{"report_id":"41c2dd7c-fc56-4871-9cca-0fe2f4060bde","version":6,"status":"done","tags":[],"date":"2026-02-20T16:48:06Z","url":{"schema":"https","addr":"tongambler.xyz/","fqdn":"tongambler.xyz","domain":"tongambler.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tongambler.xyz/","fqdn":"tongambler.xyz","domain":"tongambler.xyz","tld":"xyz"},"title":"TON Gambler","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T04:44:57.936605Z","times_seen":17967913,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"tongambler.xyz/","fqdn":"tongambler.xyz","domain":"tongambler.xyz","tld":"xyz"},"ip":{"addr":"104.21.49.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-27T16:48:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"tongambler.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"tongambler.xyz","ip":{"addr":"172.67.153.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-17","domain_rank":0,"first_seen":"2026-02-20T16:48:07.178391Z","last_seen":"2026-02-20T16:48:07.178391Z","alert_count":11,"request_count":11,"received_data":812409,"sent_data":5018,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"config.ton.org","ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"domain_registered":"2003-11-13","domain_rank":0,"first_seen":"2025-10-03T21:27:24.901658Z","last_seen":"2026-02-15T01:31:53.094901Z","alert_count":0,"request_count":34,"received_data":518187,"sent_data":15121,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-02-18T12:17:12.965123Z","alert_count":0,"request_count":1,"received_data":114323,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tongambler.xyz/assets/index-CAF2x_IE.js","fqdn":"tongambler.xyz","domain":"tongambler.xyz","tld":"xyz"},"ip":{"addr":"172.67.153.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"31a1fb17de4f849dcfb12b5a1d29a166","sha1":"02f5156a8db158a3fb1383ff627d90e2f3889857","sha256":"180a52ea1031a179401798dae8cb9c3a1f815e6c47f9e12886c87b750536b3b6","sha512":"7c7c146eb0eb98bed903bd8dfead3a38711f88570444573daaa217b297edbf7aaf557511062a6fda46534dc6014f3076eb2df30f75f8a7e996a7b5f18f837032","ssdeep":"12288:aXaHYaVjjwp/RxOxBxkByv0ObtLLzc4JYfUYHgs:aKtVjG/RU6yv0ORLzjJ/Yx","tlshash":"78f45cd9b2997154679346e4507b0107b3392c66780d81b4f32cc8ea2fb1589a2bbffd","size":792939,"data":"","first_seen":"2026-02-20T16:48:11.215717Z","last_seen":"2026-02-20T16:48:11.215717Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"70dbd7ade763706614c7ee99973dcc9c","sha1":"0b980ef4fe3e17d253fc2cdb672f1208736b733f","sha256":"b47f6cb105860d35b4ae512c22696a33157a365f4c885a33488f22ea8a3b6a03","sha512":"03c1f60831856975b61bea126ead239f116235fb0422178425d6b8c86553a3548d487c919f0f3f81e14de201680f63b7be24106589faffd8f3c56b28c2d19b45","ssdeep":"1536:pO5TpRdo54F0WN2Zbjcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITrm:s5TpRdccKFU76x1H","tlshash":"6eb32e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","size":113990,"data":"","first_seen":"2025-07-29T21:33:08.487755Z","last_seen":"2026-07-18T07:05:28.914407Z","times_seen":3814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tongambler.xyz/assets/index-jC_LbQdg.css","fqdn":"tongambler.xyz","domain":"tongambler.xyz","tld":"xyz"},"ip":{"addr":"172.67.153.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:44.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongambler.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 17:07:17 GMT","end":"Tue, 19 May 2026 17:07:16 GMT"},"fingerprint":{"sha1":"0A:2B:66:AD:E5:EA:5C:39:99:D4:E7:84:11:AB:43:3C:A9:F0:73:C1","sha256":"52:FB:47:C1:37:78:B9:A6:2B:4B:D1:26:19:BC:00:17:00:90:7C:E6:A6:3A:9D:5A:BD:ED:01:BD:68:15:21:76"}}},"request":{"raw":"GET /assets/index-jC_LbQdg.css HTTP/1.1\r\nHost: tongambler.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zfqc9ZUiRDytrSr8BKXRpKQ1psjlqxwrifxxgMu41ngwPr1WwvZiVPWSC%2BdA5f0h7Uvc2j28Ts%2BUTUcmzqq%2BrS3gfZDNpz%2Fe70Ol%2FTKX\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Fri, 20 Feb 2026 16:47:44 GMT\r\netag: W/\"363-19c7bb6ee00\"\r\nlast-modified: Fri, 20 Feb 2026 15:41:52 GMT\r\nx-powered-by: Express\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9d0f7cd18a3fd42a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":867,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (866)","md5":"74760b9cfd7788eeeb045b4f18ae55f0","sha1":"e3cde65eb2f627f555638dfeaab6e1c8bde8fd05","sha256":"b85f58d07436eb87a92abcd42cb478c357d3ad333d3952823e848d666260b9e0","sha512":"e67a40b4264dd73b5f7bb86995dccea1cf500f2357aba637818e3e0e64d2c6fbdc5c3e2322a0383f718d70cd02ab016c75fec5cd5519e3abeaa23e5b3407d8f5","ssdeep":"","tlshash":"d91167374784531096b38d7b5af1d61c330945c2b812dadd618599e8c7877cd37b194b","first_seen":"2026-02-20T16:48:11.170111Z","last_seen":"2026-02-20T16:48:11.170111Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"tongambler.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/okxwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/okxwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 50253\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-5874deadb414a54ca8508b2440227010-f8290261c6888826-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-c44d\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc7\r\nage: 136\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:45:29+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50253,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"cb9159c1e2edd95e3a1aa12a3fd6c19b","sha1":"9478e1695f1e905cc7eae54768e895683348b484","sha256":"c5d0323a3d22fa19a7b31663ef57e66bb2ee14feacd110386d77da70510f2ae0","sha512":"884c20e6550acd343bcb8a4300a3706b4bd8db2d3b8a65a65dae59fec3dbbc882ef47fa9f43a3cca0c70554c1fc3176b99ddde1b5091596fc5584adb7753a3bf","ssdeep":"768:h7kYcFW8PletzHHsDYV5aurztuvndxlTgftq0iZs2mLG3+TSrnZ7cGee2mKU/9De:hU7mHMD/uUvn3pgf80iiLG3qGeme97","tlshash":"3633029bff6b7cc60d6110d30d28079b960a9146ec70dc97e406552b1bd8b82b7dfb61","first_seen":"2025-11-22T11:30:21.534651Z","last_seen":"2026-08-16T15:40:18.023994Z","times_seen":408,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":31,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/gatewallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/gatewallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 6751\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-f2f057507cd983ff7f810a4c43356515-859f8552843c12da-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-1a5f\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 93\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6751,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"851d63e4f663bfecd0370dfcdb0ba69b","sha1":"de014e7a7df805557a65d9d58fb4e70224799e61","sha256":"6e84eb43cd2faeb5037e32b4b2e2aec1b417bd32dfee397de90918bcbef561b1","sha512":"5e2f2434179f71ecc5ba2b689a7359df2d723254bbc08c29512b87b5e85e25ebf756f661964cd82058becea038846870359b4fe72ac76c9a8ec5e55ca4a5cf9c","ssdeep":"192:FSzHxFMOKxw3uBeLUr7iMgf4v4LVrjfQNCG3:kzHxFM7guBguia+rs","tlshash":"b4d19fc4a398933dc95e61cb3ed36b939f829614632462267fb5353124f215cbeb8372","first_seen":"2025-11-22T11:30:21.512015Z","last_seen":"2026-08-16T15:40:17.953027Z","times_seen":407,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/sparx.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/sparx.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 12031\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-487097c9f2f748d06e9791b70bad6911-d2b81c31e4b93eab-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-2eff\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc7\r\nage: 80\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12031,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"350d95923ef7019d8c78aa10e3dcc84c","sha1":"f2dd0e01a18a84ac6310bb609df5a3a52c2cd35b","sha256":"d380702b04582bb035eb3e5ebfb4cb99b1944447fed694d759e5b87cb0502b17","sha512":"ac6a84ea2bcb39b631b3eada1b91042c58f3b9650e8bfd52c5f7a473b5b2651a03c2ed3bbc0fa281710f11feff2a0d7924a47f770d95fecd553e543f0b61a3e5","ssdeep":"192:wS4DQJ05f0IFbka5nldHEujoV152XcyLNH7L1GflxCNH/slQvlgmk7uoHWIaLbog:XiXf0i1fHpjuHGx9ilx06QvAu3IaL0zk","tlshash":"b0428ede615d3ac9e13a13f537db186b2e9723bec012b29d29137f160e7a00a9572c5c","first_seen":"2025-12-24T06:30:42.004317Z","last_seen":"2026-08-16T15:40:17.972308Z","times_seen":515,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tongambler.xyz/api/game/recent","fqdn":"tongambler.xyz","domain":"tongambler.xyz","tld":"xyz"},"ip":{"addr":"172.67.153.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:55.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongambler.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 17:07:17 GMT","end":"Tue, 19 May 2026 17:07:16 GMT"},"fingerprint":{"sha1":"0A:2B:66:AD:E5:EA:5C:39:99:D4:E7:84:11:AB:43:3C:A9:F0:73:C1","sha256":"52:FB:47:C1:37:78:B9:A6:2B:4B:D1:26:19:BC:00:17:00:90:7C:E6:A6:3A:9D:5A:BD:ED:01:BD:68:15:21:76"}}},"request":{"raw":"GET /api/game/recent HTTP/1.1\r\nHost: tongambler.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 20 Feb 2026 16:47:55 GMT\r\netag: W/\"6dd-P9tCqEzrXx/yf4hJTaY6sFHRL1Y\"\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8nXYQUpRsa5Fcm2Zz3G7EPwwxSeV1WxxSFJntRGMBGFco8YtbI0DS23W1rzcHPhHuMktULXmfNhFX6O87K838AJJI%2B2SujjYYiweU3vJ\"}]}\r\ncf-ray: 9d0f7d138d07d42a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1757,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e4db610532c1722ee5b05ffa2b1a6fae","sha1":"3fdb42a84ceb5f1ff27f88494da63ab051d12f56","sha256":"9958796163830a908fd7e83530faf4eebeeb1cbafbe8bdf68b191690eb2871b6","sha512":"93f10f78c501fe73b10261520a735bafbb69fa2999f82b80d3206ab0c38c6fa55c15fb14384dd298caff970d42ce78c1765d2e950f307be991e85869826e454b","ssdeep":"","tlshash":"6e31403b43bf607c84151fd3c8e67654746db32601c34280bf4a9b1aa596c365def574","first_seen":"2026-02-20T16:48:11.176259Z","last_seen":"2026-02-20T16:48:11.176259Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"tongambler.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tongambler.xyz/ton-icon.png","fqdn":"tongambler.xyz","domain":"tongambler.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongambler.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 17:07:17 GMT","end":"Tue, 19 May 2026 17:07:16 GMT"},"fingerprint":{"sha1":"0A:2B:66:AD:E5:EA:5C:39:99:D4:E7:84:11:AB:43:3C:A9:F0:73:C1","sha256":"52:FB:47:C1:37:78:B9:A6:2B:4B:D1:26:19:BC:00:17:00:90:7C:E6:A6:3A:9D:5A:BD:ED:01:BD:68:15:21:76"}}},"request":{"raw":"GET /ton-icon.png HTTP/1.1\r\nHost: tongambler.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T04:44:57.936605Z","times_seen":17967913,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"tongambler.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tongambler.xyz/api/game/recent","fqdn":"tongambler.xyz","domain":"tongambler.xyz","tld":"xyz"},"ip":{"addr":"172.67.153.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongambler.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 17:07:17 GMT","end":"Tue, 19 May 2026 17:07:16 GMT"},"fingerprint":{"sha1":"0A:2B:66:AD:E5:EA:5C:39:99:D4:E7:84:11:AB:43:3C:A9:F0:73:C1","sha256":"52:FB:47:C1:37:78:B9:A6:2B:4B:D1:26:19:BC:00:17:00:90:7C:E6:A6:3A:9D:5A:BD:ED:01:BD:68:15:21:76"}}},"request":{"raw":"GET /api/game/recent HTTP/1.1\r\nHost: tongambler.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\netag: W/\"6dd-3p2ggA8NPDr85HQWPsT45W8u1EU\"\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pIeoqAvSAFNHFtrgaWxJXnQ1Ca%2FseS7VRXCVMiUgF%2FVZE%2BqDy6yQhx5yIwS0nJiBDIzznpp4j%2BlnjDBRtQWMXugmYGOcEsGnWKOAur%2B4\"}]}\r\ncf-ray: 9d0f7cd5daf4d42a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1757,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cc33e49b7b53810f43b25b9bda9dffde","sha1":"de9da0800f0d3c3afce474163ec4f8e56f2ed445","sha256":"6b0554113828d21e69eeb12dc64cfe3766be9b72913184766daddeb6b257c274","sha512":"72383329a2a4ee511159c347c6fe2509034b45e41f154c2c3f978321ebd1397bd68b0865855c6969d2d1b1b83111a3b651f11860db19ec2392e486f976643cac","ssdeep":"","tlshash":"24316f3b43bf207c84151fd3c8e6b6a4746db32601c38280bf8a9b1aa596c365cef574","first_seen":"2026-02-20T16:48:11.179024Z","last_seen":"2026-02-20T16:48:11.179024Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"tongambler.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/okxtonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.949Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/okxtonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1419\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-f3ee880d3d20080205e9c0c92b8a0f83-1e71ef58a8b01306-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-58b\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 80\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1419,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 270, 8-bit colormap, non-interlaced","md5":"eae57e6670b0935844d704d55c8a6c1f","sha1":"b48e9e4136e1686c69f95e8e3cdf406e857b4864","sha256":"88c1133276ed03cd0da7ae1b8e6e97b388ca84bb2aa40644f280b914ff11b8e8","sha512":"ad44608a7fccfadcd5c3cbf3d9dfb765e3305b784539880c30494f0b0d4bdfea7998dee5a66cbf44954651f08001276b496f674aa436f08e052066cb95997bfe","ssdeep":"","tlshash":"24212c4760c10c90fa75da758fe612629df61f348a54c4d82a52e37d141eae80eacb8f","first_seen":"2025-11-22T11:30:21.475658Z","last_seen":"2026-08-16T15:40:18.034787Z","times_seen":407,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/hot.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/hot.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 45772\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-bbb6b18ba86fc9406004bf8f23f5e417-4e65261fb434d9d6-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-b2cc\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc7\r\nage: 93\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45772,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"e0c38efe88759bb68b5c92d1aacc16a7","sha1":"4210f53af06a80b16d33ef2e91ea36da1ca4a18b","sha256":"e76b11422e3b828486011d5dd9bd915a430f4eee4adcd886d3c2ea0cd22af212","sha512":"9b3c5c58b7c8a96b6e6263f34db1799096305d64565a8e1a91b3ea682f30b7415718475d478cf5b5927e2014b1baf3e234e063329f96eaf824562e530defd30f","ssdeep":"768:bi4+80cr13Z6pTZ3DvnfO4J+JjxrcxB0iRXPClWJbHCN8MUwvQliqmXH41M+KZ/r:biVSr1sbTvfPaixB0iR/OYbHCNZUyee7","tlshash":"5d2302c35f518748ade59b4e8fa28464d27fe999b3417fc20948eac0c219e54fb428de","first_seen":"2025-11-22T11:30:21.526783Z","last_seen":"2026-08-16T15:40:17.955163Z","times_seen":407,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/koloweb3wallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/koloweb3wallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 9346\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-8d807a8a9130a991e4d9ee99f9562834-15d6143aa2bdd915-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-2482\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 80\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9346,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"f446d0b0b827dc92763198290f6d1913","sha1":"04594a5bf79e05ce7877e4f71c7900d7fe01f0d1","sha256":"835ac69b7fcb8a385ab079c693ee6a2c40a0185932816448de9067e132e548c1","sha512":"ae8496a514ffe87c754ab51530eec863d0980b87876bacfe98dff71835d68f936e2372f4e0675e374bf3285e57775aed390c3391978b6846b06a7b32a758a401","ssdeep":"192:oK2RPyVPVwevy1jvZpWZqXYTNsQFia/QX3mTnVBMTk8WAC:oFdyVNwnjvZsoXsNvFias38nzVx5","tlshash":"60129f81b6d20209e7bf62db2ec9bbc254a7ad374c39917e1b55e08138f14b681c5dc7","first_seen":"2025-11-22T11:30:21.47152Z","last_seen":"2026-08-16T15:40:18.015492Z","times_seen":407,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tongambler.xyz/","fqdn":"tongambler.xyz","domain":"tongambler.xyz","tld":"xyz"},"ip":{"addr":"172.67.153.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-20T16:47:44.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongambler.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 17:07:17 GMT","end":"Tue, 19 May 2026 17:07:16 GMT"},"fingerprint":{"sha1":"0A:2B:66:AD:E5:EA:5C:39:99:D4:E7:84:11:AB:43:3C:A9:F0:73:C1","sha256":"52:FB:47:C1:37:78:B9:A6:2B:4B:D1:26:19:BC:00:17:00:90:7C:E6:A6:3A:9D:5A:BD:ED:01:BD:68:15:21:76"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tongambler.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Feb 2026 16:47:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=buF%2FmqwSbZkXI7D3bKx%2B73p2vTdTMZ4oI3OTekNqc%2Fv70TNuYqbLD6m7%2BjWdEich6ogqSqJmRmRFq5gnKftIawkqjdk9YsWsbVGhteCu\"}]}\r\nlast-modified: Fri, 20 Feb 2026 15:41:52 GMT\r\nx-powered-by: Express\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d0f7ccfba5aacd4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":483,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"4b7bdd54c1da07984ed02f519c4a6e88","sha1":"287e887ca61dd660f1f2916a8dd327373cbe6600","sha256":"06a4d11fc3fc3f55e8cd4a6ba405cb3e22a955f84d755839d29426f01c524338","sha512":"dae7215bbb92b358a1a0607659c518ddedb4402c5116818d87c80944e8a3a4a830db9c32d680181c732620254db35a9f80bd06ae9a9ceac1689a58361db77769","ssdeep":"","tlshash":"71f09e8bed019608832056a95dc0f10820c7e74d5ac5d95048e6d07edc45bc9cd9b468","first_seen":"2026-02-20T16:48:11.183504Z","last_seen":"2026-02-20T16:48:11.183504Z","times_seen":1,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":98,"dns":75,"connect":8,"send":0,"wait":80,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"tongambler.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/wallets-v2.json","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /wallets-v2.json HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tongambler.xyz/\r\nOrigin: https://tongambler.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: application/json\r\nx-id-fe: digi-hw-edge-gc6\r\ntraceparent: 00-fab3c17c52e0937e8266f0fae1c8c965-c6e8520fd2711156-01\r\nx-shard: digi-shard0-default\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 23 Dec 2025 12:00:57 GMT\r\netag: W/\"694a8479-5316\"\r\ncache-control: public, max-age=180\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc4\r\nage: 234\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:43:51+00:00\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21270,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a0655f50aa0250f2ae65ae3a3927f526","sha1":"0760daff9527229f6242b94d7b1ad8997a4eac4b","sha256":"a567518f689cc35abf33d1aaaf13631b9167621753da2699d26906fabaa9eefb","sha512":"4628ff912358e40fcbc8cb3723da4ec87636bb750cea13b39eb08be4ec66f8b3698337ba2e729ccc5a3d32dca82c9c70d0adb259b2aa0e699ffe64e4b2da7116","ssdeep":"192:kRWpwKMv4irypxGHf7Dv29yRYX9y4pqB8NRbpp/KlI+JaG5kXPJiGRkpSC6RUppD:kRQ4gHlaR3eHmF5","tlshash":"16a2f4a7c6384c67025561f4b89a2286f211028bccd0bd6df74c489c9faddaf14b779d","first_seen":"2025-12-25T05:38:46.984185Z","last_seen":"2026-02-24T03:25:10.178985Z","times_seen":109,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":206,"dns":87,"connect":13,"send":0,"wait":14,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/dewallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.956Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/dewallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 42298\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-cccaa44a0f7bc883711aa87c383139a9-d2e9d7e3bfbc5b2d-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-a53a\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 104\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:01+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42298,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit grayscale, non-interlaced","md5":"34717c55f237500cb1400c90bcdebb01","sha1":"81848e39f29d0b944f283453ee1659c6c8a22723","sha256":"364eacdfeee2020e26d196aac612ac93cc8aa3ebc707d02ca57e9aacaaef541b","sha512":"732e94a9ab2004ec2f473c87d9beeed448e48b431176e698ea9c6f0c63d06057689c90c485fb0387988e9331367cafaaea40d2ab8e4104e108dcaab5bbc2fbe6","ssdeep":"768:YfrDuKY1eR4xH9a+jbGg6oRrWP6AnW4KIH0L2kApMJiDr9eTzddSA3PuWhwST:YfrBY1XxH9vbGsWPZlH06kSMJE9eNdVz","tlshash":"3d13f2b2e8c6c6ae8452a8e24d9eb4af0c457db622a53f19c405f44b5f74d27321fc1b","first_seen":"2025-11-22T11:30:21.476583Z","last_seen":"2026-08-16T15:40:17.942174Z","times_seen":407,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/echoootonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/echoootonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 56008\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-17158731f27e2e916ef5cfe92627b61f-a92c5441d2131215-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-dac8\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc6\r\nage: 93\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"0045354563623ba7033b82568a35011b","sha1":"d30a9a2cba690a17b513a8cc91edc1166f807213","sha256":"b795fde982e92cc1ba959c241406c4708c085481ead3d10f56dee883cb4742f8","sha512":"3a2f5a407d92e20d81bd44b566edbe377f7ae52e53d8167fc601204dfbe7ff2563abd6d05ce2693d6ace7441f930dc6a7de4a114877ef762b02aecaef0298afb","ssdeep":"1536:ONwl6IKG8c33My8czUrOrqIHc2XkV79P2uIZ998V+1EYG6:D6IKenMy8cYItHSV7jIZj8V+1T","tlshash":"4b4301dabdcc4f123ff773d7e0094366ee4872492732543801de65c62668b6679fa148","first_seen":"2025-11-22T11:30:21.508458Z","last_seen":"2026-08-16T15:40:17.963105Z","times_seen":407,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/defiway.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/defiway.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 20702\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-222228bd1ad8b77860c4606d3d022477-98f7265d4d6d19e8-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-50de\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc5\r\nage: 63\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20702,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"6fe8902e9f84eca83e2d0f9c3aa0caf1","sha1":"3273f7b3cc278a24398aeef31157f92ed1851b50","sha256":"26019945f9a28a6f088ceb7f89ec093553618735b300cfd930bc9083f2a097e2","sha512":"dfefdd71c4a1dd66b96342be3c094a5908c6222fb1c307159123b48f5b78404cb608f4f9e1ab2377613f8f64968357f615ad2e277ddfcbb81c663fe87dcb05e5","ssdeep":"384:k23WSXzaKK4C2lCU6t7GOfhWF4NjaS0H3A:lXGN4CcCldG+WF4N+w","tlshash":"0e92e04400af6a2f1f6bd02deb845092a5569ef22d158834bfcb82c7d6d833d98986dd","first_seen":"2025-11-22T11:30:21.496351Z","last_seen":"2026-08-16T15:40:17.983281Z","times_seen":407,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tongambler.xyz/assets/index-CAF2x_IE.js","fqdn":"tongambler.xyz","domain":"tongambler.xyz","tld":"xyz"},"ip":{"addr":"172.67.153.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:44.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongambler.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 17:07:17 GMT","end":"Tue, 19 May 2026 17:07:16 GMT"},"fingerprint":{"sha1":"0A:2B:66:AD:E5:EA:5C:39:99:D4:E7:84:11:AB:43:3C:A9:F0:73:C1","sha256":"52:FB:47:C1:37:78:B9:A6:2B:4B:D1:26:19:BC:00:17:00:90:7C:E6:A6:3A:9D:5A:BD:ED:01:BD:68:15:21:76"}}},"request":{"raw":"GET /assets/index-CAF2x_IE.js HTTP/1.1\r\nHost: tongambler.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VBMP7xQslVfLUCvry0lSR3InIsSbORadouOprSoB%2F8T0pDB6ibD7scVvHKz7UAeMc3DIGBlpRnzX8K5zmqUyVXFFEwOV8FbKxrK5gXfc\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Fri, 20 Feb 2026 16:47:44 GMT\r\netag: W/\"c196b-19c7bb6ee00\"\r\nlast-modified: Fri, 20 Feb 2026 15:41:52 GMT\r\nx-powered-by: Express\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d0f7cd18a3ed42a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":792939,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37550)","md5":"05718def6d1f451049f964d596c57d22","sha1":"466a5c7fee681daff62e073c1ed869281c8f7ddb","sha256":"b52578696e7fcc44dd04be5c2c63697ba675eeae28d5e6080d37696e4a762be9","sha512":"51ebb81e367803b290228e5b872dbaefe02029257eaee32e845a86ca68e57a17caed709d28695fa78a3dae122358c82ee2856510a64333c2108a5b141ef066e9","ssdeep":"12288:aXaHYaVjjwp/RxOxBxkByv0ObtLLzc4JYfgYHgs:aKtVjG/RU6yv0ORLzjJRYx","tlshash":"8af45cd9b2997154679346e4507b0107b3392c66780d80b4f32cc9ea2fb1589a2bbffd","first_seen":"2026-02-20T16:48:11.1896Z","last_seen":"2026-02-20T16:48:11.1896Z","times_seen":1,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"tongambler.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/bitgetweb3.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/bitgetweb3.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1176\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-393ccc3e5ec167b11169672a90e42158-605262b0c6f7a84e-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-498\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 80\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"5d9631b0982fce76f8acc8c1c1f29e3c","sha1":"7e9d2c3adaf1a34c615c802c6ca5008ea9e46e5d","sha256":"da61705b68b0f898ebbf4416c74a0bbc94d98253af445b4b93f5498905d81111","sha512":"a00da5a594b804cf3bedf492e48b6f09287fd208c4e3b0c24b75808207ec66d264842b8ec528b6b56dfd1a698e0986c5e5d3794d0df10a8cad3bf0dc8c2707b1","ssdeep":"","tlshash":"2d2111ebcd5a11bf145b620a024b35d054b6d56f25028ecedf15287808075d6f6b6a87","first_seen":"2025-11-22T11:30:21.528379Z","last_seen":"2026-08-16T15:40:17.942835Z","times_seen":407,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/tonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 5386\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-f259cc27480df96879b2bad079068a19-95f8c8fc7ff0ff85-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-150a\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc5\r\nage: 93\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"bd4264d4c32c16d646517faf4462e5be","sha1":"df6493d70355759579c8941728747814ac5f081d","sha256":"6da4766fae3c3ba2cb931c8b3485461fddc96d6244cdc45fdb800e70e0e1a0ec","sha512":"1e63fc6f27b609bf8386333b3a535cc0a08c18594681c6344ea96dda3582ed5bb85f1bbb53f0f7c9d6b7659ec61a14c8da6b13d5f30a556779b2ebb6a39a40ce","ssdeep":"96:HzmLnGewr7Elc/cd0sNz13DX8DxS6fzuenbEdUApFXnEVMNlW75wm+o:HyDyrkbRzJDMDxREbFXgMrAw8","tlshash":"38b18e5f3da8d243ab5c913f455cc44e3201cc857a8c4a1176acc64f606a2628feea1f","first_seen":"2025-03-22T03:47:07.763738Z","last_seen":"2026-08-16T15:40:17.940577Z","times_seen":1019,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/bitgetwalletlite.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/bitgetwalletlite.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 2008\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-91ef53e54c1e16a5ef15b9392d6a423c-f629b9ce8abe55bf-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-7d8\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc4\r\nage: 80\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"09790056c70e889c7f74f91a9222bc01","sha1":"26194deadd44d9a00ca48ae053924b76656e885a","sha256":"e85acd2f35d2deb9726a0db27737b931b600fd4bad9b73b3009be6ece7fcbefb","sha512":"b71f8a277680fc9cba3c8a4a272b21b8b157714a31ebaa7fd8f8dc8639ee872948dff4af3f0af395b2cebbc75f15ff7ebfbe9fa5ac87e363afc8c11eb69399d3","ssdeep":"","tlshash":"6941b6835134d5fc3e5b3826800b8f1f51ab1607d1d26455c77b98381f73ce96662b2b","first_seen":"2025-11-22T11:30:21.492928Z","last_seen":"2026-08-16T15:40:17.955745Z","times_seen":407,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/architec_ton.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/architec_ton.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 16202\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-9ba9d1a965fd83562913154bf8014662-47f17050928049be-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-3f4a\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc5\r\nage: 80\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 228 x 228, 8-bit/color RGBA, non-interlaced","md5":"247af337378ab26527a7e001e772a863","sha1":"e5555ce55b512c99db267178c0b6776408e29531","sha256":"562fb3c02d160472278ce219266068aee29ced8b152695a66ba519ef6dc66b90","sha512":"dc562e28b94ccdfae6763b225d96b023d65a692476df4946c8131168c1d682deb990a4dbc289e8e6aa009ede05b56ab7324deb1ac96fab75f894048bc55f92e1","ssdeep":"192:eYEWkPbfZhkY8WlA82HMVGvl94k4BFgS599ARP8NdG743LVSCBUF0G7VtvBuImVe:2PzZH8Eaf4TH5gtL7wVSZWM0ImJ5E","tlshash":"4072bf6ce55034b7a1cadd9421ec480a4e319c0ad6ba4cd87b8de484cfdcade0c9d6ca","first_seen":"2025-11-22T11:30:21.470356Z","last_seen":"2026-08-16T15:40:17.968543Z","times_seen":407,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tongambler.xyz/favicon.ico","fqdn":"tongambler.xyz","domain":"tongambler.xyz","tld":"xyz"},"ip":{"addr":"172.67.153.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongambler.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 17:07:17 GMT","end":"Tue, 19 May 2026 17:07:16 GMT"},"fingerprint":{"sha1":"0A:2B:66:AD:E5:EA:5C:39:99:D4:E7:84:11:AB:43:3C:A9:F0:73:C1","sha256":"52:FB:47:C1:37:78:B9:A6:2B:4B:D1:26:19:BC:00:17:00:90:7C:E6:A6:3A:9D:5A:BD:ED:01:BD:68:15:21:76"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: tongambler.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\npriority: u=6,i=?0\r\nlast-modified: Fri, 20 Feb 2026 15:41:52 GMT\r\nx-powered-by: Express\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r3DeZ20JG1acLFu947EvZy1XAdrMeE4O8QiA6Wik0D3b2QJtnARFAJdXzunvumTfZ1PQaD%2FuAoK26aV9mAIcTLxNaEAg1732PAUr79n2\"}]}\r\ncf-ray: 9d0f7cd43ab7d42a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":483,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"4b7bdd54c1da07984ed02f519c4a6e88","sha1":"287e887ca61dd660f1f2916a8dd327373cbe6600","sha256":"06a4d11fc3fc3f55e8cd4a6ba405cb3e22a955f84d755839d29426f01c524338","sha512":"dae7215bbb92b358a1a0607659c518ddedb4402c5116818d87c80944e8a3a4a830db9c32d680181c732620254db35a9f80bd06ae9a9ceac1689a58361db77769","ssdeep":"","tlshash":"71f09e8bed019608832056a95dc0f10820c7e74d5ac5d95048e6d07edc45bc9cd9b468","first_seen":"2026-02-20T16:48:11.183504Z","last_seen":"2026-02-20T16:48:11.183504Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"tongambler.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/telegram_wallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/telegram_wallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 24341\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-0b56c84f7b2eb627a1d7e30c5f8c109e-ad0dfd5272e6b517-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-5f15\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 114\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:45:51+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24341,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"ea821489af4c2e485a86112942971907","sha1":"3fb8aab37a0bc8a4394c296adf2249f1ad494faf","sha256":"6c30dcf8baf07a22361167e8dc7e8152274db474fadf9eea0a1e7bcd9a24df9e","sha512":"c56226380bc790cd2426d8ba38acd67e52a7247302e653646c37d7809a229d6ffc085a1030de216392c51ba5c90ea6b27d43ae3700236abbadfe18f8c5b052dd","ssdeep":"384:U6Mamo5oPY3GXjRKfmka0+sGGoc5Km3ow/745k5o1RH1kL4DcfXSPG0u/Whpr:UlamvPKGXj+mF0TG3c53Yw/745wo1o4R","tlshash":"41b2e1c9968bd133bc4a5d4865985e39c6282c363d13d6056f1b72b88bf380e91d8ed9","first_seen":"2024-04-21T23:23:38Z","last_seen":"2026-08-16T15:40:18.007671Z","times_seen":843,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":34,"dns":1,"connect":13,"send":0,"wait":20,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/binanceweb3tonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/binanceweb3tonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1607\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-61083822b2be10751498037484cc7499-634a098a6ac4693b-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-647\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc7\r\nage: 63\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1607,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"292e89cefe60c940848daaf7ab58e11b","sha1":"07d3ede03ae361212cd9c7d0f91cf9edf3c8583c","sha256":"0cf1b71e664487b9bbfade7ff380f3c7388f22ff82b2331cd1326c5242f2c5a5","sha512":"f3410481b475b54a5d6a2b2ef1bd6bf8963ffa10e003d575e0a6233c2e5d701a826fa86dcd52057b7bbbb15ec12e2f2e92d9bdec5e725eb35633419f73cd15ab","ssdeep":"","tlshash":"4131eacf35170ed3ce765b56babe0c736d89157033ca2845527d25c55406d0c43cb462","first_seen":"2025-11-22T11:30:21.504787Z","last_seen":"2026-08-16T15:40:17.989463Z","times_seen":408,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":21,"dns":1,"connect":17,"send":0,"wait":43,"receive":4,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/xtonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/xtonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 6673\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-25790f08447c04c23d14efbd41d2c4ec-810bce8c8bdd0a9f-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-1a11\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc5\r\nage: 93\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6673,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGB, non-interlaced","md5":"3cdb7697d40d42ba9183cfec43e867cc","sha1":"5f99574ff04392bae80c5c23f5892972ebb71e23","sha256":"d52abdfbc9303922359179dae6503455e022175e2b559edd7b53b5c797bcfec9","sha512":"3169c2a3895844ff32f42a70ff7ae781826e6469d7dce457ce5b6f2e0a386f8b3fcc71fb9daa8a7d678157d7a1d19b99ccf372ddea3c86c4d8efeb827deb9064","ssdeep":"96:UscWJioWzrqf2mWHxBYp4JSFrEtVGWDg3mWQpILYmyBgPLotkw3enAEVJzs1:UgwoWZjxuWOotVGuTpuYmyFtkwuAEm","tlshash":"7cd15b93cb111271e97d46b108a35b208fcad67134a757123b78a638eee6641b093f94","first_seen":"2025-11-22T11:30:21.524252Z","last_seen":"2026-08-16T15:40:17.982642Z","times_seen":407,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/uxuywallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/uxuywallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 2006\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-c75fbf6661b1b64218080cca49532860-b95ecc6ae4eb4e39-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-7d6\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc4\r\nage: 80\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"341b60fd079e8dbd6019ba142d4d2b78","sha1":"1b6ff34914394c495bcc6c2e4e7aedf5313668d0","sha256":"e411f1b732b3ab0aa8a503ec3e26f9f60c2b8617beca17967bf81115de56b217","sha512":"2b95e6895292db780caa0e60a2477bc50e17252e46f8b831c14e15ffec6965040f6602b3b9008a4b28d7230f9ede3b121e7bc606aa8ab1ce93c7afd8e40f7c63","ssdeep":"","tlshash":"24410ae34268dc2cd4670ef6e8bab5c8877620cc6a30550a9d62a0ae108344deb1e3d5","first_seen":"2025-11-22T11:30:21.525633Z","last_seen":"2026-08-16T15:40:17.948377Z","times_seen":407,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/imtoken.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/imtoken.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 43029\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-f98fa9ea6089bd90d3d1c04f809b0238-8b3f155344aaa910-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-a815\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc5\r\nage: 93\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43029,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"cc556604e6bf887247f1bd52fc469c15","sha1":"bf52b5632265a357c8326781f25368723d02b7fc","sha256":"891316e4bfbce4e5dc444e414488869743fefdd68b7e5b50867cf67666c0dd10","sha512":"1aa2cdcdf851d9ef454a17fc884f14380ed1ae23bc4990c7b7c1a2eca6e120cfa6e9a415a2a1804e3d57e19f10074178a2fe0fee9c3cd3441f758ae360f6416b","ssdeep":"768:VqtrC4tzWxSI/N3jrFHcQDoz6hwaP9aCkirQqgWc7HxahU:VqtuUzOSE3FHpDoz63sAraWc8hU","tlshash":"6913f1fecfbf94d4849409a826909283cba94768ac8831e9015ed78fd04db735ee50f9","first_seen":"2025-11-22T11:30:21.472624Z","last_seen":"2026-08-16T15:40:17.94886Z","times_seen":407,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/cactuslink.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/cactuslink.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 2402\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-9c1e4738dfed1b7fc748c9076b35d7d8-42ff166699e5f61f-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-962\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc6\r\nage: 80\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2402,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"9571ca461ce9dd8f0f042f28d3a1c27e","sha1":"d0eeaaf50dde6b257b1b04a67a9ff0330cfb36e7","sha256":"20c297ad923829fae31753cb8d1bb92f5955e117052f7eacc962b25c0f60dc2f","sha512":"d336ceff51fb4d0309bb95e2eebbd657f09d12ce577b0a3ca514837e32aabbb7bd3d888016eb4b6fa3fb70fed617e468d4a8127f9b2d749aa9f6400bb5498a38","ssdeep":"","tlshash":"ba412a430319bf3175e18a155b61978edf6ec89cdf2c48acf59b660a1915388aac26c8","first_seen":"2025-11-22T11:30:21.490083Z","last_seen":"2026-08-16T15:40:17.956284Z","times_seen":407,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tongambler.xyz/api/game/recent","fqdn":"tongambler.xyz","domain":"tongambler.xyz","tld":"xyz"},"ip":{"addr":"172.67.153.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:48:00.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongambler.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 17:07:17 GMT","end":"Tue, 19 May 2026 17:07:16 GMT"},"fingerprint":{"sha1":"0A:2B:66:AD:E5:EA:5C:39:99:D4:E7:84:11:AB:43:3C:A9:F0:73:C1","sha256":"52:FB:47:C1:37:78:B9:A6:2B:4B:D1:26:19:BC:00:17:00:90:7C:E6:A6:3A:9D:5A:BD:ED:01:BD:68:15:21:76"}}},"request":{"raw":"GET /api/game/recent HTTP/1.1\r\nHost: tongambler.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 20 Feb 2026 16:48:00 GMT\r\netag: W/\"6dd-P9tCqEzrXx/yf4hJTaY6sFHRL1Y\"\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ODkiQNScDpfQ5VRSjIRC3uS44YceHp9L49PD8tgnkhpH7hbJpDmnv7f6zyB82doMEZ2jCeTAkIySnRkYbmwV0I%2F%2BYbh7HLbbjRGlYNS6\"}]}\r\ncf-ray: 9d0f7d32baa2d42a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1757,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e4db610532c1722ee5b05ffa2b1a6fae","sha1":"3fdb42a84ceb5f1ff27f88494da63ab051d12f56","sha256":"9958796163830a908fd7e83530faf4eebeeb1cbafbe8bdf68b191690eb2871b6","sha512":"93f10f78c501fe73b10261520a735bafbb69fa2999f82b80d3206ab0c38c6fa55c15fb14384dd298caff970d42ce78c1765d2e950f307be991e85869826e454b","ssdeep":"","tlshash":"6e31403b43bf607c84151fd3c8e67654746db32601c34280bf4a9b1aa596c365def574","first_seen":"2026-02-20T16:48:11.176259Z","last_seen":"2026-02-20T16:48:11.176259Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"tongambler.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tonhub.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/tonhub.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 55132\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-790caa0cc45da083038715e53b74fdf2-9f0ada4bdec23918-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-d75c\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc6\r\nage: 43586\r\naccess-control-allow-origin: *\r\ncache: UPDATING\r\nx-cached-since: 2026-02-20T04:41:19+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55132,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, non-interlaced","md5":"2fee343f7186afe4fb4d313b974019e9","sha1":"8ddc2316409184cc4b7e5c92191c329217f60e9f","sha256":"0571664b9059e4571a007acc4c523c275cf008cbb9ee96d56934d54d5ca845f6","sha512":"70ebc03c8093604560561fabe864542cc40ccd1540634b024d57ceb0b6d0dfafffebb8620355caa823debd157b0c879c8fe3cafeb631ff25e631c3ab0d8e7fd5","ssdeep":"1536:DjbrTlVNHKUAaRU82bWa4YLS9IB+zFH+5pSrS:DnNHKiq82bW/eYIY1+5pSe","tlshash":"98330165f221113a8721c9287a1f1e6b1cc1393b88aeed3252239b6ed845d610fc39b3","first_seen":"2025-11-22T11:30:21.502499Z","last_seen":"2026-08-16T15:40:17.988433Z","times_seen":408,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":27,"dns":1,"connect":15,"send":0,"wait":45,"receive":10,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/openmask.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/openmask.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 4441\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-46d684363fd96bd4bc4f9cf03aa772c4-cc58f8d0112eb135-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-1159\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc7\r\nage: 93\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4441,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"ec081e53ad51c57d64e634569182acce","sha1":"4a4fb1ce3714e386197cc321460177367014fe58","sha256":"773c0248eae5d85ac71cf6f4e4cf4f57160e448a68178cac269c33badf4ffb8d","sha512":"b2e8d498747d61c8defb07867cc333429afae8abb90b082538d17e0c8a5ca8fc631efe1500834be01a40daf2896873f5fe7e1a26e21b598ff5931449fb426003","ssdeep":"96:DhV3jO9vXvgpAhSstqNNE2/F6/d0O1256XClGogKDDvc+x9:DXC9vvgKzqNNE296/OO1Gb0ovDvc+n","tlshash":"80917dced641c49fe92241e2ce7fbdd21d15ee29c804768032aa11254df711e6bd609e","first_seen":"2025-11-22T11:30:21.537023Z","last_seen":"2026-08-16T15:40:17.990695Z","times_seen":407,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tomowallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/tomowallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 764\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-233ad074f6f37c2267c1183f7d543285-1fe583881a18e784-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-2fc\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc4\r\nage: 63\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 75 x 82, 8-bit colormap, non-interlaced","md5":"591694f0be4f3e0593e9e8d9ea3aeb31","sha1":"911632556978f58f5f7299d7e8e659535aaebcc0","sha256":"0b338c2788aeccf2e2518d357fb136dffb28ad0f6312cd417c20ee382b9338db","sha512":"b389fe4083832ce8d6b886b658ce0d5a8a83c40e73e5f6d4d6fae76863734e887e3933cacda11b6cc5ddb10a7eed507f249f4e82e80aee04ece03bad7ce69730","ssdeep":"","tlshash":"f50175c69b3c484f4ce422c10796e0d89210c4710088a01abc9b48561a7c8ef3b5eb0e","first_seen":"2025-11-22T11:30:21.469469Z","last_seen":"2026-08-16T15:40:17.947916Z","times_seen":407,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tokenpocket.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/tokenpocket.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 5985\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-1a1c1b64c943370875db122f9f1adb33-bba739df0f6af27e-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-1761\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 93\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5985,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGBA, interlaced","md5":"987444e9a03d1c96165134993befbf9e","sha1":"f10357bacad45366cb96605509f7d5ac4533ac35","sha256":"3dcd239d221b091127db2a3dd71d63f0885105b244ceb32962f9fca4dc2f6982","sha512":"1daa7d636e12964377287fd733a9c8d5fae5d28ef4fba8a68eb0d1d7f0c36868b76d9436b991588bf83c3311818c3ebad599111398cbb3538bbf77f9cb2b7abf","ssdeep":"96:mgpKD/yRZMOU/XHJBNt/8kBIU93p9MztPvzoAM8GqlSvQF0epLhExssssTsPHNsX:vRevz05U9DMztHzoJASvQF3pL+lsPtzs","tlshash":"3dc14cde48dbae57754e4b726b625319c1a543f6e0f2ce4b4d078a30797b6507433148","first_seen":"2025-11-22T11:30:21.530051Z","last_seen":"2026-08-16T15:40:17.943629Z","times_seen":407,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tongambler.xyz/api/game/recent","fqdn":"tongambler.xyz","domain":"tongambler.xyz","tld":"xyz"},"ip":{"addr":"172.67.153.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:50.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongambler.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 17:07:17 GMT","end":"Tue, 19 May 2026 17:07:16 GMT"},"fingerprint":{"sha1":"0A:2B:66:AD:E5:EA:5C:39:99:D4:E7:84:11:AB:43:3C:A9:F0:73:C1","sha256":"52:FB:47:C1:37:78:B9:A6:2B:4B:D1:26:19:BC:00:17:00:90:7C:E6:A6:3A:9D:5A:BD:ED:01:BD:68:15:21:76"}}},"request":{"raw":"GET /api/game/recent HTTP/1.1\r\nHost: tongambler.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 20 Feb 2026 16:47:50 GMT\r\netag: W/\"6dd-3p2ggA8NPDr85HQWPsT45W8u1EU\"\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aP%2F6CMbdTu0PSGH6w0vASoHuhiUmrwYbzbwjNThRCKMbYm4WHwpVld2Fc1xYB04luv3SfEOzqdfQUPYcTY%2FMCrDPc4btXNWuZa1rEjnJ\"}]}\r\ncf-ray: 9d0f7cf4381fd42a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1757,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cc33e49b7b53810f43b25b9bda9dffde","sha1":"de9da0800f0d3c3afce474163ec4f8e56f2ed445","sha256":"6b0554113828d21e69eeb12dc64cfe3766be9b72913184766daddeb6b257c274","sha512":"72383329a2a4ee511159c347c6fe2509034b45e41f154c2c3f978321ebd1397bd68b0865855c6969d2d1b1b83111a3b651f11860db19ec2392e486f976643cac","ssdeep":"","tlshash":"24316f3b43bf207c84151fd3c8e6b6a4746db32601c38280bf8a9b1aa596c365cef574","first_seen":"2026-02-20T16:48:11.179024Z","last_seen":"2026-02-20T16:48:11.179024Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"tongambler.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"tongambler.xyz/socket.io/?EIO=4\u0026transport=websocket","fqdn":"tongambler.xyz","domain":"tongambler.xyz","tld":"xyz"},"ip":{"addr":"172.67.153.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongambler.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 17:07:17 GMT","end":"Tue, 19 May 2026 17:07:16 GMT"},"fingerprint":{"sha1":"0A:2B:66:AD:E5:EA:5C:39:99:D4:E7:84:11:AB:43:3C:A9:F0:73:C1","sha256":"52:FB:47:C1:37:78:B9:A6:2B:4B:D1:26:19:BC:00:17:00:90:7C:E6:A6:3A:9D:5A:BD:ED:01:BD:68:15:21:76"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: tongambler.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://tongambler.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: E6D+jaTCAUAVxjepaZSEmw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 20 Feb 2026 16:47:45 GMT\r\nConnection: upgrade\r\nAccess-Control-Allow-Origin: *\r\nSec-Websocket-Accept: pi+8SScx72SDPtg8y+4CfHQI/Vg=\r\nUpgrade: websocket\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=iFCmNBENreapVeCNVxEQX8xyBFarntgDS3DfluxgRKog9fpU33Q2aG1MnjmZa7J4JDzIkgX%2B1Gm%2BuHLfXrcFMSUOMQknacP0%2BtE5pxjdfDqQ%2BB5Wx5NYDKIpVlPxWa9kvQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9d0f7cd4bce949cd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7790\u0026min_rtt=7764\u0026rtt_var=2204\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2346\u0026recv_bytes=1192\u0026delivery_rate=372715\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=50e9dd0815254a3d\u0026ts=85\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-19T04:44:57.936605Z","times_seen":17967913,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":39,"connect":46,"send":0,"wait":76,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"tongambler.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tongambler.xyz/ton-icon.png","fqdn":"tongambler.xyz","domain":"tongambler.xyz","tld":"xyz"},"ip":{"addr":"172.67.153.2","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tongambler.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 17:07:17 GMT","end":"Tue, 19 May 2026 17:07:16 GMT"},"fingerprint":{"sha1":"0A:2B:66:AD:E5:EA:5C:39:99:D4:E7:84:11:AB:43:3C:A9:F0:73:C1","sha256":"52:FB:47:C1:37:78:B9:A6:2B:4B:D1:26:19:BC:00:17:00:90:7C:E6:A6:3A:9D:5A:BD:ED:01:BD:68:15:21:76"}}},"request":{"raw":"GET /ton-icon.png HTTP/1.1\r\nHost: tongambler.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-type: image/png\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\netag: W/\"dd0-19c6d9f2440\"\r\nlast-modified: Tue, 17 Feb 2026 22:01:12 GMT\r\nx-powered-by: Express\r\ncontent-length: 3536\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VZvOdPjsgBysfu0JzZdTfNRGIGhOkBNA5DutFPMzK%2BaokkZK7%2BGvTE3uyIWaURThpraVt%2Byc2bR%2Bv3IzfPQ6PHBjKY2MR5ARueu%2BhJmg\"}]}\r\ncf-ray: 9d0f7cd4cad3d42a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3536,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"274cec46c12546a856f8b671deb1e617","sha1":"edd7cb186578914dd3b6ef10ecc7861d50d623d1","sha256":"eadd4986267c2251fad07d270f31eb991c6e2dbf99d7698f38413bb38fc764ee","sha512":"bb2dd190d05d414e2de45d1c3b80315a72c986ef5f51515489f57cd45177a764677d408a5833913ed67e218925ca1a7f9b2034604a4dde8216fb42531fcd5d7a","ssdeep":"","tlshash":"9f717d1e317903aafa8d80329058c1f8c8a0755c0ac1e37a7877e1213bf9a5417cd68b","first_seen":"2026-02-20T16:48:11.204309Z","last_seen":"2026-02-20T16:48:11.204309Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-20","alert":"Sinkholed","trigger":"tongambler.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/mytonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/mytonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 4757\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-30f00002aec6a2341db194d9a90847f9-aacf3e58642457fe-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-1295\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc4\r\nage: 93\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4757,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"9c99a1956e242fb70baded72541ffd92","sha1":"082f808542c3fb82616e0c72e8eafd0c520531c1","sha256":"01b23585151ba32129c7ea121bb156f4064f6f3234c7e543bc660b775fe54871","sha512":"9fa1a9f1f077ee0092ec5d57a346693cfd2bd1575b3d2d99d411402ad659793313e50bac91118c39ce0d949e1d28de958a1aa214fbd1f8fa9de14881c7c75393","ssdeep":"96:LSyBAvitJVte8Ir4md9tjbJ/6sojcynHwHYqiebuHU:LSyBAQfU8IEmvtjbQxjCZPu0","tlshash":"d8a18d6913a62f00e0be22f33b88a2048767738344716b0b6e69200f3e1cf9501eb1f1","first_seen":"2025-04-19T14:12:50.877844Z","last_seen":"2026-06-28T15:09:18.446084Z","times_seen":931,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":36,"dns":1,"connect":13,"send":0,"wait":45,"receive":4,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/bitgettonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/bitgettonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 805\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-65c0bd3c22dfa7f3a0519912226cd9be-fb202b9ca2a4edb5-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-325\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 80\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":805,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"e3234b49342c8b98e1bc18701f14697b","sha1":"a586c5d69f22119f46e774cbbdc1cb3bb6bed9c4","sha256":"8f269136c30e6b880e03e3f6db1501c4023f8b8d1cd4ae841aed85ec1501bc61","sha512":"73a189fed61c6c60fa71206a0ad48962d330878fab88579e3153c4251ee9fdb40ba1f43f8f876c74c2849bc24ae4bf78adeda37751e4153a5540060fa6b2e714","ssdeep":"","tlshash":"070166854312d45eff1b8d3a0031d7d097a559f6c236a8a86bff152b1e3140c66db391","first_seen":"2025-11-22T11:30:21.50347Z","last_seen":"2026-08-16T15:40:18.044257Z","times_seen":408,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":30,"dns":1,"connect":26,"send":0,"wait":40,"receive":7,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tonkeeper_pro.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/tonkeeper_pro.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 18520\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-97a7dba7194ac40e115495855733e3c5-76307c4e9878cee7-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-4858\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc4\r\nage: 80\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18520,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"3c952c0c19268d9ede72dba2b327d99c","sha1":"1b1e98ee3538963e3dc9089746386d6acf397e80","sha256":"2d0ab9711dbced8b88b2f207a139e623641ddb8c40e375cfa888016d32aa01ca","sha512":"e3bd01ffedf9d33530a5e5246cee26f8a54e17423861d6b595952024e9c6baecac67fa4d7f1250103cc46ae83428c82403cdff7751a665c760e01ab50b551af4","ssdeep":"192:uiYxYUIKZ50p++PRy145vrPXZNAvccFB6B6EfkpFcLYp29BTW8q2dqojHOX9k9uL:u9EKMn4SjXrA0cYjLYStPHMw/NfIBN/","tlshash":"af82d01622a3994d2f79a9f8ee25fa38344102dd5fdab8d9cdd6c0ce184ca64e533c61","first_seen":"2025-05-19T03:10:12.400525Z","last_seen":"2026-08-16T15:40:17.94419Z","times_seen":963,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/blitzwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/blitzwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 2190\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-039492ebd377009bd54de12e2980a721-d565ce93a5ad3764-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-88e\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc5\r\nage: 80\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2190,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit grayscale, non-interlaced","md5":"687ff1806febae6872dfb083388f5a9d","sha1":"7b01cff612a09cb833e4e56fd07e0f33d65fb92c","sha256":"8859af2e5f1d4b4c988792e28d45d70fec01dbacc4bd5c8447459e8126c95c41","sha512":"f887b619274884bebf0a0630d8ef9a337e8edbef12d2800bad8e66f980b07fb7421c37fc722fe1068d8457262cabf72f4aa07b6d2907a394bd6076736d4fde6e","ssdeep":"","tlshash":"3141e96896f0437bcc6a3ba7611d9d8d1bbf90930b4a5c4dad08dc6b0c8287c93868d7","first_seen":"2025-11-22T11:30:21.493807Z","last_seen":"2026-04-21T00:00:51.391513Z","times_seen":242,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/onekey.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/onekey.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1469\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-e9ef9df445a282e095a6933229ddc712-689ed934e0b1fb89-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-5bd\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc5\r\nage: 105\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:00+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1469,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit colormap, non-interlaced","md5":"3630a1a80ed5fcbeeb9224e2b997d117","sha1":"25e3771b17938bcb89ff31bccd073a3e0b3b574f","sha256":"6df2ebc8dc341106bad5d235866f6c1851233231776786c16ffd2bcfafd47b57","sha512":"6c1eac4850a1741137d722d131b8f15ec363370398e511968ab663c733b5db501b111ef7a4be2a91885a7495fbc80ce8feced3f800ab9149b4368bbe12b476e7","ssdeep":"","tlshash":"8831529add12643fa5540670c77776e5ea760163b184ae4f4b030b342d5b1c2f977e80","first_seen":"2025-11-22T11:30:21.497762Z","last_seen":"2026-08-16T15:40:17.969072Z","times_seen":407,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:44.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Jul 2025 14:26:51 GMT\r\netag: W/\"6888da2b-1bd46\"\r\nexpires: Tue, 24 Feb 2026 16:47:45 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113990,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"70dbd7ade763706614c7ee99973dcc9c","sha1":"0b980ef4fe3e17d253fc2cdb672f1208736b733f","sha256":"b47f6cb105860d35b4ae512c22696a33157a365f4c885a33488f22ea8a3b6a03","sha512":"03c1f60831856975b61bea126ead239f116235fb0422178425d6b8c86553a3548d487c919f0f3f81e14de201680f63b7be24106589faffd8f3c56b28c2d19b45","ssdeep":"1536:pO5TpRdo54F0WN2Zbjcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITrm:s5TpRdccKFU76x1H","tlshash":"6eb32e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","first_seen":"2025-07-29T21:33:08.487755Z","last_seen":"2026-07-18T07:05:28.914407Z","times_seen":3814,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":202,"dns":27,"connect":24,"send":0,"wait":48,"receive":0,"ssl":152},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/tonkeeper.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/tonkeeper.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 1284\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-5e241508881740c643e1201f510588a5-7832c6bd890a1d1a-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-504\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 114\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:45:51+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1284,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit colormap, non-interlaced","md5":"cba93fd4ef01e8b6a839f321b198e6ef","sha1":"cd425ede89e3ced40f919bd9bf2867153f528e68","sha256":"b7e60fdb63fa58ac414061aec15fbe1db8d0c822fce3c379d90004ebec3fb1e9","sha512":"57223145df0dbe2ac141e408851155593552c1ae82880721326c21a633b263b8235c76afb910d91cf2fcae4ceda09c72693bbe68d88bbc394bb76aedcd9a74a0","ssdeep":"","tlshash":"ae218a03c579e3175e9b15b2552a1fc35c93a8b00dc6158fec459dcd5649c8bc71128b","first_seen":"2025-04-26T05:32:18.028477Z","last_seen":"2026-08-16T15:40:18.020958Z","times_seen":996,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":36,"dns":1,"connect":15,"send":0,"wait":46,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/bybittonwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/bybittonwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 6895\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-b7faca738d34d4a7ab5327e81b9267ba-381496e6a72530a6-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-1aef\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc8\r\nage: 93\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"0916d8dc0fe322b83ad60dc4bc8260cf","sha1":"da3b21840b67b25f8997c32c7fddeda06fedb76e","sha256":"8268630cfca7e33f69b193ff30605e3916ed4ef5874513c42df54f0e8e78795d","sha512":"0cbcab0f6ae34cd6ee4aad3804498700f057bfac59d6663bde4146efeced10158d1e8af31daa7410b79b5d9024e37b02788202a1881bafb5c6bb902ad54acbe5","ssdeep":"192:FS49XMVkI8gQaDwnLJAmdbdySsAf/8F1O1l:k49XMVkIzQawqMsukFal","tlshash":"5de18e57f6d1153fa0af9da9b2ecff226861430a54e0d24f6d17c8d30e1b9173d1988a","first_seen":"2025-11-22T11:30:21.536065Z","last_seen":"2026-08-16T15:40:18.046277Z","times_seen":407,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/safepalwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/safepalwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 735\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-d85db2fff189c8e360b81466a592c81f-bbad36df008181fe-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-2df\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc5\r\nage: 29\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:47:16+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":735,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 4-bit colormap, non-interlaced","md5":"0538634f954d877d5ed633b704fc475d","sha1":"97cf8e669eafa065d964a577c7f58af15d7555ac","sha256":"2173dbf44e5b986d15cb52b206af9e85e2dcc4808aebd6f7f29fdb5949f5fa4a","sha512":"a8d4a748977b04a6e5e2a6cc205822a9286cd2c0c8d0330d83bb8ea7debe5e8460d2a62910c9be688b67e1c33444d31c111022993b3b91ebebb2c51b3d6af696","ssdeep":"","tlshash":"430160f4cece0801853f8c215418a4c8e940c28fa06ac7330db4cc1a61c9c90a93f512","first_seen":"2024-06-30T12:44:46Z","last_seen":"2026-08-16T15:40:17.976802Z","times_seen":1077,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/miraiapp_tg.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/miraiapp_tg.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 14743\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-37f6d41a1d35c1d174db7ccb5fdee65d-c586fdc296523b67-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-3997\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc6\r\nage: 80\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14743,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit/color RGB, non-interlaced","md5":"4183f4114e1e2fb9f436d5ff9b7debc6","sha1":"c11f74163dc7a56bfb2e9adec8e34b35413a27b7","sha256":"0e9842f97a85f5a3317ae59868dd7a98c706ac325249ace72b3511db7a6ce0c0","sha512":"69a2c21046972f4d38ea697aa5d85e7e5c3305b450292b47a017a0ba4bdcd72f4f8563a4965c9849d311ba8499cee43d41a5924ff0177b0687a7783267b9c406","ssdeep":"384:fx2yKuzEkkTr9SfDDm8JH0o/CgLcjTZEEAPSdn:fx2yKuzjkTrM/H0o/CnjT6EAqdn","tlshash":"6862c047856cdce7d0a16dfdf3e9beb71e73063475a64004a3ae0af1eab2b400687016","first_seen":"2025-11-22T11:30:21.467365Z","last_seen":"2026-08-16T15:40:17.962622Z","times_seen":407,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"config.ton.org/assets/nicegramwallet.png","fqdn":"config.ton.org","domain":"ton.org","tld":"org"},"ip":{"addr":"92.38.146.146","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tongambler.xyz/","date":"2026-02-20T16:47:45.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"config.ton.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 27 Nov 2025 00:00:00 GMT","end":"Sat, 26 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"07:F9:60:8B:35:A1:2D:FB:12:71:E1:FA:8D:2A:1E:FE:1D:AC:7C:AA","sha256":"4A:93:BE:CF:AC:66:C0:52:66:02:08:1F:EF:4B:C3:2A:A5:6B:E0:06:0C:22:95:E7:47:FA:53:FA:AE:EF:18:40"}}},"request":{"raw":"GET /assets/nicegramwallet.png HTTP/1.1\r\nHost: config.ton.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tongambler.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 20 Feb 2026 16:47:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 3587\r\nx-id-fe: digi-hw-edge-gc7\r\ntraceparent: 00-63176c13ea453f59abe2c2ce480b650a-8f5cbf70c2266845-01\r\nx-shard: digi-shard0-default\r\nlast-modified: Tue, 23 Dec 2025 12:00:50 GMT\r\netag: \"694a8472-e03\"\r\ncache-control: public, max-age=21600\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: PUT, GET, POST, OPTIONS, DELETE\r\naccess-control-allow-headers: Content-Type,Cache-Control\r\naccess-control-max-age: 1728000\r\nx-id: digi-hw-edge-gc6\r\nage: 93\r\naccess-control-allow-origin: *\r\ncache: HIT\r\nx-cached-since: 2026-02-20T16:46:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3587,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 288 x 288, 8-bit grayscale, non-interlaced","md5":"87ca5b77ce1e13cff2867ae76f509c4d","sha1":"50b7941c8c1d6bc3bb13e42512a80ea71cbd2ce5","sha256":"e57a5da21f4f8fe1f226c957f00d69e1d64da4764b4305f58795df6a8084c591","sha512":"7f76188cb2109ded78ad61ef55c9973c622c468ebb3cdc81cad453fdba94f6dcdd49e776240476b70ec62611f65dd3523c0de69d8dc774b7f085add684d45ef5","ssdeep":"","tlshash":"9f715ba33754e78bc5cf0b73cdb55e829f294082dfca5449748d98938b41b922a8b602","first_seen":"2025-11-22T11:30:21.507445Z","last_seen":"2026-08-16T15:40:17.952587Z","times_seen":407,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}