 2025 19:34:52 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"08dde6fd3f3e3bce515fe3cda3da2123","sha1":"5d5568a2a6d6db5435f7677f2508bf556c554c64","sha256":"fa36f3fcf8a1a4118b391dd9a0e286d201971bbd1b93b899323b93ca6399f69f","sha512":"3e12c72ecfc4a61c5e55493cd3dd1ca0c9db12f6dc3ff79fda5b73df1747ecbd8b7ff4b04e0957c3f9d60d96443018220903138a84a06a027c726b903d59fff5","ssdeep":"","tlshash":"9e9002925861d197e6590012241d02199148b0ca7169f22a089058475015661e761108","first_seen":"2025-12-20T19:35:41.969612Z","last_seen":"2025-12-20T19:35:41.969612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":97,"dns":1,"connect":13,"send":0,"wait":130,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/payments/color/devcode-neteller.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/payments/color/devcode-neteller.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 21 Jun 2024 13:05:05 GMT\r\netag: W/\"66757a81-9f5\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 45163\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a7d7db4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2549,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"85de642c97802daa8060370a5982c417","sha1":"b4bdbff0559da2c40f173c71ab67d1890006a85c","sha256":"9e963d9d7eb1694978623261a12edee1d660e100c8af405f1ff572fecca559bb","sha512":"4642988f1a58cf37ff90aa9450c812a239ad513655ef5512b45a4244b2bf9d9114e124a917dfc457dfaa4bde86a245523d304d8574194285eae6d98dcfed4f04","ssdeep":"","tlshash":"3d517ed497ad6264e01223f23c7bf472627925e81fedcee147b61d139036cdca4950e4","first_seen":"2025-07-13T11:27:36.383983Z","last_seen":"2026-02-12T03:18:50.581436Z","times_seen":16,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/providers/color/1spin4win.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/providers/color/1spin4win.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 09 Jul 2024 14:45:05 GMT\r\netag: W/\"668d4cf1-1071\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 14726\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a9da9b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4209,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"90b3de56247367ac43d3e6a7a7c00cef","sha1":"94deed3bbbfd0834c0a8898fc51997c14fd36c73","sha256":"a1a1dd73d714cfb54f1459a55eeeceb6a6d62c26edab378135298ccd7f456a55","sha512":"765c7c367a8331bb0ee44edcf4aa98e7eea94d4da354f898d06f7363be306cef35ad21729753d2e4fc02ca0f1cddce1d8b4bb22c752af95b06919bb2fd822e0b","ssdeep":"96:COYjKnOCxzJkw3hkBW4HK4KPdm5atUCo8trf3KaK:COYj6OKzJkw3hsGEZCo8trf3pK","tlshash":"1e91c7ca6354c3e6d401a3b44a1b9431316f79eaba66c240dfe03922e9e590e1d7cdc3","first_seen":"2025-07-13T11:27:36.385446Z","last_seen":"2026-02-06T08:34:03.441442Z","times_seen":11,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/api/games_filter","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"POST /api/games_filter HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.s.v2+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nX-Display-Mode: browser\r\ntraceparent: 00-000000000000000086c09685fe618bb2-1545161f549de99d-01\r\ntracestate: dd=s:1;o:rum\r\nx-datadog-origin: rum\r\nx-datadog-parent-id: 1532655572008954269\r\nx-datadog-sampling-priority: 1\r\nx-datadog-trace-id: 9709926298853411762\r\nContent-Length: 221\r\nOrigin: https://www.luckydreams4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":221,"data":"{\"device\":\"desktop\",\"page\":1,\"filter\":{\"categories\":{\"identifiers\":[\"games-entry:en-CA\"],\"strategy\":\"OR\"},\"providers\":[]},\"sort\":{\"direction\":\"ASC\",\"type\":\"global\"},\"page_size\":15,\"without_territorial_restrictions\":false}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: application/vnd.s.v2+json; charset=utf-8\r\ncontent-length: 26854\r\ncf-ray: 9b11946d788f712e-OSL\r\naccess-control-allow-origin: https://www.luckydreams4.com\r\naccess-control-allow-methods: GET, HEAD, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-expose-headers: \r\naccess-control-max-age: 7200\r\naccess-control-allow-credentials: true\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nx-s-media-type: s.v1\r\netag: W/\"25b63737fea3d800610850d4f7f2782e\"\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: 9b11946d788f712e-FRA\r\nx-runtime: 0.021268\r\nvary: Accept, Origin\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=YgWbPYrH%2B1O67KSmtj4LRDuLRm%2F%2Bl2JDov3q2HN9MAnsoTkOakhYLEDrmHtWvcSeSoDZX0BAnv7Rrr6CPhIKlju9bsbgH4FN%2F3lsjFJ0CnmzxTiMYLFT6OOlcNxUK3sg8hDUuv5K\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26854,"size_decoded":0,"mime_type":"application/vnd.s.v2+json; charset=utf-8","magic":"JSON text data","md5":"53a40a1e21c37b901da0788aef22ae80","sha1":"d36006caa85934d49bc462bbd90b5f70f7b61c37","sha256":"25b63737fea3d800610850d4f7f2782e8d2bd8083b70cf9b34f678ba87a998e6","sha512":"a79fe658870c7511d415f3ef33fa1e9220bfa92cfc7957213af8b23514b1cc23778ff6a8194d8f85ccd6fc4e105750640499ce6d9e3f759231c7570733405873","ssdeep":"384:kRBX2snk/XvFVaNKTMkHIAeuWm8EbWAA4vygiSHu+QFTZMemqg:k77kvCQ","tlshash":"09c25b47869b3aaddfe667c65cb13ee113dd213b10460c86c5914fd600d6bdc62a8b2f","first_seen":"2025-12-20T19:35:38.656763Z","last_seen":"2025-12-20T19:35:41.973393Z","times_seen":3,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/runtime.f2d7e3ab.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /js/runtime.f2d7e3ab.js HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9b1194541f90712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-368c9\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:50 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=p0lxhJPQ3jfhH7uKHGIpjICzuGpC4hwy%2Bw%2F8RThiRFMW%2FpU4SDYQ4WeLVIEhvtwjKBSgAUonKdihInW5dKE4PHvSloe3K0OmZl9hLTU8iVb2BGyWDSjDx3IkfC0h2oH3Pm3kiJ4W\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":223433,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5d66d185339fa59dce0e62d340856f8f","sha1":"9fcf453cf63b02baa0f1b12328d5ad7fc17c8fca","sha256":"e474ce9573b6159ff6c8ef5ccbcf750b7d854fb270acb1742c84fd0e76ca0519","sha512":"b09eb79ddd368ee013fee7354d54d71b2a1724b8fb4c20b931387a9f165e97723538441a0e2477bf387f37825343829dafadf9453fdbc6e79925c5cf6515d839","ssdeep":"3072:hjsLfQ7uqP6sia3NA/L0WMmpTCcoUXdD70l:h4LfQ7uqP6sia3NA/L00rr0l","tlshash":"7b24989abd040dfbce5da6887c6afd8101af4b81741264bac370f7718bf884762dd526","first_seen":"2025-12-20T19:35:38.628736Z","last_seen":"2025-12-20T19:35:41.974196Z","times_seen":3,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/ping.png?1766259291700","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /ping.png?1766259291700 HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 926\r\ncf-ray: 9b11945e0888b4f1-OSL\r\nlast-modified: Thu, 27 Jun 2019 06:47:11 GMT\r\netag: \"5d14666f-39e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nexpires: Sat, 20 Dec 2025 23:34:51 GMT\r\ncache-control: public, max-age=14400\r\ncf-cache-status: MISS\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":926,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced","md5":"3ee6b8099eefaa352c3d694adc605a30","sha1":"837339f6abd45a0a8e2921f84e9c07c7c3c56ccf","sha256":"a11849ca516f93f71253486d07b192542bbdc550ee18e5458e76b89bcd403e88","sha512":"e8899c671e07b882631801ff4212ad61cf787d8f9b1bbaaff6597ab63168e48f174b5b681deb64ba91f81448c87dec114e57bbcfc44d94d2ad41db3cecf5694f","ssdeep":"","tlshash":"6211104eeed078428195d86310fb4433da234c94f8e8e62a68cecc3a1a240b9d91d5cb","first_seen":"2023-04-06T19:54:31Z","last_seen":"2026-04-04T13:28:46.54773Z","times_seen":1268,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":16,"dns":1,"connect":6,"send":0,"wait":79,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.onesignal.com/sdks/OneSignalSDK.js","fqdn":"cdn.onesignal.com","domain":"onesignal.com","tld":"com"},"ip":{"addr":"104.16.160.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.onesignal.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 13:36:29 GMT","end":"Wed, 18 Mar 2026 14:36:27 GMT"},"fingerprint":{"sha1":"30:5A:B5:12:D2:73:F9:E3:9B:92:07:27:01:B9:79:94:0B:4C:2E:65","sha256":"F6:62:1D:69:EF:68:3F:83:1A:DD:B1:33:27:EF:0B:A3:C6:AE:82:29:6B:B3:2D:77:F4:6A:CF:36:2A:AA:C5:6F"}}},"request":{"raw":"GET /sdks/OneSignalSDK.js HTTP/1.1\r\nHost: cdn.onesignal.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\netag: W/\"09282956186c8515ef0d208902803581\"\r\naccess-control-allow-headers: OneSignal-Subscription-Id\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 1501\r\nexpires: Tue, 23 Dec 2025 19:34:51 GMT\r\ncache-control: public, max-age=259200\r\nset-cookie: __cf_bm=6dWBi4HjMD3PF4SvgOLYvzmQuvYZ3yNdV.TADQaw880-1766259291-1.0.1.1-qFoMT7EsCCLwwyPqUuvROpCde8qwzgcEmiPymKCN9JK8zQPGS_xv9mJ4ar8QoDF9bPXO0aDg21mDirv7T9w2ArbOy.H8sw9Z2UbOVD7fPIk; path=/; expires=Sat, 20-Dec-25 20:04:51 GMT; domain=.onesignal.com; HttpOnly; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=15552000; includeSubDomains\r\nserver: cloudflare\r\ncf-ray: 9b11945e084549c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":9204,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9163)","md5":"09282956186c8515ef0d208902803581","sha1":"ea83b81c9955b3e983a7bef75714a9cefa904151","sha256":"ec8b1b07980996f574075e1b7e895d5d47794b9dcf345a68d60fbb17034f7bef","sha512":"39bf696c593e20bd86ae8994eb8e767b6c7fa6fa029f94b5dbc145cc30dc9460bcd5544f0182a79e4befc85df960b30dc53d7b435db24463f0e91d82faa4cd10","ssdeep":"96:/AQneVFrK3RJ1oauMhLBiobXf1JqZ8zZDV81uZIJqEKIZft4JqxCYZX7+Aroq3I3:o8Noqhtig1XzZZWuZIUsft40pTrU3","tlshash":"0512449bb970b5f253d358f6802f210ae27b993894b9a4905b85c4e09c7161f4337f6a","first_seen":"2024-07-22T22:24:59Z","last_seen":"2026-02-26T04:51:42.108077Z","times_seen":13513,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":12,"dns":0,"connect":2,"send":0,"wait":16,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBM3ZpQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--1b7214023ff8caa690b0735583df286810a7639e/Group_777-min.webp","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBM3ZpQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--1b7214023ff8caa690b0735583df286810a7639e/Group_777-min.webp HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5858\r\ncf-ray: 9b11946c8fb6712e-OSL\r\ncontent-disposition: attachment; filename=\"Group_777-min.webp\"; filename*=UTF-8''Group_777-min.webp\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"1ee9d7cfd1e4dc24787687f6d74e14a4\"\r\nlast-modified: Tue, 14 May 2024 10:52:44 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC25DF7CB36\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:54 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TBYpL3%2Fq4xhFbZOuJUPs5VvNt83bm2lrUeqjAANu%2FeytakZofhvacMfI%2FFLCFWnXBjTglZre2qjiCunLk5WA%2FzZceHIsKn7ZApBgG4PhqCVriYDzkSkf6peyaQAuDYNl%2Bhb1%2F7aX\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5858,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1ee9d7cfd1e4dc24787687f6d74e14a4","sha1":"fd132c48189417a3c1734ff773696ff6bc40ec82","sha256":"b7e813b7227da7a936ebd13c0dbb7fdd87b9b7c7194f43c634235701b6ced0bc","sha512":"20ca5695436e1ac011f46360ffa58c5e5b0741545e30bc0a7a1a579a30b536f9de947bc094ff7c54698d45eaeb37b9bfd1e432bcd097b12dcbaa89bab737164b","ssdeep":"96:sGZ/6l+W8SplX56rRwxsevATVLNE+Pduz14bKlJ8N68s3kuC/ODd9R/MN3HVxJQ6:sQ/6P8+tCRLevry2qbKwLs34SEVHVvSc","tlshash":"10c19e88da8daa42fe8e6025b7c57c78b88049da9102efaf09d06746f7345f13b10217","first_seen":"2025-02-22T05:44:22.366866Z","last_seen":"2026-02-12T03:18:50.707232Z","times_seen":17,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/i/s3/bsg/3PotsofLunarWolfHoldWin.webp","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:55.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/i/s3/bsg/3PotsofLunarWolfHoldWin.webp HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30254\r\ncf-ray: 9b1194726de4b4f1-OSL\r\nlast-modified: Wed, 13 Aug 2025 13:00:07 GMT\r\netag: \"689c8c57-762e\"\r\nexpires: Sun, 21 Dec 2025 19:34:55 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccept-ranges: bytes\r\nage: 11197\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30254,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 380x380, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cb99e25461d4c3c73ff6b2f35577d18a","sha1":"9a6246eaf2d1200a199d1da0fa9e3d8938a6c797","sha256":"4dde4015a187ca562633f5c64f53cc1721bf29b515d2a6448e5d1fb28e6bdde0","sha512":"841a1e7ea9223f2c8d00ffd905b429b97248c42977512dcdac7a4e9e44ffb6667601a0c0b7639236593b909c078f0e0d982e8afa464130fbb7c51d9cf10cad9a","ssdeep":"768:IScKVHhP+s2AeVnIWHdFaTdCynEQroSCf4zjXdt:I9KVtdneGWH7aTREQDCf4nNt","tlshash":"5bd2f1af3158a4f365920d64c78d6179b46cb82e118ce0abdfff3ee863711d6692160c","first_seen":"2025-08-30T21:57:53.251145Z","last_seen":"2026-03-18T19:15:52.90735Z","times_seen":23,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/api/player","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /api/player HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.s.v1+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Mirror-Token: true\r\nX-Display-Mode: browser\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/vnd.s.v1+json; charset=utf-8\r\ncontent-length: 20\r\ncf-ray: 9b11945e0a50712e-OSL\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncache-control: no-store, no-cache\r\nx-s-media-type: s.v1\r\netag: W/\"16cfdc7ade5a4109c2f45591f30ddfe3\"\r\nset-cookie: locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; domain=luckydreams4.com; path=/; SameSite=None; Secure\r\nvary: Accept, Origin\r\nx-request-id: 9b11945e0a50712e-OSL\r\nx-runtime: 0.008451\r\naccess-control-expose-headers: X-Mirror-Token\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=JRNjDKHP%2BSPZpkaianUi5qVNuLHJPVEMgafRA7wDgdmwDw69pea93vuP%2FenzG00MXQekmG7PoBaifLEjNoUbtyg4svOAKCcC%2F1P0AvNnAKq6amx%2BYsA8AClY3WqL%2FI36PMSugaOp\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/vnd.s.v1+json; charset=utf-8","magic":"JSON text data","md5":"8c74be0b04b7a8b1b28c384951101930","sha1":"0271d9b523c94ff6074543a5cc7b3dd3cbee710a","sha256":"16cfdc7ade5a4109c2f45591f30ddfe3598936e2b3ee1453ce10640354a14053","sha512":"bdd59eeb747f0ad9f2a35ed75c8c5a26257ff75fe4c6658054aa0202c66dcccfa9bb81547bdde8a69e108472a503a3e41a92a61f653368dae5154bc16a09e30b","ssdeep":"","tlshash":"7870000000000a2a3380028020802800000800a000c02a00020a2b0080820000200082","first_seen":"2024-07-06T00:11:59Z","last_seen":"2026-01-13T08:41:15.483216Z","times_seen":32,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/payments/color/devcode-skrill.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/payments/color/devcode-skrill.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 21 Jun 2024 13:05:05 GMT\r\netag: W/\"66757a81-8f1\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 7806\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a8d87b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2289,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b717577a153138e06280f1dd0a44321","sha1":"671e319ed555badc823f0195ac90519ebbe6b38c","sha256":"f80766fe6b29db49306238ae522ee98501d72ffbbe5adc0f040d669f4c0f1cea","sha512":"c7f69963dec54b6c63a80e08bec1f97f3b1acf20e7666eabcefff81b62332c501ce32952c360b8c45eafab52c5b14ee7bb0d94b76f49b1e078f8f262e3226c9b","ssdeep":"","tlshash":"c641cee07a49a4f29446d37dcb2d82e5727728bd3701d15997943c242c54a3f884d7f7","first_seen":"2025-07-13T11:27:36.302792Z","last_seen":"2026-02-12T03:18:50.703205Z","times_seen":16,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBNmpiQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--b9ac740fb1525f2fe90cac374c9c83e4e9351176/netgame_(2).webp","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBNmpiQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--b9ac740fb1525f2fe90cac374c9c83e4e9351176/netgame_(2).webp HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5474\r\ncf-ray: 9b11946c8fae712e-OSL\r\ncontent-disposition: attachment; filename=\"netgame_%282%29.webp\"; filename*=UTF-8''netgame_%282%29.webp\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"8a358b44a42e6c181be480044e5f4bd1\"\r\nlast-modified: Tue, 14 May 2024 10:34:21 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC25B4B2C1A\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:54 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3Or9X6kOxxUHHWGvlTstvJVxZqiYkfvwLgZJr7nvtdOl%2Ft3i0Ho%2BSnM7Go4bZr6GNah8Ly5d6tPxd7JR8lQE1ruMBQqiCrfkCFspMOqIdPo4By50NOm2%2FsSSjau898R3lcpGgq9A\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5474,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8a358b44a42e6c181be480044e5f4bd1","sha1":"cbf104875efb53f9642ad760efaf11964e7ee35f","sha256":"b202ca2763b09456860812f962f2e1ddde32eeec4fd9548b5a328cff69685d31","sha512":"a74979f505792fbfba140219c309c3f7f80cc349a2a4c6546d19f5bc71bff09cf098a9c1ac416ff5dcd79915cfd4cfb8e2305b9037b36aa9f0ff26798059d05f","ssdeep":"96:NrEeqU57kk1fDC/fC1ixn09jdughlVMqprvyc5wCdBgP4kHqt1gew7KIo5s:NrYUNj2/M9ZJhwiO5YHg","tlshash":"7db19e85f6614083fd950330d28b36ad4a81fe1af9be4673ae8178bc791d910fc0b292","first_seen":"2024-05-17T15:43:13Z","last_seen":"2026-01-13T08:41:15.501129Z","times_seen":17,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/i/s3/softswiss/SnoopDoggDollars.webp","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:55.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/i/s3/softswiss/SnoopDoggDollars.webp HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:55 GMT\r\ncontent-type: image/webp\r\ncontent-length: 102074\r\ncf-ray: 9b1194724dcab4f1-OSL\r\nlast-modified: Tue, 30 Jul 2024 12:10:04 GMT\r\netag: \"66a8d81c-18eba\"\r\nexpires: Sun, 21 Dec 2025 19:34:55 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 7517\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102074,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e97ba62fa2129835f90d1be7d5b9dd45","sha1":"d933882056028d88bea879d6d1d39c2cdac54ecf","sha256":"6b390dfcae5a8d606c92f41ad7e95704efaf0a1d9bfc25f68bce3c8a79160df3","sha512":"48445bb1f846ac209976db0fa5074076eb8b346b0d243c6692beb2b3af0860c8df0390bc3c6511ec9f09f77d1bef28e10371b24d1a8ab79fc49a95c695fead4a","ssdeep":"1536:ZcKx44C96dPpeZEtXCfQBYle/6sz6oZ5ywfPK/o3WuRs+KlaTnECAbN6/9Nr:uKxjXxeuSfyYYyszt51SQRs+K+PJ9Nr","tlshash":"e5a312759f0d6895c3c00ff76c2aa0d6a74e6d688cc85ef18325af456f1c19e9e908f1","first_seen":"2024-11-04T02:58:29.045244Z","last_seen":"2026-03-22T05:33:13.162029Z","times_seen":78,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/common.bfadd0e2.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /js/common.bfadd0e2.js HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9b1194540f88712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-2c50a9\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:50 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=jfGnt2fYlWgxeCiuJhVvtY8lS1hSzdLP%2FPP7z61gtX7P7lBvumTcPEejZKx8qP%2FNk18FkYeSIvygOoxWRmOw2dJm1TiMp0LJUczewknW2Wv%2BFIbpd8QEUUn6Ykio97tfGNQFwXV7\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2904233,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65475), with no line terminators","md5":"0ccba90f8f9385ce04229fe15d69aad6","sha1":"06c6ef8bd0ffa0700f7e843c64f5355036ac9576","sha256":"b731c91f022871205d5a870c67909c27bf5b6ecafa1ff0d1339efcaab5ce29ae","sha512":"d27e8d5671aff0ff27e5f911c4f034671e316b367536161b6ab3e45f0cf7c2f894ee27a4a8c783a18e6aa09d2037c8a519c7db62d78db20f632da36eff71762d","ssdeep":"12288:nzhAL9vAcvAFvAdvxyvAEHSpAoXVXCV+pS4WE8mzz3gaWE8Wz9p85E7cVMpXgPv6:nOpAOSI9pKsvsZ4Q4cfgN","tlshash":"1635a542b13891ae44df15cfa52e6e0df3586f9da2314820a4e4cc1c7264feda63e779","first_seen":"2025-12-20T19:35:38.673566Z","last_seen":"2025-12-20T19:35:41.981774Z","times_seen":3,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/images/footer-bg-1920.12be9c59..webp","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /images/footer-bg-1920.12be9c59..webp HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/css/main.a6455864.css\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24346\r\ncf-ray: 9b11945dfa3f712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:30 GMT\r\netag: \"694539ae-5f1a\"\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 1\r\nexpires: Sat, 20 Dec 2025 20:34:51 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3xsWOH%2F4OToftIroDpvgjkdIUw%2B5tbeMELO51Pscf0%2FvUIB%2BXgNAJtSU4Qf5yYYWEU%2BjlQgVMpcUaPWROZBkwO%2FKWu9VS2hyi0aRPDUz8%2FORAi2h6DKsGLbLZjO9R%2FTrgc8j11sT\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24346,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c631e283c8a24f1bab38e58cee517261","sha1":"db58f8368086261d6cc2c82eb3a8e7de03428dc6","sha256":"aa3e85610d2744d227180853b22c2201911ceeda92d7ea032e3af911cd36ef4c","sha512":"070316dd8a2c0517032d7ddf6a18ee5c883b6e1c17293de938561cc20df20fd5a0c484186a1edb7de39be42597b1f107eb9c6da0dfd91d28056188261c28d3c2","ssdeep":"384:ySFllLCNcPuWRpNeDeadJ9Gwo8ef3GN8pbg/BzDDTZtz5F21g25h8IDlAxpZ:JllLCNiuW1eDj9Po8ef3Ut9tz5g1g20X","tlshash":"fcb27ee32c5bda7ed20f30f7109022a4b4da67421370b6f5acf4198756639f51db296c","first_seen":"2025-12-04T17:07:03.725215Z","last_seen":"2025-12-25T02:16:58.167142Z","times_seen":7,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/fonts/hero-new-700.598ff042..woff2","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /fonts/hero-new-700.598ff042..woff2 HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/css/main.a6455864.css\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 32848\r\ncf-ray: 9b11945e4a92712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:30 GMT\r\netag: \"694539ae-8050\"\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 1\r\nexpires: Sat, 20 Dec 2025 20:34:51 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FBmQTgiqSrbYGoQ1cfN2lsUq1Q1MVHUeek2fEcrGcafr9hDnt9HpdD6%2F%2Fots2v3pR61Ntg6O%2BKt955dGdBxMn5%2B0rGILQ%2BukZysGCyEb%2BwOx2kOi1%2FboxbrV1cQWfx%2Fz65JEaQJq\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32848,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32848, version 1.0","md5":"71e9ec7f3b166c886e416c7847eee41a","sha1":"c57be3b79c4c87b43a28b54be7cf9f46229399fb","sha256":"b915bfa0b91bc9a22124737e9eccd094a559bd99f990743e1f92e77b7a1e0924","sha512":"630464353c687425d45c9aee9ec8bbbbc81d9405f02b59d96f10723847407b9990224ac7f612a499752646df41f80c79f17beddd0ecc731aae236b3304d77827","ssdeep":"768:ozu/bWt4K4lJnZ6IC32+dXV4dxlLvmfujjh3YBukPMoL:PDNLZrCG64dFJ3YBukPM+","tlshash":"d0e2f174576746d319175cb1318c2a4cede3692a9ceff22b0e0a1297ecb9adc79d0072","first_seen":"2023-04-06T21:35:48Z","last_seen":"2026-04-01T17:17:36.101627Z","times_seen":439,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/svg.js?v=1866581867","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /svg.js?v=1866581867 HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9b1194542fb6712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-20457\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:50 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2C%2FWr3r7BqQTNqCu7YsPUc33IpZc4C05vA9PGYouGATXpls3JRx7NelTc9rFeTMuJm3JoCWqoXRaQl4siJXx3H12e6hknBccsI4HnTi7jEb0wsi3jZ2AsdXfIv29IqBu5SalYmaA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132183,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65478)","md5":"3b46c27bc263cf4b4b973ecfe22d47f2","sha1":"6bd43b4fe3920b9fdbc25b1b24657125a2d13649","sha256":"2e5eaf8b307739a1e49ad6d98be7e40af8833d836af97bf3dafdde8fcac6e4a8","sha512":"5bdefe7f254c27bb37e94d668f73c5184254b19808d2c05f9fdc30627bc77047ccf9d3f55bde46a2a809c5e36c2267de0be750b58524745e68cc843181f2ba7f","ssdeep":"1536:Xy9zFThc6XHSKa63VOfSoXNXGP8VeUJr52SGffgot3GcSNLGY9k+qEtL/N:Xy9zFTm6XHV3VOfddHJr52ShogcSp9p","tlshash":"bdd319f9e72c919ed18bd77eff20d464131e60fab49482d4899d8b1d60578c2fa0be60","first_seen":"2025-12-04T17:07:03.707727Z","last_seen":"2026-01-13T08:41:15.476524Z","times_seen":8,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/api-fe-events/v1/events","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"POST /api-fe-events/v1/events HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.luckydreams4.com/entry\r\nContent-Type: application/json\r\nx-api-version: v2\r\nContent-Length: 297\r\nOrigin: https://www.luckydreams4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":297,"data":"[{\"event\":\"site_started_loading\",\"timestamp\":1766259290230,\"project_id\":\"luckydreams\",\"mode\":\"spa\",\"hostname\":\"www.luckydreams4.com\",\"user_auth_type\":\"unknown\",\"pathname\":\"/entry\",\"loading_time\":294,\"time_to_fetch_start\":32,\"time_to_first_byte\":113,\"lib_version\":\"0.0.33\",\"core_version\":\"2.1.86\"}]"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\ncf-ray: 9b1194544fd3712e-OSL\r\nreferrer-policy: strict-origin-when-cross-origin\r\nset-cookie: fe_domain_session_id=NGu_R1aRja6Xr5ugGbO2SYwJNhZqNPPxN-k-\n_cfuvid=M60JNBVjND04jeIyOEo49k82PMofIrj0vSc7QkmeNsY-1766259290350-0.0.1.1-604800000; path=/; domain=.p6m.live; HttpOnly; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=kcLsIg9uII8lPc75hlnSd1vBKBJMUa1ZEe4DLtkJMh%2BxO4fSoLsR89mQaVgvfLMyfBYxRSMV40x2FC%2B0Z75lgBFQzsWIm111R3Sv5a8U6CA0MG4kts13YKt8Yk04Kau9zOMezhib\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-04-05T01:47:24.145227Z","times_seen":555228,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ots.webtrends-optimize.com/ots/ots/js-5.0/2497335/","fqdn":"ots.webtrends-optimize.com","domain":"webtrends-optimize.com","tld":"com"},"ip":{"addr":"20.54.140.8","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.webtrends-optimize.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 27 Feb 2025 11:12:15 GMT","end":"Sun, 29 Mar 2026 16:26:35 GMT"},"fingerprint":{"sha1":"01:10:A3:01:70:40:A9:D8:61:1E:E0:15:C9:05:FB:21:F5:69:1A:D0","sha256":"8E:36:F6:A7:EA:52:8B:C5:2E:0C:60:38:5F:0D:12:85:95:19:73:F0:79:6F:0C:2B:23:A9:AA:44:9D:24:B8:F5"}}},"request":{"raw":"POST /ots/ots/js-5.0/2497335/ HTTP/1.1\r\nHost: ots.webtrends-optimize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3276\r\nOrigin: https://www.luckydreams4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3276,"data":"{\"payload\":\"WT3KVFpRb967FSvWoc7CER8ZSIWBNzm3h-ceHGsTCoKzuecbFFUj3n_JwhsnN-sTQz3ddMt0e8znH39KmK2JEiAKSKOnRqEzqivi-xJOlGjeZ36vIM3u2kfCskqwLUDWLO_5g0TYC3QbphUPXuJRIEHEt0YmPNsw8jKcyZNMH_DQmggvRYgVrLwNjiWtzv1NpeEs1fOoQwv9GxWP4x8u07jZ0n0oZOCkQUaHltRzT_O6HIyoefj5WLwkzwnBHVlh4jj8xfpP7TbF90QJKaLA4P-5BeuUbm-s07XBBmdluN4bQa6O1l3zyf7N6zsNRQLGN2uutWHAmCyDfEDRP_1jAfnlEVmECb5yMbw5YpFeRgn55Z9YVdIlF_SsZUOtUHXcXB6c8KjUs14fzcnpgEMqDTfNpugjh5GkxmSRdBa1jdemQ_BfDvf7K4P0DjluA-KZcOZE_cJ2mSb2-BFZMGUexFRX1x5l3k1DCk1KZbXcnSXsdw7T3FxqxdbEQxYPtUN_L-5mGfp5DNYU74e1nbNFlKxEaTPLb7nVZvVEYXIrW8ddkFfbzUrhB-9g5XPAiuVVZ-UycG7X8mMJdCGvzYLPTTHDCTB79iCa6yZwBifVAOCwq_YfeoUyqDUNiqeP7NWdvMN0LumZ5u38_M4w-squM47d1fBcDLc_wskejOvD0O-JN8zhtVaRrP6HIgjLBkL5GLOIFjHTmmkN3YB9Sa6IoCK7dw-2wLgyXREYoke7YG8r5GqkELLkdToTS5U3P465f8IcOdQR7Nl0kIDnB6aCiIWrfeIjc2a49HZZDruER-fBqkRa83vlhbBTos3rMp6eH8A3nx4TfLZXe29osIoVVJUjCxh6SaSiihp4YOKtV4O8unCcKmH-Zb_DDkfmhXxpt5FCKbSwUx1vaLMcZBxxyOWov4jm4Encs6HKYMi4W_DOioASQMX1tkWCdv7_orHp3U-_VMtjf_JK-oOj3HJVpo2-XFyNjpy5nLdky2KRFKiCliZkPZsoJWrNRfwoMq_rgenORKloUERDFPRKXPGjAxMBsAnuFzFy-vvDmZiW1sY7SghZrh24DPoZTMIdHZKaMkcpkOaOvUmOdlh9JfQc7skJN64i9CkGPNnISUuspirlY_JE4k_8ii_rIp-HIOdNmaJ_Aq1BNc2BiP94jVNi5J1Rp_c8MPfYVaVZeyhX5hsqA9pbbpw3ndiZp6qDnZcZiMYn317QL_G4R5tfF74Wo5qNMZzJ5dA7XMY9BcNnxgtih3c6RNMxt7_TEBQ5sQfJE5945O-5deqBXUQOi4y_vuvMXIXKd6-dkRtNHLOjE9USoAjtuLChJk-EsKBwgSmgd83ZuwbBlA6EXqUEdaKSuQtshfHRlAUHjMunLa4iEsInkz0O8zPlcDyBhcqVXaLJ9QOmoscLGQPhmBO2wkN0PG6ZA7BNoOxtQUwsGLatmWKh8vuoMm044lPP5rwl1uokMbR_CbK3kf4rTfa9TIvzIwlN9JJJ-r9DJWsCXpsjKlCX5kS_unYuGydRtBMmd4kp7PwuiHIGMmOC7udXAl9fmm2ij9o-ONffeEzS92m-nU6obiT4aTycYg3oiQKq5gy-RUEeIEF9srK7cdNnKDPX6gr4sHgTuw68zylEQJkvG9tzr2enK2-Oo06ulg8NPFp8-LdmdRFpgAuRB4hnhbNoTz6nfGwsxNWEt-pmwamtWN5tJ_bKAFS13ixv7TwaPiiue4oIkRZGYM1bTN1I5-c9zgXPiA9uRk2limPYWUb9vHvd6X4sYdq1i8WNT-xDQkrro_bQa2_5RcuTK5BogEjbuQz1Oph1_6RKSBg6ht-vJFMk19Ystq6t7vp_3xOGNvDEfpoKMNWepBt4VHiFKIwEllCBNh2Iw3gtw6JJqkleTOoo_Ypk_GYvQNlPeA7yI2XP0JdUMldTa_eoSnK4vgRtuYI7YjmrKAmXlPednEBb0L34RcKIDu_SksnGBilZl_akONbdZYlIL1AxlQEpQoiMY0ile5YgpvGnTCtLAa-afrEwILJqIbWAJ1YT1lkfAyqbA7SUSM264JfyV8-E4Nk9Px2xxkptGDidKkItS6N_CvJ9fGaSpGGlk-J6o7QRFqJn3sPybJYfeoEkSXbxpzavek6FzowJEdCaMHy6dL-QGMAwX2Dz1ZGXOdVo3S3Ust1tgHbAzCts--FXlaqo047oHKlh0eC7z9QlkQLxQa5MXm_kU713FaGRNg7iMBWIRAOjEBjvo77c0FR42t5hqEe8aKTlJFmjT_1a3TylvKr2j8pKg9WSE6YNm24vSedBZJ1lrztQxQO8XDfHyJwFFmFq-9D-3Obt9KUYgs0ql90zhgqrhL3vL1O_6tHsYfnn46vY6SlsYNrVfxzV-S0KphWRbwgJCv5s6ol15x5RVbh4lm34hUTOlTbXiUDiyI0wbKeKUkCAGLmnOxfggmEIZt7lzzYD05GzK1_S4ZGRe6o3UgIXOTQca5VbN5NGMWmMC_UuKRy1T_GCuxNQUfeYtWahli9YxF7LF8ryMlUL1AXRNJdDcMO-dDHiv9kELvzJI8GITnaLpMZVMmI_znVh9rLXhAeLq7_qKgPayqQ6PYGxwq1a7s7eNWaQNRUOA4D647XGyWmeyxAd1oRu2HHlhY49Q9OlYJPmhTI_woEazASy71jfMvaL1e-Ir90f1hFut92i7IY4LayWD4aJCYS4FJ2Rq5Rz7gP8btC_ZlySiTsr6pRSVibnasQOthHZj45o6nUZJSSkCQe-V_AkkpPqpBZ7b-vEijGeoifFrPQolR_P_-gfySainToPYZ45poMOjUy42mKajge90J9JrhN0zo1zpEFw8MuYuQnsS41lPdht29CvWtGadhsGvfDSsLTz10fWGyykip4-bmi724sYc6hRlPadWpQtntW3KaPDQqGPsh9FwAdAISg-Ge0QxtwY_HO4K7ohhiED0k6gORRjRC0843z7L7GOxuWSrCf0-nIupUdxpaNF8pOF4EmNJ9pZtz_mEx6kr05841z3BFY8b47kXoFE9irONoDhhb2TtLoFmGPCJ50GFOhXPxN_fjxSWTZ2EvAVelsKFWSTnw7qxwEMKvq6IBZSGcWbMc1GKyRjA5QssWUD9h6MRO2S3ak0z9yMHZITgiS0zkLZEnxLraiRltP1Rrjm_Dnq7kRNbTmqXequ5qLBrE4m4eFCXKZPWG3OlyL7fB9Q-M85kb0w-tQ\",\"url\":\"https://www.luckydreams4.com/entry\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 401\r\nserver: Apache-Coyote/1.1\r\ncache-control: no-cache\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.luckydreams4.com\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-method: POST,OPTIONS\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\np3p: CP=\"NOI DSP COR NID ADM DEV PSA OUR IND UNI PUR COM NAV INT STA\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Tomcat","description":"Apache Tomcat is an open-source implementation of the Java Servlet, JavaServer Pages, Java Expression Language and WebSocket technologies.","website":"https://tomcat.apache.org","common_platform_enumeration":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","icon":"Apache Tomcat.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":508,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (508), with no line terminators","md5":"7133c974ec6194b52b4fbd318cb91350","sha1":"df7697197b1764b48d07749914c0e1cf2c80b680","sha256":"7ab4032c89d93f203602dba208b703faa23a59133e3e8977aba1146383d51383","sha512":"318beede4885524d94420e3734e4ad4fae5b136217f12655d17f267f5e1afc533c65e63af2b76e6f045492a9bfb70ae6906118aec3ba6895fd1ad2bf6cff580f","ssdeep":"","tlshash":"29f00eb60b9a6dcbc9c91293ef228cc330c08387663a55ca2c55bf4575e2f24682e0c2","first_seen":"2025-12-20T19:35:41.985225Z","last_seen":"2025-12-20T19:35:41.985225Z","times_seen":1,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":64,"dns":7,"connect":18,"send":0,"wait":36,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/dexie.84dcb01d.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /js/dexie.84dcb01d.js HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9b11945abf7c712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-127c7\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:51 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=A2OCQNSzWgwwLGqttVVAH8ZwX2yk3P5OMBzfZHbQABvSL%2Bti85pemL4Bl94lgUXSFaHv1AiSuS8z7wyKzlSMynLNmnK19SC2IlmNCBfmRD00ZsRTbro4e5dKX%2BXx8jnWW2TXaKV9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75719,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"395a5bc4585ec2f718aabf6ccfa266fc","sha1":"a3d8a4ad9391a78a4e55911ba007d4977861b78f","sha256":"5c514c146eb058c1d4a00eaeabbdddb9ee03cce950e81c0474cbdfecccb5c4e2","sha512":"c6507945c2cf6e173e58a1ff1d739f1667325f0411b914ef11ab68bc0ffef2aa5b336156cfd1b66179f36ff0d1b8528ba7e706b574902c27d945b93eac1cfe7a","ssdeep":"1536:eFrifVhEYEiPq1eGBzFH4wxR5Q47LvdbM6k:eVIGrH95Q47rG","tlshash":"7e73d5c97396f06243aa20b180bf5013f33a5959380d4428f25ceddb7c6a54da1bef7a","first_seen":"2025-07-15T00:32:23.179444Z","last_seen":"2026-04-04T13:28:46.513988Z","times_seen":528,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/api/info/player_fields","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /api/info/player_fields HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.s.v1+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Display-Mode: browser\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/vnd.s.v1+json; charset=utf-8\r\ncontent-length: 12781\r\ncf-ray: 9b11945e0a57712e-OSL\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nx-s-media-type: s.v1\r\netag: W/\"ea5ccf7cb1b4bd2d197a1ab00fcbf0a8\"\r\ncache-control: max-age=0, private, must-revalidate\r\nset-cookie: locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; domain=luckydreams4.com; path=/; SameSite=None; Secure\r\nvary: Origin\r\nx-request-id: 9b11945e0a57712e-FRA\r\nx-runtime: 0.022703\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=RjwoccKEZt4X2VhwFIgNF4vkdJbx5gtNAAiqB%2FpzLyDdtcGW0kGnk0fDEIkishkqafbNWUF8WN5hzrl3ObxX589uuaOUi7Cz7TbQzixr%2BoF5YtQQjHgOGmOv4G5Buv3d7FD7M70d\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12781,"size_decoded":0,"mime_type":"application/vnd.s.v1+json; charset=utf-8","magic":"JSON text data","md5":"10a00768ce827287d0236d14e0d1c659","sha1":"80dad34658612c6ff724b80e332c8487793146d9","sha256":"ea5ccf7cb1b4bd2d197a1ab00fcbf0a8ec86c6d343a8e06cc151519ab2790831","sha512":"baccbfb7089ab9d159b75c371f20af76864c4dcb8f9e386ddd71c8d3203714b78fe57edf9f40e978f89f8bb0c7b178c8151957d42e41306fd5da874937543278","ssdeep":"96:IEMOBUlKydZu17Q7gyUIJlMtKZ3LbsRqz:BBUlKydZq4UIJZ8s","tlshash":"8e42075d62818d9adcef7784f84468099ee9958fcb062c90439cfb4d53fa3ee1a4d072","first_seen":"2025-12-20T19:35:38.683118Z","last_seen":"2025-12-25T02:16:58.208884Z","times_seen":4,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/fonts/hero-new-500.dfebb89d..woff2","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:52.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /fonts/hero-new-500.dfebb89d..woff2 HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/css/main.a6455864.css\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 32760\r\ncf-ray: 9b1194615d4f712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:30 GMT\r\netag: \"694539ae-7ff8\"\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:52 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qi2PtBiyciNwR6ck9EjfUG%2B73c5BoY%2F4XpvTP3pT%2B3d4h%2Bw29IVbsZyPNAlJAvDEbhQHCBe0fwmLLtjsqM8JeuBjl8gjLgj2j9CKQkC3VVtGs%2FQYEjun%2BT%2FIrv8otqsnZLfNPezM\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32760,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32760, version 1.0","md5":"b95b0689616f5ac053a7d132a1a69d95","sha1":"d743de043b4c4f47ccb4ecf87795da6ecac7efbf","sha256":"568ea71cfb215903bf0320328510c85b13814e1ac36708c464ae9b3f86875ea2","sha512":"b4bc1430acd86c8f9cf38845dec8277bdcd7da1c169726fe5018466cbdc417f902eff805cd6ce233d858d42297e33edd7152ccadecbbaa9b41c9d675aa828ac2","ssdeep":"768:U/eADvbaTsXV9W0ukQgyIB454klYJ761e5:UWADjisXVykLB4qwYV6o5","tlshash":"b5e2f1445023f6d45e9a18f29a2df0dca1b42efb71f9adb09970e52b3b8c75a0405e30","first_seen":"2023-04-06T21:35:49Z","last_seen":"2026-03-16T13:12:14.321359Z","times_seen":76,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBMjdUQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--b8d2c5ff849f19eb82b8112ece2f78c670d10a66/entry-huge.svg","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBMjdUQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--b8d2c5ff849f19eb82b8112ece2f78c670d10a66/entry-huge.svg HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-disposition: inline; filename=\"entry-huge.svg\"; filename*=UTF-8''entry-huge.svg\r\ncontent-security-policy: block-all-mixed-content\r\netag: W/\"8804aab87888a372f021daa42a5ff1d8\"\r\nlast-modified: Tue, 14 May 2024 10:30:24 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 1882AD2010B65825\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 1\r\nexpires: Sat, 20 Dec 2025 20:34:53 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=QrpbfRcgDdnEARoQSXEH4BzD0ET7gauNj2L1T73GQaXaqR9XLUfSgKQPJ0poKDEWonBwzWWrwJ42KBvKtPJIHX5sidMXVajeETkv1EhBd4dFLJKN7Zc9AlswnhLNgykP62EFfRBw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b11946a3dac712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2729,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8804aab87888a372f021daa42a5ff1d8","sha1":"071d5a0f823a7eb306a7cd2b1a721898068a3a38","sha256":"b06bbe18cffeba500ccbd60df73ea3af76f810e30e92214024d0a446c2aaea05","sha512":"0a1469f6ae44a8b9eeefdc608f236fac500db8c36f14555c67a4a68600cec42fd5cf15dc5e3ec0e72c356b1c994806805fb69b8d122b7a9e3bb82044dae68ab2","ssdeep":"","tlshash":"c551f254f3b811f5a9057bf0a64abcf2bd6f29f73b17cb2c43a408a4a4e109c4c6d955","first_seen":"2025-07-13T11:27:36.352539Z","last_seen":"2026-01-13T08:41:15.502995Z","times_seen":13,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"js.intercomcdn.com/vendor.cbc30eba.js","fqdn":"js.intercomcdn.com","domain":"intercomcdn.com","tld":"com"},"ip":{"addr":"54.240.174.93","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercomcdn.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 30 Sep 2025 00:00:00 GMT","end":"Wed, 28 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"64:9F:0E:45:43:8B:97:70:93:C0:3C:A3:8C:86:3C:74:78:46:6C:83","sha256":"E3:A5:51:D3:19:77:B6:1B:44:2E:AB:1F:87:9D:CF:AA:C8:71:56:3F:4E:E4:70:F5:F0:03:7E:70:C2:D9:65:BF"}}},"request":{"raw":"GET /vendor.cbc30eba.js HTTP/1.1\r\nHost: js.intercomcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.luckydreams4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 159489\r\nlast-modified: Fri, 19 Dec 2025 15:41:17 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: ymBAOivrk2ULJrhMBp055YVd6h8D2iO8\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 20 Dec 2025 18:35:03 GMT\r\ncache-control: max-age=31536000, s-maxage=7200, public\r\netag: \"191c7e2dad000d47bc07a26e6c6b4158\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: NBfYzgm1bGBOiU_i_RXbqwMpc-7gx3EnqwbvycsJ3nNJK39C6jugEg==\r\nage: 3592\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":519402,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65463)","md5":"580924de4e85b85c02b1bba403394800","sha1":"7dec1317359bfd0b07ae473105294f875a9785e5","sha256":"69b1346053ddf3f2129c1ad98d7129944773c0519853956564fed3a0db9d8c02","sha512":"9fdabe9a61d6f2bd849b47436e578e4a1694c37a01d74861a6186b2741fd0afe1f5591caf16667747ec745427ac5316df21fcc5e5a085b41b53739a746d0dcf7","ssdeep":"6144:FRpLUrOAnDn20vmya+pqBuVG69q0Wv2aRCmHJzCXqJhOo7iuX:TpLcOoFa+cNJbCmHJzCa9","tlshash":"01b417dd7591b4a207f312f2407f180bb379296a284c4460f664e8dd78f994da23bf6e","first_seen":"2025-12-18T13:52:01.910626Z","last_seen":"2026-01-13T02:20:23.212051Z","times_seen":1394,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-PH4QS9N\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtm.js?id=GTM-PH4QS9N\u0026gtm_auth=\u0026gtm_preview=\u0026gtm_cookies_win=x HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\nexpires: Sat, 20 Dec 2025 19:34:53 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 20 Dec 2025 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 140991\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":511457,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (53794)","md5":"790f0c637e448f57f2d617bdb0b0aaab","sha1":"b510f7f0875ca796a5dc760296759ce6f2630f11","sha256":"b5a0a28b874e647c49b93cf7e5a3c2fc104e10aa141e6aa3beba034d9f5fb32c","sha512":"bba3ec2e59ed6bb2e4681f9187cca687aaa2d1ab91eb2a8ffc77b6b8f3ddc80f465e70fbf87f4baef23a0a7d1f64a63a0b9a9dea2093574cf09ffe190dd6b45f","ssdeep":"6144:5grD7E78lkmWeJq2bulKYv9VHDmHYmyBFz0nsDuiWLxxMK:o8Sbu7llAnsDWLxz","tlshash":"21b41acdb6c5687683e26464943f064f757d24e2b14ca890f099cce42e749ba2163fbf","first_seen":"2025-12-20T19:35:41.994212Z","last_seen":"2025-12-20T19:35:41.994212Z","times_seen":1,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":114,"dns":3,"connect":7,"send":0,"wait":52,"receive":20,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget.intercom.io/widget/x0neyd87","fqdn":"widget.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"52.84.50.109","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"GET /widget/x0neyd87 HTTP/1.1\r\nHost: widget.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-length: 3157\r\nlast-modified: Sat, 20 Dec 2025 14:34:21 GMT\r\nx-amz-server-side-encryption: AES256\r\ncontent-encoding: gzip\r\nx-amz-version-id: S8WFNW7EVGss0uonEm7EC45t.a3BO3Vv\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 20 Dec 2025 19:34:24 GMT\r\ncache-control: max-age=300, s-maxage=300, public\r\netag: \"d275dca7e57648b77fd102925116d469\"\r\nx-cache: Error from cloudfront\r\nvia: 1.1 b0a74a1c8b6a1560cd851a637b999ff4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: acZyu8rptynFP7QMoVCJQoNAdg4RAYM_Q9pMr9e4hIuGr6Clck04LQ==\r\nage: 38\r\ncross-origin-resource-policy: cross-origin\r\nvary: accept-encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7591,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7591), with no line terminators","md5":"7bcae2cf00f4cd9671ac437fa44770b9","sha1":"f63fb33828a4b12ce617551778dc368214b97313","sha256":"43e90a9ecff1f35c7214e10397febade8c1c63620feaf9ad0746070c833d5f21","sha512":"21b1296de46d586bc87c854b07469a10fc7669e887906cc8b989d639cf9a0e5ad02562222d3e85f68114744f1e8cd47433fcc6cd208bdf5fdc5ed4fd71650178","ssdeep":"96:v2NH8/xVRyhsXtpZ8HEZgOM09SP0Ffpv7vWYzfDsJ0dMw938I5Zv1JVqUP:v2YVNCH8bMFOAYMSdZ935pqUP","tlshash":"49f163feb6c2793806a31566623f770c7f3b654428494890d065c8c87a7addbc12bfad","first_seen":"2025-12-20T15:01:59.644551Z","last_seen":"2026-01-13T02:20:23.182557Z","times_seen":917,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":10,"dns":1,"connect":1,"send":0,"wait":4,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/images/decorations/christmas/logo--1248.webp?hash=a9b518d72446564a3b87602f73bb9ea2","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /images/decorations/christmas/logo--1248.webp?hash=a9b518d72446564a3b87602f73bb9ea2 HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11314\r\ncf-ray: 9b11945dfa43712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:30 GMT\r\netag: \"694539ae-2c32\"\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 1\r\nexpires: Sat, 20 Dec 2025 20:34:51 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LMvgiVgl82eWmSyzO%2FEUUS8bRpZ%2BxGMWC%2FwqaiStBl7U1KJeuolKzUuwijG26ho5sKNb4rek3Fn6bp9AaNIvhXHkGLSaI5FWsnnr4tx2lA5athy87MSkq0BOvDcTERMGvSa9EjRF\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11314,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4f4e624eae54d0269ccc2088a7a429f4","sha1":"84b573eaf9c300b099646339f0ce7b8810c2ada1","sha256":"0564a7d5246c3635c6bc77b4ad794e85303f6c6caf83dff71ce13bfe34b18ef3","sha512":"60ca6a89d0b9fa37a14cb57434511b25985fc34e50dcb1102e61f7c3686cc23a4fdac496b8826a5b5eda1127aa94c8ae8151eacd3ef26a278181fc4541a1ae1d","ssdeep":"192:lsU7CjGRgOgFkVd5MgqelOj7c193f+BoN55cPwN3L/Lsz+hbFwe7YP5n:OUOKRmkP3Cc193WBoN3c4N3DoihbVYRn","tlshash":"8132cff35d6a7cad2436f6b4a48e03f56a869a41887b4a60d7dd044ccb96fc1c4f193c","first_seen":"2025-12-04T17:07:03.719972Z","last_seen":"2025-12-25T02:16:58.16862Z","times_seen":7,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/fonts/font-icons.93a30ad2..ttf","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /fonts/font-icons.93a30ad2..ttf HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/css/main.a6455864.css\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 38540\r\ncf-ray: 9b11945e4a95712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:30 GMT\r\netag: \"694539ae-968c\"\r\naccess-control-allow-credentials: true\r\ncf-cache-status: HIT\r\nage: 1\r\nexpires: Sat, 20 Dec 2025 20:34:51 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=spYEf%2F2KoSePX9hRvyTP9PXOCxBIp0niHSZvGo0IDHby9wREt5s2mkdIleZTJsLAuKvEyBwEIgo8Wcvvv3KwWVu8fc2MScaAZTcieBjhjvIaokvPGo4%2BJgp3jXof3J1yhYJrHVhO\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38540,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, font-icons ","md5":"2524fd44d640538c29143c40da32fccd","sha1":"cb5484a9422132269f94b50a185f48d5dc5c2ad6","sha256":"3a864e9f9197ab001d8b5b8dd2ad64f3d6334d82df5469f98233a9fbd7239ace","sha512":"ef43d2c2aa09ab5e3c35fa74bed344eb582358eada2ba07e99ce4c67c848439c107e24ee52c2db5c23d3aad53b1592bb422ec87b49b53436d7b6dd19bbe0c02a","ssdeep":"768:jXJiEJhz2+SciErjxzg42cT8tdgAMzNPWcbCx3F4GTwe5k/F86fSZ2GFP+U8iGEH:j5imz2zciEvRCcT/AONPWCCxVfk/FRp5","tlshash":"53034b4b9796cb9ecc12d2f64c5691728de6ee11837ff742a9865c05e0085f88c38b9f","first_seen":"2025-07-13T11:27:36.403854Z","last_seen":"2026-02-12T03:18:50.726059Z","times_seen":16,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/locales/en-CA.json?hash=5b0adf013b088bf6645c9b90e06dae48","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /locales/en-CA.json?hash=5b0adf013b088bf6645c9b90e06dae48 HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: application/json\r\ncf-ray: 9b1194686bf2712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-6171\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=w%2B2Xz%2BDtqK0qTKysoeBF%2FfacKvW6J3AWqwtcDL%2FwgoeWYkbhZykF9bwJDiIaLY0KH9HUxCf4SDbVtE%2BOJKjYG6zCWsgA4xssrNkeOCUAgp30a8fsvUc3il%2BPlHLOCpTYjIUa8o18\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24945,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fabb5af9bb691f41c53fe5525323a7f9","sha1":"a2f7ad264b98319ae075de50d845ca4743623781","sha256":"97bbedc334f6f63666e68c22a96ed5d826611c171e9247992b44b80cc3668885","sha512":"b620ac8c53041087f10e73b4385cef7e150de0fa3265e5f5e29d0426951d51fdd9e19bcda891eb944fb1fb51cb2d51bafb322737740e5a72f6e177491850def9","ssdeep":"384:mmzzWRzmf8qaAf4bERafZOsFbKLEngZPfCtcUWKVsLI7PdVfFRkoejVOPvbXnIkF:mOA6f8qaJECvz7clrAfH","tlshash":"95b2ba2bc2549fe382e6a2f14a9e31c938e406972705ad837eecd16f1b4902f1175f9d","first_seen":"2025-12-20T19:35:38.591888Z","last_seen":"2025-12-20T19:35:41.997982Z","times_seen":3,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBeFhiQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--277a2ef42b974fd374f9674ea8ebaf320f5dcd8d/mastercard5.svg","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBeFhiQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--277a2ef42b974fd374f9674ea8ebaf320f5dcd8d/mastercard5.svg HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\ncontent-disposition: inline; filename=\"mastercard5.svg\"; filename*=UTF-8''mastercard5.svg\r\ncontent-security-policy: block-all-mixed-content\r\netag: W/\"ac2dd1c81c0922c2cb48c4d9826b1f8b\"\r\nlast-modified: Tue, 14 May 2024 10:34:05 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC6B2D75A70\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 1\r\nexpires: Sat, 20 Dec 2025 20:34:53 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=aTYzpzPyWHl0je%2BD28QvoDVTOQQjc5xX7PvnnZLk%2FwRosvG8zqKKkwJvB0Q8HfiUmTFXXBIVJ9vs5NFU3%2BMMilc8Hdb2iKARL6Ud3rooQ8zVHnh9bN3X4J4qx4ziuGcDPF4Myx6e\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b11946a5dd2712e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7547,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac2dd1c81c0922c2cb48c4d9826b1f8b","sha1":"3aa558651cc62b655ecf34399ee371ca7b4e48c2","sha256":"7335a7f41f0b7ee65f2d7db1aa5f2150db5ef63257dd1d7a9039f1d682f59d89","sha512":"6d7800ebfd0d63ce6a2d0f14a24d66d313f6a4acf5bb7e9d760af916733e0d8b6f07225283cef3b96ee0f209f01a3e8893ce1ba2df73e5f3c6813e1186440a24","ssdeep":"96:3xzCmEf9y1guXd9+gl/5+0pF8enBmzqYQ/8le/w0qC1rIHUCjH40SReLUOBcEDJw:3xFEf9y1RXd9+i009X20qCJIHUCSRe5S","tlshash":"98f1ccaec66281bcf80a63fcc64398e851d5df987512d481ebda7c03e4a512c1e36ed7","first_seen":"2025-07-13T11:27:36.314354Z","last_seen":"2026-02-12T03:18:50.670304Z","times_seen":16,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBN2ovQ1E9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--3a8bad70b79ecf2b1ba4e1989995f233d57b3e02/GamesGlobal.webp","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBN2ovQ1E9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--3a8bad70b79ecf2b1ba4e1989995f233d57b3e02/GamesGlobal.webp HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 52598\r\ncf-ray: 9b11946c3f5a712e-OSL\r\ncontent-disposition: attachment; filename=\"GamesGlobal.webp\"; filename*=UTF-8''GamesGlobal.webp\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"03985d4e1d159de40a36da8199c3674e\"\r\nlast-modified: Wed, 21 May 2025 11:37:57 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC25A011F21\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:54 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=vxxmVZXpu%2FAL6Rhv4E8BOnK%2FRDONCD%2BwLz5%2Flelcrd0y3gKJM8e5Zl6qQoLhiEtfPD5ZPh1nXTI%2FjurercZVavZOrA0xtm4IzkeTk%2F%2Fh6t8e3FNWHYITwkF6OmarK%2BaxFtO91GBL\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52598,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"03985d4e1d159de40a36da8199c3674e","sha1":"38da5db2e7037a96792b2d231b43eb191f2fd52f","sha256":"bfce5b137aab5ed38c66bfbbccd61c91157b29d3067ec3f0b919e9813d68dcde","sha512":"91560a11667079740d25eb4cfa5ee685ca87cd544fa1e15dc5345bcf9eb57f3b0f0d264d20d8d80fac7c788eebc92820ce402e63ba7557451f658d7c9cf6d85a","ssdeep":"1536:+vGpyAzLfA58iA6OT45FBY7aX/zg+AE18oGyhtaUPeh4WIZU+2n:BfAeVDF+X/R9FW4+ln","tlshash":"aa330270e47811b74acf41442d5a8549db3cf4aef3942f04c4ae2a611efe6c45b9d0ae","first_seen":"2025-07-13T11:27:36.265946Z","last_seen":"2026-02-12T03:18:50.583386Z","times_seen":16,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/css/defaultVendors.ea314ba7.css","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /css/defaultVendors.ea314ba7.css HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: text/css\r\ncf-ray: 9b1194541fa4712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-45e8\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:50 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ZPPOS0jBms61%2F9rmVgE2lGaIelfa6U2ED5owQz5Hcxy2w71VnoQcw5ikrVne%2Bm5u0AUHuC2dR10Wy3jqi1920roe5%2BVlAubly5eCL0BPbGIBAdUd9FNrhBZnbHFRHhTXKotR6KVA\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17896,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14817)","md5":"d148ba5f196f364c2c2221044b293e32","sha1":"c8a4ba73a650e1ff348273328df617def3fb2c5c","sha256":"8bfae63636d3d72f148257a5be54a82ea7179f825241365cc52a3dcabebfa4cb","sha512":"86bc1b2c2c8a27db5148a33f576e7f4c394bacc157a84b8a78f6eaf4f130e97c45d9b18cf5de681b92edc7dd6cfa567c548a6de739615bbd90ee60e9c64d3be0","ssdeep":"192:nmUJbiKne1nJIH+KSme+jeHCUm0Mxw2GTR3v1zsfufibDEtbifDCsedOJ9keqvTk:mUbexJO+KW+SiRi2894WftKqL7aZZJE4","tlshash":"278244e85310182753230e3717b99bb9ed3448d24ad399aaa0c0ad58c7f6db9172f379","first_seen":"2025-07-13T11:27:36.353391Z","last_seen":"2026-02-06T08:34:03.539242Z","times_seen":16,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.webtrends-optimize.com/acs/common/js/5.4/common.js","fqdn":"c.webtrends-optimize.com","domain":"webtrends-optimize.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.webtrends-optimize.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 27 Feb 2025 11:12:15 GMT","end":"Sun, 29 Mar 2026 16:26:35 GMT"},"fingerprint":{"sha1":"01:10:A3:01:70:40:A9:D8:61:1E:E0:15:C9:05:FB:21:F5:69:1A:D0","sha256":"8E:36:F6:A7:EA:52:8B:C5:2E:0C:60:38:5F:0D:12:85:95:19:73:F0:79:6F:0C:2B:23:A9:AA:44:9D:24:B8:F5"}}},"request":{"raw":"GET /acs/common/js/5.4/common.js HTTP/1.1\r\nHost: c.webtrends-optimize.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 6511\r\nlast-modified: Mon, 08 Mar 2021 17:39:43 GMT\r\netag: \"516e-5bd09eb477b58-gzip\"\r\ncache-control: public, max-age=2678400\r\nexpires: Thu, 18 Dec 2025 12:24:11 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-azure-ref: 20251220T193450Z-17f644c5599znfvnhC1SVG1k2400000016d0000000007zrn\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_HIT\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":20846,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20547)","md5":"699a9598b8c3c6d37d78ac36d2eb874f","sha1":"f2a44f3dc7772d25e3fc402b7cef6476d5d6d782","sha256":"cfd886a01f6af8332fc28434bfeb5fb5c29e3417d31b0f8d52c1fd60bafafba8","sha512":"57a671627c86fc918423a5d8b872f89a6e40ea656896dad0c65cd1f7653680cac37ed76978a05f5a5fe53cdbed9119e8955d97119ef1e719a531a0f872aec209","ssdeep":"384:92AXNKV3UbvgzyofdzHkdD+LjpmDGmaHavGDym47Tg3Co7tJ0elZc:DZdgXDb47kr5y","tlshash":"db92faca73d1a85487e379a1943fb6137a7b948337ecd095e192e5c07bb28005227f1d","first_seen":"2023-03-07T12:21:19Z","last_seen":"2026-04-02T10:58:17.140243Z","times_seen":674,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/css/pages_entry-tsx.d089bdf0.css","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /css/pages_entry-tsx.d089bdf0.css HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: text/css\r\ncf-ray: 9b11945c58c8712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-769\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:51 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TgWz%2BeVEFFxs9MWBujvO28pZ8qz1XVGE7LDiFjd2doX%2FcT365hhgraq1puKs83rq%2BIIOHoa9hITXD0IoQpa9WHS8UXsQbcS8VfzJBidyHMdepY6YWzG4J1JfSMvahg4LyYLvoSOt\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1897,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1897), with no line terminators","md5":"d783ea0cd8cdac30d4d684626813392c","sha1":"b647544652ccc1944b7b21953e0ba3bf60a88040","sha256":"11c221f76393ecc43d4b5e40088a707702cabd56d0fa04c3932520c542553cf0","sha512":"e09a83e49f3d1c1583d46e264074eaec3b7fd49509dd7fe78de69c93844ba682b8dfff8be3037ce6de7d3b846f35abb2b5c64a3695e8bffe625a0a7ac97b6550","ssdeep":"","tlshash":"45416ed209aa237cb46b871b41f0306be30dda0a6bbf4aea0e22995d555e6d80137708","first_seen":"2025-11-21T09:29:20.96863Z","last_seen":"2026-01-13T08:41:15.445763Z","times_seen":10,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/payments/color/visa.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/payments/color/visa.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 21 Jun 2024 13:05:05 GMT\r\netag: W/\"66757a81-53c\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 62745\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a5d50b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1340,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2deb656c5455e44c3083b77562196b20","sha1":"8f8206aef391a03cb39ed013ddcaf9a8799c7718","sha256":"d869f695aec9dc4e38ec9e602f27f08298b55837ef13b60784804f14497c4f3d","sha512":"9dd810441e3ae71d30877f8500fffdd4ac96795e9300e4cafcd068829fcb200869dce15aa85a1b6761f1f7926573dfbe5dbdf77ccb40fcc1601dd65480b2d09d","ssdeep":"","tlshash":"ee2126b091fcb5d0f412c379d56d50a161a721f03ac585dc83571e18e93186d0a4f9e4","first_seen":"2025-07-13T11:27:36.36526Z","last_seen":"2026-02-12T03:18:50.693329Z","times_seen":16,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/payments/color/mastercard_w.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/payments/color/mastercard_w.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 21 Jun 2024 13:05:05 GMT\r\netag: W/\"66757a81-1cbb\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 14192\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a6d54b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7355,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"68907e1d86f871ee32d205152b1404ec","sha1":"aa839f5be7ed0481c29b3ef38ba87b3a616bc34b","sha256":"b5b1cb4742ccd8e6eecd5efe1726bd646d1c2e723dde2ec1b2023d361129b366","sha512":"91ba9bf4facf61f96544415fa4c84f9dd9e6667ed7763fa02bced8708eeca181ac971c7c372e632310aad99072a354dc882f4b99be79c856549abc75b22066c6","ssdeep":"96:TdFXO5FphIqTYDE4FRMnH5N7qHzgvRimZvTVvTQC3GiDJI3bQg90OiumviRs:TdFXuhIqTyPzgZTvRvcC3GidI3bQBpbB","tlshash":"14e14f4dd341cb9cf441a1fc59099cbc2972ef987a91e089d7986c8bd6c21bc2e25ec3","first_seen":"2025-07-13T11:27:36.334247Z","last_seen":"2026-02-12T03:18:50.62844Z","times_seen":16,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/payments/color/tether_coinspaid_w.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/payments/color/tether_coinspaid_w.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 21 Jun 2024 13:05:05 GMT\r\netag: W/\"66757a81-f23\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 42107\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a6d68b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3875,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"edff07526dc6655071ac818c5abca31b","sha1":"b2907319105096f124c3e46b21b1a1f799d2d7b9","sha256":"6856f5712822174fa5d7edec26f21e50dc962cf3794e58e4d46a20d38feb035a","sha512":"069fcb8a5e5edc16214c090b61526cf4481faa04bffa2905f36ed89d826ddb10bf5db2df1cba27d05c130d8ce6334730429cb78520c47147623883ca8cfa07a0","ssdeep":"","tlshash":"c78140e1559861f19a44a3fc4226e031bf6330fab696e708c251eed3784146e5ecddc5","first_seen":"2025-07-13T11:27:36.324748Z","last_seen":"2026-02-12T03:18:50.608455Z","times_seen":16,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/payments/color/devcode-jeton.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/payments/color/devcode-jeton.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Thu, 13 Nov 2025 14:35:07 GMT\r\netag: W/\"6915ec9b-2097\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 42881\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a9d9db4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8343,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d81167d99969c78d93cbc9856456c11a","sha1":"412a9a9f187b5344c5cf7515598428974bbf165e","sha256":"44bf6226e3fec8492ad821e75f5a801ed1f2afdc6af81c40e9b4fe27533e5aaf","sha512":"46faebb9b40709b5ad2d6932a370bd9f6f0967a17b3f4eabbeb10a6e4a499beeb2005b63e1021f04d08c64a5d87b7cb0c75bc4877c1ae819bd61e4d2a7156a19","ssdeep":"192:psF2MFNvSFGD2BZ8GbffYxplq40WOXGo1CQoD9iMq1ZCbfmVGfN:mnaOGS703xS9uabff","tlshash":"3a02b6cd3774d6fcf405b7fedb1718a83c0638ea68064174c3a56f0aa46a2688e49dd7","first_seen":"2025-11-21T09:29:21.07357Z","last_seen":"2026-02-12T03:18:50.582401Z","times_seen":13,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBM3JpQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--6d207b114aa834df28a0de46d38345598237ac2b/Group_78-min.webp","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBM3JpQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--6d207b114aa834df28a0de46d38345598237ac2b/Group_78-min.webp HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4446\r\ncf-ray: 9b11946c8fba712e-OSL\r\ncontent-disposition: attachment; filename=\"Group_78-min.webp\"; filename*=UTF-8''Group_78-min.webp\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"07893b59427777f7e3e832ae3730e2ac\"\r\nlast-modified: Tue, 14 May 2024 10:52:44 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC51EA8D1A5\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:54 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=q5xQiqjVO9uPKO8wVxW%2Bimltries6QIk1H6RbReRJ1YfEAn5Vy8RWA5QYpML6xS1mZsZg6tYVdvUD6eBAyBvug0ghpQviBKS0SeZEl09J5EIRT06Ng4GQVy%2BZkkpLU8V3XMpaqh2\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4446,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"07893b59427777f7e3e832ae3730e2ac","sha1":"c16ed24cf5f29bc741cebc5eef7beaf9916c33f5","sha256":"fa3f9c26174d641dcd6e67877136a5bbc15080354cb023ca05c7ab92606547f7","sha512":"4996d226b55e9e0c76ef5ae809903e583fc9c5cad6912a7d9e511ce17601ef30b9238ddf40982de0c5fa14b1c4f811040ab1d759e4087e68bac9afcb49544ccb","ssdeep":"96:UX3BX3gQeM2H8oXORX4y4sTjdy6dYfThoAHaym5sN:EtIFHgXb4sfdySq6JO","tlshash":"d7918da9a3f011b45482b4a3ac4a7aaea36032b0b574252db6b6c0d116c0f3d733d9dc","first_seen":"2025-02-22T05:44:22.366114Z","last_seen":"2026-02-12T03:18:50.660542Z","times_seen":17,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/api/games/collections?device=desktop","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /api/games/collections?device=desktop HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.s.v1+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Display-Mode: browser\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/vnd.s.v1+json; charset=utf-8\r\ncontent-length: 49435\r\ncf-ray: 9b11945dfa45712e-OSL\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nx-s-media-type: s.v1\r\netag: W/\"e845712723a8b6eca8993db6868df265\"\r\ncache-control: max-age=0, private, must-revalidate\r\nset-cookie: referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; domain=luckydreams4.com; path=/; expires=Tue, 20 Jan 2026 19:34:51 GMT; SameSite=None; Secure\nlocale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; domain=luckydreams4.com; path=/; SameSite=None; Secure\r\nvary: Origin\r\nx-request-id: 9b11945dfa45712e-FRA\r\nx-runtime: 0.008421\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gEpn%2FCeWyldE9kme7yjL%2FFG3WLIcBZ%2F8SOHJatquvk03WrvKstXPOmNooTUJNUzOezBDUGIflrB7wabMEllbxmfPyqlP90k7kFVvfkSmLJ7gpJ%2FCA5sekJsywcpDj4ccaUo2jX0e\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49435,"size_decoded":0,"mime_type":"application/vnd.s.v1+json; charset=utf-8","magic":"JSON text data","md5":"7081a225b7f610cacf3fdac74b44fcaa","sha1":"1fe30d61241f8a4027ce0be2563a3c7fa1ad009b","sha256":"b893945bc2938c2ba2a699785303200a7e73b75eb18cbdd0f8fdd2d27e0ee85d","sha512":"7b4317941cab3a1cec7dda94395a69c493e1fd9a0b1ae95aa0e2d6a008874177fe8d8f3544b79c1ad2def65726147bf36ee062bd428cf5b2040742bf22badf6f","ssdeep":"768:Pytjz6SCpPg9UVb5B0bVUuAVUdp9I8cNqSrEU1iVosU9hDPv4unF5KMOvdh2NXjF:IeKO","tlshash":"ae23ca45602d1c5d9bbe5ebbfcd735ea68ec0a1bb4d58a2d44c1ca87098cfc48119f2b","first_seen":"2025-12-20T19:35:38.639773Z","last_seen":"2025-12-20T19:35:42.00709Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/api/info/project","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /api/info/project HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.s.v1+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Display-Mode: browser\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/vnd.s.v1+json; charset=utf-8\r\ncontent-length: 1219\r\ncf-ray: 9b11945dfa4c712e-OSL\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nx-s-media-type: s.v1\r\netag: W/\"c3023be80e8d3c7255f3d44774180f13\"\r\ncache-control: max-age=0, private, must-revalidate\r\nset-cookie: locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; domain=luckydreams4.com; path=/; SameSite=None; Secure\nfirst_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; path=/; expires=Wed, 20 Dec 2045 19:34:51 GMT; SameSite=None; Secure\r\nvary: Accept, Origin\r\nx-request-id: 9b11945dfa4c712e-FRA\r\nx-runtime: 0.012785\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Z1B5nVvd4myCAxGNpijrnlN%2FXx0WoqM%2FCKX6ZmwBELOyK2K7Y1aH8fZjMVoUkzYrs7mYW5PX7m000ksO7xHaOJvI1aKXn3q7IRHES7ANN8OMDG6ZmJ8FgTHH49WE%2FO3frLedurRR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1219,"size_decoded":0,"mime_type":"application/vnd.s.v1+json; charset=utf-8","magic":"JSON text data","md5":"dfe899094425778442195200b6fc8ca4","sha1":"012d981a0c357cec4fcf9baf1384fa7d9d22ca3a","sha256":"c3023be80e8d3c7255f3d44774180f1330b6834ff095aaba5eccc701190026f5","sha512":"d6b7e287f3844ede19a8cbc060d9134f14676cec03a629b3f6087f071d9bdc1c11d792f029766784c650aeb54c8355e9bcb9bb20d19181b7748b18a941b87869","ssdeep":"","tlshash":"1e21cd4988662dfad990d500e6647e071f3d8d722607b428d2a88e1c22efed25337813","first_seen":"2025-12-20T19:35:38.7492Z","last_seen":"2026-01-13T08:41:15.528816Z","times_seen":5,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/websockets-legacy.d3780a4c.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /js/websockets-legacy.d3780a4c.js HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9b119467eb7b712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-9a8e\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:53 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cQj3n2fsDnBlM5xhaRq4sIgEplOupKqbieX9zu7tjj4xa%2BAkYWrBuMxe5ty1nDw2XM8fTXsv8fjgwJNGTDJm3fjRau4F34M59xyXLUfphfmWbRpO1PL%2Bai8yvuUZGJv58aHZZERj\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39566,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25373)","md5":"7c48790e3d1a7bf2a32e180f6437d3cc","sha1":"e2570c45deb1c0a63d34b69977ece7e2ab7bd30b","sha256":"ab8bf68bc47083de0786aefdb8fa97d71fa6c1a82530c50a6d9cd72a5c57d911","sha512":"e0dd694379aeb54c0d11f7b66074d023419d640d5ece1c38dbae98f1cd3c2ffec68b066811e4c97d7581a9170065283af846b50a4b0369abf7e14a3dab50f531","ssdeep":"768:2M86xRXCKTZZiklZhm4t3yIpfDoVqvbBCAis/Q0dldpWare4/rpB25mGoKuN/V1N:DLJWareI4Xi","tlshash":"8003d78ab750a40613c7b1b1e87f3407a33a5d485509402cb298e9ed5fbc78d7227fba","first_seen":"2025-12-20T19:35:38.586157Z","last_seen":"2026-01-13T08:41:15.546239Z","times_seen":5,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/providers/color/4theplayer.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/providers/color/4theplayer.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 09 Jul 2024 14:45:05 GMT\r\netag: W/\"668d4cf1-22e0\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\nage: 14402\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946aadb5b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8928,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"761a16938bda46370052b5865fec784b","sha1":"1bbe8986a916a3b83c35d0601236162fb5c60cfc","sha256":"dbc27faf4d6ed8dd580da8ca50a86201f58146f118390f6ee155855020524b5f","sha512":"03c61dc96e7fa7f019b29548bfb2f82dd0126766322fbf11da3a3983251a4128a1cb5c2d408a7a2bc27bfde45e012877258bbcdb73c8cc8784495a545799c53e","ssdeep":"96:oR9olxKtHfiG+neZ1zTL47i819fR1bVrj6qNBIxkVsQ4Gj5xqR/Gha8asaVaP:M6KtHfCeDUlrvF9IxkVsQXaGx","tlshash":"fe027749f3d8e5b1d54c93e8da0cc2a4772a00f66da2c9b08792bf1fae4585f5c5cac4","first_seen":"2025-07-13T11:27:36.318987Z","last_seen":"2026-02-06T08:34:03.505617Z","times_seen":11,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Q18MHQV7P9\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:55.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-Q18MHQV7P9\u0026cx=c\u0026gtm=4e5ca1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 20 Dec 2025 19:34:55 GMT\r\nexpires: Sat, 20 Dec 2025 19:34:55 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 139310\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":420168,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9964)","md5":"f94076810f00f1c6f3ddc04bf5d3c1ed","sha1":"ef122be44ea70142481673123403815a274dbe95","sha256":"4c742b982d30c508de7a298548748136f230b0bd120cebcaa815defccb6bfbb3","sha512":"84bfc74937ecda62505916ad8d2a249aa734f5ea5670755105da2d9e25e176abe3e5e3fc06c1f92261ee0364d5a698114999fb96588adee9f9428283e40f66fc","ssdeep":"6144:s2Ie7ma2bulKY/1u99xHDmHYmyBFzvnsi1nWoNPad4FpCpQi:SC8bu7/1mbrns6WbMpQ","tlshash":"4a94188e73ca74269396e478503f018ba97b29e2b45cc896f1c9cce02d7459a0277f7d","first_seen":"2025-12-20T19:35:42.010315Z","last_seen":"2025-12-20T19:35:42.010315Z","times_seen":1,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/api/info/currencies","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /api/info/currencies HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.s.v1+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Display-Mode: browser\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/vnd.s.v1+json; charset=utf-8\r\ncontent-length: 2426\r\ncf-ray: 9b11945e0a53712e-OSL\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nx-s-media-type: s.v1\r\netag: W/\"dbf4ee0a41bd356824c797bb1d314c5b\"\r\ncache-control: max-age=0, private, must-revalidate\r\nset-cookie: locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; domain=luckydreams4.com; path=/; SameSite=None; Secure\r\nvary: Origin\r\nx-request-id: 9b11945e0a53712e-FRA\r\nx-runtime: 0.008443\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hB3EfTc0kUOeCku9uV6DSuI2YLdjJhiPF4aKWvUBRoOBJNXkJBvEPaWh4AglXcY55HcYJEISwkn0ox%2FBdTbEVdh7rIlaa7gCmZzIpi0zplmM3Xee8L8IkFuZTbgDgI6QMWaKL%2BJR\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2426,"size_decoded":0,"mime_type":"application/vnd.s.v1+json; charset=utf-8","magic":"JSON text data","md5":"a918a450915e0ec6e5cfedabbc035722","sha1":"d2c43094f299266b886dda57ad1db5d478f23340","sha256":"dbf4ee0a41bd356824c797bb1d314c5bbe68add72b17c27cc3367b65ae154321","sha512":"d75f4cba6b56f0ed269c71bb266408179b8def031f73fdd6a45c159151cee0345f260d6d10b5629446b4c0c6efa9eb3d8f3bf7fa0ccd4e525a66a9afa5e8ed9a","ssdeep":"","tlshash":"85416536742ee6efe412b1d1e60a2dc7992b331c65d4790c6cdd1624dac2cfc9c69b22","first_seen":"2025-06-22T09:39:41.687029Z","last_seen":"2026-02-12T03:18:50.680428Z","times_seen":15,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/api/player/settings","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:51.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /api/player/settings HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/vnd.s.v1+json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Display-Mode: browser\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:51 GMT\r\ncontent-type: application/vnd.s.v1+json; charset=utf-8\r\ncontent-length: 198\r\ncf-ray: 9b11945e0a56712e-OSL\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin, strict-origin-when-cross-origin\r\nx-s-media-type: s.v1\r\netag: W/\"653b8caaecf698b6b7e2b9f1427aff32\"\r\ncache-control: max-age=0, private, must-revalidate\r\nset-cookie: locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; domain=luckydreams4.com; path=/; SameSite=None; Secure\r\nvary: Accept, Origin\r\nx-request-id: 9b11945e0a56712e-FRA\r\nx-runtime: 0.009807\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BKOGWViWpF7giA%2BZLIXEiDuP1EfNgWQUykoVZxy2luM4xVh4WvVr0mZhsAmi%2FQH8XOvQ8207VmUtmXARkvK3YeDwyG70CFqZ9IAc2kmLG029fkv%2FE2krmUHx%2BEnMjEyknXOO%2FA6I\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198,"size_decoded":0,"mime_type":"application/vnd.s.v1+json; charset=utf-8","magic":"JSON text data","md5":"e345b1ae9d72268a661d72a516888e07","sha1":"e5dfea35e6e259668608a9640379613d5402a6b1","sha256":"653b8caaecf698b6b7e2b9f1427aff327b591227ffb8d12cbb6e96860f56e86a","sha512":"9634315c3b75ffa7a5c26adb96047b9a7b7e5d0f1a9717b3183992a2de892149f9c68a16dc6dba8dd3798d06c28d54cbdb71d4f5a253bd672e9971e650f0b398","ssdeep":"","tlshash":"b8d022420c95d44e8d9993e464682393624bd0ba09008160674cccad5cc8207270a282","first_seen":"2025-12-20T19:35:38.801857Z","last_seen":"2025-12-20T19:35:42.014921Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netcontent.cc/luckydreams/logos/payments/color/astropay_card_w.svg","fqdn":"netcontent.cc","domain":"netcontent.cc","tld":"cc"},"ip":{"addr":"172.64.152.43","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:53.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netcontent.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 04:50:39 GMT","end":"Sat, 28 Feb 2026 05:50:35 GMT"},"fingerprint":{"sha1":"60:63:78:9F:51:36:23:31:ED:92:95:9A:20:37:8E:F5:40:F5:3B:EE","sha256":"94:01:8E:B4:18:A6:A3:A8:31:CC:74:5D:45:0F:62:3F:EF:1A:A5:53:47:D7:47:1F:21:82:AC:21:C6:E3:4D:51"}}},"request":{"raw":"GET /luckydreams/logos/payments/color/astropay_card_w.svg HTTP/1.1\r\nHost: netcontent.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 21 Jun 2024 13:05:05 GMT\r\netag: W/\"66757a81-27f2\"\r\nexpires: Sun, 21 Dec 2025 19:34:53 GMT\r\ncache-control: public, max-age=86400\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 7806\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9b11946a7d78b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10226,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0656673dba90ff5f6a959d8a3d2fd338","sha1":"7b7fa40921f87f8d37a8efa110ad6ae64a319ad2","sha256":"5c6443ae64f4e3434531d711c4233d4975ef7682bf48d751d5d2c8f9746865e9","sha512":"3965a8af8aa9a4e487df2268a229788931b2816cab5a15ac2a0be7264c9a7b8273c115628b48594f0b4cc183d52e993218f842cedd1f5d9806e8a83a5bd97269","ssdeep":"192:Hs0nXz1+YaegLteoumXGD40rGs1IMmBFezY3LBTRrc16cuIur09d3i:Hxp+HrLcojY40rGsHGrFIuYXi","tlshash":"292281d5b3f8e2f4a404f3f8826698397b1728febbb2d9a5c3952c50945204d4db8ce1","first_seen":"2025-02-22T05:44:22.405958Z","last_seen":"2026-02-12T03:18:50.629864Z","times_seen":17,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"netcontent.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBM25pQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--1f9189ad7935e213129743eb40b0d29d1a70fce7/Group_97-min.webp","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:54.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /cms/rails/active_storage/blobs/redirect/eyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBM25pQlE9PSIsImV4cCI6bnVsbCwicHVyIjoiYmxvYl9pZCJ9fQ==--1f9189ad7935e213129743eb40b0d29d1a70fce7/Group_97-min.webp HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/en-CA/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s; locale=ImVuLUNBIg%3D%3D--fe8a3df83e2b4365232effa134139d4e49114acd; referral_params=eJxLSS3LTE61TUktzi7JLwAAKbQFqA%3D%3D; first_visited=dHJ1ZQ%3D%3D--a2e31d48a2b7814f1a0c51a7300f8286ed470321; _dd_s=aid=3b06d1d9-ca71-46a2-af9f-29ca7ac83127\u0026rum=2\u0026id=2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\u0026created=1766259292060\u0026expire=1766260192060\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:54 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4522\r\ncf-ray: 9b11946c8fbb712e-OSL\r\ncontent-disposition: attachment; filename=\"Group_97-min.webp\"; filename*=UTF-8''Group_97-min.webp\r\ncontent-security-policy: block-all-mixed-content\r\netag: \"294238505720df8ed7402fae6fcffe59\"\r\nlast-modified: Tue, 14 May 2024 10:52:44 GMT\r\nvary: Origin, Accept-Encoding\r\nx-amz-request-id: 18829BC25993F174\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:54 GMT\r\ncache-control: public, max-age=3600\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=%2BkBvV7kctuOqUKv43mXstpCmlmZ0C30o2GtHIdbmQCU9hgSDtJPkKHkolJvD9zOP1thbs1K6zTml%2BFWCJU8ca%2FnTSVXD7n6cAnd%2BH7YL1LlVQggTE3i8otfWlyl8Qq12HBAhZ%2F%2Bm\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4522,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"294238505720df8ed7402fae6fcffe59","sha1":"3f65dd3041291dc8c3bfb6fe4cbc7800f42ae941","sha256":"dfac287730cdbac71c0c947f915fd95312b09ee470dda16f16565210993d7572","sha512":"d78b35d36591c79ae20721d40ff326d94866f6b302626218aa4f7d01cfbf7b9c502499f954f753406cbe611c8ee342274cef3e7b5baef99c97f0c82b913a8812","ssdeep":"96:0r/2zKZ1rJKvGHeMzlnxLWhVxfl3DFaWdisYqlgR1uxOpC:0qzKD5lxLoFDFaW01uxOpC","tlshash":"2d917e8f01667d46c5c37cb225c4bc11415f2ce4639ebca477211a45d6bc959af31fd8","first_seen":"2025-02-22T05:44:22.369497Z","last_seen":"2026-02-12T03:18:50.699472Z","times_seen":17,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api-iam.intercom.io/messenger/web/launcher_settings","fqdn":"api-iam.intercom.io","domain":"intercom.io","tld":"io"},"ip":{"addr":"52.55.140.37","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:55.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.intercom.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 13 Nov 2025 00:00:00 GMT","end":"Fri, 11 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E2:7C:0F:4C:CC:B1:6F:45:04:99:4A:D4:CB:5C:0B:60:CA:75:CD:8E","sha256":"A6:51:D4:CB:51:4E:EF:B9:AD:B6:95:84:A1:3B:92:C1:BF:81:F5:22:36:A3:50:A2:8E:92:09:4A:15:D0:7E:CC"}}},"request":{"raw":"POST /messenger/web/launcher_settings HTTP/1.1\r\nHost: api-iam.intercom.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 463\r\nOrigin: https://www.luckydreams4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":463,"data":"app_id=x0neyd87\u0026v=3\u0026g=5839509c7ebc3d18eebb2635b5383d33bd89d98f\u0026s=f6d1ea9c-18f7-41a1-a5f4-2da7d00ca263\u0026r=\u0026platform=web\u0026installation_type=js-snippet\u0026installation_version=undefined\u0026Idempotency-Key=d7fcf8c87058ecaf\u0026internal=\u0026is_intersection_booted=false\u0026page_title=Online%20Casino%20Real%20Money.%20Play%20Best%20Online%20Casino%20Free%20%7C%20Lucky%20Dreams\u0026user_active_company_id=undefined\u0026user_data=%7B%7D\u0026referer=https%3A%2F%2Fwww.luckydreams4.com%2Fen-CA%2Fentry"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:56 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstatus: 200 OK\r\nvary: Accept,Accept-Encoding\r\nx-intercom-version: f200ec98c04843f7a1afb825d6cc67fcfbca1006\r\naccess-control-expose-headers: x-request-id, x-runtime\r\ncontent-encoding: gzip\r\nx-request-id: 0026odkcmh1pel8rd0q0\r\netag: W/\"d5ef40cb6edf5ba6d5ee6811631280fa\"\r\nx-frame-options: SAMEORIGIN\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: https://www.luckydreams4.com\r\nstrict-transport-security: max-age=31556952; includeSubDomains; preload\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-max-age: 86400\r\nx-xss-protection: 1; mode=block\r\nx-request-queueing: 0\r\ntiming-allow-origin: *\r\naccess-control-allow-headers: Content-Type, Idempotency-Key, X-INTERCOM-APP, X-INTERCOM-PAGE-TITLE, X-INTERCOM-USER-DATA, traceparent, X-Continue-Intercom-Trace\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\nx-runtime: 0.049553\r\nx-content-type-options: nosniff\r\nserver: nginx\r\nx-ami-version: ami-0523376fccd5816a1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":453,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b76f10f330c4dd00a9981e4b8cb81398","sha1":"2d8c24a431b8eee784a9372d3c46f8722345e82b","sha256":"d5ef40cb6edf5ba6d5ee6811631280fa468b38ae165d2decbdca97b761c401cb","sha512":"4de8a4fcf11252d80dc30b3223f8e0fb1f4241bf1c39d9a812e839a0d376ac6c5343ad64bc5641db8691508613a3a04d5941a8f5c931e76acba87b6c7fb6654d","ssdeep":"","tlshash":"73f0dcdeded80c3a29935beae23a9c23038e1c9576440da6e0709b1870cb00d020200b","first_seen":"2025-12-20T19:35:38.671999Z","last_seen":"2025-12-20T19:35:42.018453Z","times_seen":3,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":196,"dns":2,"connect":93,"send":0,"wait":146,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"browser-intake-datadoghq.eu/api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A6.6.2%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Aluckydreams.com%2Cversion%3A2.1.86-f54dbe17\u0026dd-api-key=pub6944d0b05408999e2a258fb6e57933fb\u0026dd-evp-origin-version=6.6.2\u0026dd-evp-origin=browser\u0026dd-request-id=51932659-2612-4dd4-8676-a99bd491a57d\u0026batch_time=1766259296097","fqdn":"browser-intake-datadoghq.eu","domain":"browser-intake-datadoghq.eu","tld":"eu"},"ip":{"addr":"34.149.115.139","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:56.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.browser-intake-datadoghq.eu","organization":"Datadog, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 25 May 2025 00:00:00 GMT","end":"Sat, 30 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"62:0A:8C:EB:5B:F0:38:A4:34:6C:43:65:FE:09:67:F7:83:AD:44:C5","sha256":"73:49:93:8C:8C:F9:73:3A:66:03:C0:4D:5A:08:45:09:83:4A:2D:76:73:88:8E:6D:CE:3A:2F:EF:6E:C1:86:09"}}},"request":{"raw":"POST /api/v2/rum?ddsource=browser\u0026ddtags=sdk_version%3A6.6.2%2Capi%3Afetch%2Cenv%3Aproduction%2Cservice%3Aluckydreams.com%2Cversion%3A2.1.86-f54dbe17\u0026dd-api-key=pub6944d0b05408999e2a258fb6e57933fb\u0026dd-evp-origin-version=6.6.2\u0026dd-evp-origin=browser\u0026dd-request-id=51932659-2612-4dd4-8676-a99bd491a57d\u0026batch_time=1766259296097 HTTP/1.1\r\nHost: browser-intake-datadoghq.eu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.luckydreams4.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 16147\r\nOrigin: https://www.luckydreams4.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":16147,"data":"{\"_dd\":{\"format_version\":2,\"drift\":2,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293765,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"d6fa9087-a917-4c7e-810c-7e22e10e4868\",\"type\":\"image\",\"duration\":80000000,\"url\":\"https://netcontent.cc/luckydreams/logos/payments/color/devcode-kluwp_w.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":2,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293765,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"93a3d910-f230-403f-9a6c-d653ec1b54ff\",\"type\":\"image\",\"duration\":80000000,\"url\":\"https://netcontent.cc/luckydreams/logos/payments/color/astropay_card_w.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293766,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"ac6c1af0-d9b7-4201-ba16-169457786664\",\"type\":\"image\",\"duration\":89000000,\"url\":\"https://netcontent.cc/luckydreams/logos/payments/color/devcode-skrill.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":2,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293766,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"a710f0df-2252-431b-8146-f5db7769fd36\",\"type\":\"image\",\"duration\":83000000,\"url\":\"https://netcontent.cc/luckydreams/logos/payments/color/astropay_direct_w.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293767,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"3d06d125-55d8-4cf7-9667-6c28d4784573\",\"type\":\"image\",\"duration\":82000000,\"url\":\"https://netcontent.cc/luckydreams/logos/payments/color/devcode-neteller.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293767,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"96596501-164e-4a0a-96a9-d4198ab36b98\",\"type\":\"image\",\"duration\":90000000,\"url\":\"https://netcontent.cc/luckydreams/logos/payments/color/devcode-mifinity_w.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293767,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"f8294297-8bd4-4798-839a-75406b756de4\",\"type\":\"image\",\"duration\":89000000,\"url\":\"https://netcontent.cc/luckydreams/logos/payments/color/devcode-instadebit.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293767,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"cbc51c7f-486b-4d22-9ef8-fc7e53d7347c\",\"type\":\"image\",\"duration\":92000000,\"url\":\"https://netcontent.cc/luckydreams/logos/payments/color/devcode-idebit_w.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293768,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"cff34174-79eb-418b-8516-b1925b7b1cda\",\"type\":\"image\",\"duration\":89000000,\"url\":\"https://netcontent.cc/luckydreams/logos/payments/color/devcode-bankintl_w.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293769,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"e1a126c7-a251-4c76-9527-d46f6851b728\",\"type\":\"image\",\"duration\":96000000,\"url\":\"https://netcontent.cc/luckydreams/logos/payments/color/devcode-jeton.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293769,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"07b164ce-625b-4af6-aae6-795e1664592a\",\"type\":\"image\",\"duration\":97000000,\"url\":\"https://netcontent.cc/luckydreams/logos/payments/color/devcode-banklocal.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293769,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"8c98bb51-f188-4ec9-8ed8-7ac404cc7f9b\",\"type\":\"image\",\"duration\":96000000,\"url\":\"https://netcontent.cc/luckydreams/logos/payments/color/devcode-muchbetter.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293770,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"90f7a569-5d41-4ddf-9958-ab5c2f51194d\",\"type\":\"image\",\"duration\":97000000,\"url\":\"https://netcontent.cc/luckydreams/logos/providers/color/100hp.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293770,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"a0bf1e7f-edf1-4b7a-9fe2-b57c101f7174\",\"type\":\"image\",\"duration\":100000000,\"url\":\"https://netcontent.cc/luckydreams/logos/providers/color/1x2gaming.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293770,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"b280fae4-8cd2-4011-b358-a7276ff3efaa\",\"type\":\"image\",\"duration\":100000000,\"url\":\"https://netcontent.cc/luckydreams/logos/providers/color/1spin4win.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":1,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293771,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"9bad252d-323e-47ca-8a58-10c7b28f74b5\",\"type\":\"image\",\"duration\":102000000,\"url\":\"https://netcontent.cc/luckydreams/logos/providers/color/3oaks.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}\n{\"_dd\":{\"format_version\":2,\"drift\":0,\"configuration\":{\"session_sample_rate\":100,\"session_replay_sample_rate\":0},\"discarded\":false},\"application\":{\"id\":\"5ad33cd7-cca3-44ed-b936-e1a64a09c8c7\"},\"date\":1766259293771,\"source\":\"browser\",\"session\":{\"id\":\"2d52aee9-2a4f-45c4-bc2f-5f2f761e916b\",\"type\":\"user\"},\"display\":{\"viewport\":{\"width\":1280,\"height\":1024}},\"connectivity\":{\"status\":\"connected\"},\"type\":\"resource\",\"view\":{\"url\":\"https://www.luckydreams4.com/en-CA/entry\",\"referrer\":\"https://www.luckydreams4.com/entry\",\"id\":\"78c36a7b-2e7f-4229-8468-461f72eb49af\"},\"action\":{\"id\":[]},\"service\":\"luckydreams.com\",\"version\":\"2.1.86-f54dbe17\",\"resource\":{\"id\":\"fdbf0c74-b0a2-4760-ab3a-c752a1bd0f71\",\"type\":\"image\",\"duration\":107000000,\"url\":\"https://netcontent.cc/luckydreams/logos/providers/color/5men.svg\"},\"usr\":{\"stag\":\"null\",\"id\":\"anonymous\",\"connectionType\":\"null\",\"displayMode\":\"browser\",\"anonymous_id\":\"3b06d1d9-ca71-46a2-af9f-29ca7ac83127\"}}"}},"response":{"raw":"HTTP/2 202 Accepted\r\ncontent-type: application/json\r\ncontent-length: 53\r\ndd-request-id: 51932659-2612-4dd4-8676-a99bd491a57d\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ndate: Sat, 20 Dec 2025 19:34:55 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3ed56e63def407d7610be1e4a3c5d800","sha1":"039bb40e0cb623f54bafec916f788cb9f406ebca","sha256":"f391cc6bddbb405fcf5208f5442e03a4c5be6c30d2c54cdc507e3f38a0a72111","sha512":"fe3d1dd4a83f791ed3e3ecd6fda87acad72d417158d9a9ce1254f282cabf2b1199839da6356bce2b65b9d6c4e68559c8fae6f34767717a233e85ef179e56a35a","ssdeep":"","tlshash":"f0900286986270d5f8544a02081c65460450b5c75496006bb40011b4e449291920549c","first_seen":"2025-12-20T19:35:42.020414Z","last_seen":"2025-12-20T19:35:42.020414Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.luckydreams4.com/js/main.32844814.js","fqdn":"www.luckydreams4.com","domain":"luckydreams4.com","tld":"com"},"ip":{"addr":"5.10.246.192","port":443,"asn":209242,"as":"Cloudflare London, LLC","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.luckydreams4.com/entry","date":"2025-12-20T19:34:50.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"luckydreams4.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 22 Nov 2025 11:05:03 GMT","end":"Fri, 20 Feb 2026 12:04:53 GMT"},"fingerprint":{"sha1":"79:C2:20:3D:9F:8C:CD:17:C9:91:C4:A2:B3:ED:20:DD:A5:8A:2A:F4","sha256":"A6:54:24:B8:2B:97:2E:90:BF:B0:7F:DC:3A:73:94:6D:8D:FA:1C:42:BB:0D:91:66:5E:71:9D:22:1F:85:32:B3"}}},"request":{"raw":"GET /js/main.32844814.js HTTP/1.1\r\nHost: www.luckydreams4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.luckydreams4.com/entry\r\nCookie: __cf_bm=ssur_Dc0hyOZVMTNBj82dkJji9AOeqcNW4ltTl.CmgA-1766259290-1.0.1.1-0XDTGsSDcYloNAhRstfrQsIJeimkmwSmC4nuInodfp_SCliwa8kjkg3ywDUr.wskHHgwPs.dAbPJ9kq7xjBgz7G2qImK3kujsagjDVkSP1s\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 19:34:50 GMT\r\ncontent-type: application/javascript\r\ncf-ray: 9b1194540f8c712e-OSL\r\nlast-modified: Fri, 19 Dec 2025 11:40:31 GMT\r\netag: W/\"694539af-71f4d0\"\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 2\r\nexpires: Sat, 20 Dec 2025 20:34:50 GMT\r\ncache-control: public, max-age=3600\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=c9UbT5hCxFSV2oX1Y5gqRUauMvCLf%2BS2FXtN8saV%2FJAjvAGeRdVcgXTYzGxVW34OF5n2D1uXl6CArn74Bfi8DPsD9dX2XzQv0E5wrlTcbzzQchfXK0QAf1nRVBptwFWXxMhuzKOs\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7468240,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"a2ed29c39d59dfa2e8c6a7e650bfe0c4","sha1":"4067863c35232105445d129276ae46827498e3c0","sha256":"ce48c2fed51381b5cf133e8a808c05818805d52a4056bb9dd5dec8f1ddf7e872","sha512":"bc92b103b423889b521d8e102a0fc9e8db136e4ff6ca52d0423cc25e1fcc3720114ef9b2069f6b447dbebf5acb7276edda8a1a51254f42cdc8e18a79130ef8de","ssdeep":"6144:SWjeBHvcNvmX6sLLFxWmgWexZtJU2ybTMJPkzCcFVm8L4vd4TJfFRZsZ9nMM9Ia9:jnMMiaO//8wD4aljzt3a","tlshash":"6f25d942a3396219683b3b4e615dfac8d224cd8ef01b81a1d3c9c47d35cbe86651dfa7","first_seen":"2025-12-20T19:35:38.704746Z","last_seen":"2025-12-20T19:35:42.022789Z","times_seen":3,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
