{"report_id":"43ee21f8-4f04-4392-a8e5-14508ecb38fa","version":6,"status":"done","tags":[],"date":"2026-02-14T04:13:11Z","url":{"schema":"https","addr":"hiltonbet1303.com/","fqdn":"hiltonbet1303.com","domain":"hiltonbet1303.com","tld":"com"},"ip":{"addr":"172.67.220.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hiltonbet1303.com/","fqdn":"hiltonbet1303.com","domain":"hiltonbet1303.com","tld":"com"},"title":"Shi Mine - Crash Game | Multiplayer Crypto Betting","dom":{"size":41622,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (37609)","md5":"ebda1ede30ed0732e3b7de60edfa0b2c","sha1":"90cae187b75a9d800ab20216c9f23c77d8801e8c","sha256":"ac0f96e4d03e40e71107143759c3a2bd65f463a12da241554c7a5158914f53a1","sha512":"f9a5842ef71f4a9a36ff200fb982c39461fdfaaa91847f1524cbecc33dfc9341ad44b691c9da79bba8a65f6ccaa201819f16814c94eddcd49afde9e442a341fc","ssdeep":"768:tz9AhLkae+U1TgeBmtRWC7wqPeXhLnmgT+EC:tz9Aqo/MXYtL","tlshash":"d313a43253281d3e659782d0f6b1b738526fd38dd76b846cb1ec427a6fc2c54c8ae294","dom_hash":"domhash68d90752260f5751e7069ac9cf1b97b1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"hiltonbet1303.com/","fqdn":"hiltonbet1303.com","domain":"hiltonbet1303.com","tld":"com"},"ip":{"addr":"172.67.220.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T04:13:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"hiltonbet1303.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-05","domain_rank":0,"first_seen":"2026-02-13T05:48:45.034419Z","last_seen":"2026-02-13T05:48:45.03442Z","alert_count":0,"request_count":15,"received_data":6592786,"sent_data":6931,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":144759,"sent_data":1756,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":1,"received_data":49154,"sent_data":558,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hiltonbet1303.com/assets/index-DnOWITVq.js","fqdn":"hiltonbet1303.com","domain":"hiltonbet1303.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7cd8b00f001c2f3953d7df010e16e23","sha1":"6d425c2a02365d543c0a7f7f9fd007aada1e308e","sha256":"0bfdc9d9c0eb3e9e35a5ef08bdd8fa68380d8e3df91bef70e426b9efef58fef4","sha512":"3e269085aede89b0b0adc76a220835fd3e9aebb885e0891b82bacbc25f0355473c6572a3535095b4712823dbeb4742db42f0e3696f166ae8cb5ced394e9dce73","ssdeep":"24576:9xygv6nQOQnwNA4WjuETLB9Z4Xh+otxueBKbxtXGYhxuUNawdhrtx:9xygv6nQOQnwNA4WjuEnB9Z4X8otxueM","tlshash":"c1354bc47192f5b997a745e0403f420af23e2d54a80d8464f17de8e63e7484aa27bfbd","size":1093447,"data":"","first_seen":"2026-02-13T05:19:43.759106Z","last_seen":"2026-02-14T06:47:52.398569Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hiltonbet1303.com/sounds/drill_loop.wav","fqdn":"hiltonbet1303.com","domain":"hiltonbet1303.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hiltonbet1303.com/","date":"2026-02-14T04:12:52.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hiltonbet1303.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 15:48:42 GMT","end":"Fri, 03 Apr 2026 16:47:04 GMT"},"fingerprint":{"sha1":"1D:E7:A5:3C:44:F8:39:A0:BC:95:5C:A0:F2:48:6B:59:A1:97:E6:33","sha256":"37:7B:6C:3F:00:AF:F5:65:55:D4:2B:1B:0A:6E:5E:B3:9C:9D:1C:14:B8:72:7C:5A:9F:13:42:EE:99:B4:F0:8D"}}},"request":{"raw":"GET /sounds/drill_loop.wav HTTP/1.1\r\nHost: hiltonbet1303.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 14 Feb 2026 04:12:52 GMT\r\ncontent-type: audio/wav\r\ncontent-length: 1266326\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 03 Feb 2026 13:30:37 GMT\r\netag: W/\"135296-19c23b2ab53\"\r\ncontent-range: bytes 0-1266325/1266326\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xhC1ufR7JFzBkq7ZDF5qQwi485Td6Sqzjxkr69Dg0riB%2BV5akiOpDtT1ophz6Hzd1l20NjYkj1HyIO4zs2qupVkg0u0cIn7OStMPZNP043GT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9baca0dfd4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1266326,"size_decoded":0,"mime_type":"audio/x-wav","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz","md5":"5ee9a5af0c49c5bf7f79a95e78bccb43","sha1":"a87cf40a6751a5323d53b4c58e89cf89e863ca88","sha256":"7f94834df4ebaebfa52a7960fa6343a2e6707b1fdb28047101f57a99f430ad0f","sha512":"49966edb0209ba3442402b2a3f965025781991129ff5d6e2f309573429e067d324b7471f083f8f372c95e4ee47140b999691bc74551c9d26c876ccb67f517496","ssdeep":"24576:pNKw0yF1mZ4i2H7Z5e9S7MO6MWpk2Sggd9W+acxT:xBI4Z5z7GMWpKgA9WNmT","tlshash":"d325d093c1038b542e990f6789d16c0c1b98784dfea52b1f7a8ded91f2a3701b7a43e5","first_seen":"2026-02-13T05:19:43.75249Z","last_seen":"2026-02-14T06:47:52.384038Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":674,"receive":861,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hiltonbet1303.com/sounds/coin_clink.wav","fqdn":"hiltonbet1303.com","domain":"hiltonbet1303.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hiltonbet1303.com/","date":"2026-02-14T04:12:52.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hiltonbet1303.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 15:48:42 GMT","end":"Fri, 03 Apr 2026 16:47:04 GMT"},"fingerprint":{"sha1":"1D:E7:A5:3C:44:F8:39:A0:BC:95:5C:A0:F2:48:6B:59:A1:97:E6:33","sha256":"37:7B:6C:3F:00:AF:F5:65:55:D4:2B:1B:0A:6E:5E:B3:9C:9D:1C:14:B8:72:7C:5A:9F:13:42:EE:99:B4:F0:8D"}}},"request":{"raw":"GET /sounds/coin_clink.wav HTTP/1.1\r\nHost: hiltonbet1303.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 14 Feb 2026 04:12:52 GMT\r\ncontent-type: audio/wav\r\ncontent-length: 435210\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 03 Feb 2026 13:30:37 GMT\r\netag: W/\"6a40a-19c23b2ab53\"\r\ncontent-range: bytes 0-435209/435210\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vafnpbNyqCAdKQhLoRJpJmQ4Ng4Ta5H6b2nPnBh4S4zPOryCzaoxvzudRPWPqYXE6xRrxQpIUPtz1fV30rd6f0CAWC5ag8%2BywHyTXheB4pbJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9baca0e044c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":435210,"size_decoded":0,"mime_type":"audio/x-wav","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz","md5":"f606574bd90a6060662633933f88f838","sha1":"95199ee671129550266260af49988134932e8e16","sha256":"f2ac4d446aaade496772818694abaf07f9681e8dff7b85127c93072bbda245fd","sha512":"e02a3da04b1f788b8b30559e4e80bc7c056224de9bfa4895326093283790652001fdbb7436a5f5a65d49e7ec43167193ff6c5d8392a482cbea71a31e81771967","ssdeep":"3072:OM9wBuXg1TSdLJ2GskRzKSyL2ZAMo8fCZ9aSSKomJcjwNMVFbzlFbnId6xoi4sTX:twB7TSEUGSy6FfCsGMVRIdiTsKTh","tlshash":"e894fc82b340d951c4467a3a895adbf95333be46ef07a3233060bf2b7db25c25e592c5","first_seen":"2026-02-13T05:19:43.74899Z","last_seen":"2026-02-14T06:47:52.388343Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":687,"receive":559,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hiltonbet1303.com/sounds/coin_clink.wav","fqdn":"hiltonbet1303.com","domain":"hiltonbet1303.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hiltonbet1303.com/","date":"2026-02-14T04:12:52.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hiltonbet1303.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 15:48:42 GMT","end":"Fri, 03 Apr 2026 16:47:04 GMT"},"fingerprint":{"sha1":"1D:E7:A5:3C:44:F8:39:A0:BC:95:5C:A0:F2:48:6B:59:A1:97:E6:33","sha256":"37:7B:6C:3F:00:AF:F5:65:55:D4:2B:1B:0A:6E:5E:B3:9C:9D:1C:14:B8:72:7C:5A:9F:13:42:EE:99:B4:F0:8D"}}},"request":{"raw":"GET /sounds/coin_clink.wav HTTP/1.1\r\nHost: hiltonbet1303.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 14 Feb 2026 04:12:52 GMT\r\ncontent-type: audio/wav\r\ncontent-length: 435210\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 03 Feb 2026 13:30:37 GMT\r\netag: W/\"6a40a-19c23b2ab53\"\r\ncontent-range: bytes 0-435209/435210\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=22ucfQziMB4eg15n1ookGHIEykMCcxs0MUegfuAeEE%2BowjF%2FV8DTX7Qul%2FTUfCdLqEHf6o1%2B%2Fqhf0Wg%2FfgubZkieO3otE4lnUe5%2FZV8PYTcW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9baca0e074c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":435210,"size_decoded":0,"mime_type":"audio/x-wav","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz","md5":"f606574bd90a6060662633933f88f838","sha1":"95199ee671129550266260af49988134932e8e16","sha256":"f2ac4d446aaade496772818694abaf07f9681e8dff7b85127c93072bbda245fd","sha512":"e02a3da04b1f788b8b30559e4e80bc7c056224de9bfa4895326093283790652001fdbb7436a5f5a65d49e7ec43167193ff6c5d8392a482cbea71a31e81771967","ssdeep":"3072:OM9wBuXg1TSdLJ2GskRzKSyL2ZAMo8fCZ9aSSKomJcjwNMVFbzlFbnId6xoi4sTX:twB7TSEUGSy6FfCsGMVRIdiTsKTh","tlshash":"e894fc82b340d951c4467a3a895adbf95333be46ef07a3233060bf2b7db25c25e592c5","first_seen":"2026-02-13T05:19:43.74899Z","last_seen":"2026-02-14T06:47:52.388343Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":671,"receive":524,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hiltonbet1303.com/sounds/coin_clink.wav","fqdn":"hiltonbet1303.com","domain":"hiltonbet1303.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hiltonbet1303.com/","date":"2026-02-14T04:12:52.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hiltonbet1303.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 15:48:42 GMT","end":"Fri, 03 Apr 2026 16:47:04 GMT"},"fingerprint":{"sha1":"1D:E7:A5:3C:44:F8:39:A0:BC:95:5C:A0:F2:48:6B:59:A1:97:E6:33","sha256":"37:7B:6C:3F:00:AF:F5:65:55:D4:2B:1B:0A:6E:5E:B3:9C:9D:1C:14:B8:72:7C:5A:9F:13:42:EE:99:B4:F0:8D"}}},"request":{"raw":"GET /sounds/coin_clink.wav HTTP/1.1\r\nHost: hiltonbet1303.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 14 Feb 2026 04:12:52 GMT\r\ncontent-type: audio/wav\r\ncontent-length: 435210\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 03 Feb 2026 13:30:37 GMT\r\netag: W/\"6a40a-19c23b2ab53\"\r\ncontent-range: bytes 0-435209/435210\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=toumd10LP2JCJ55hjxRTxAalzpLCKzgexFI0eigpn%2BzTCP3ATZDAMmCcXzOmLnw1uWjV5n87%2BTTvZ8RKAvKSevi9R62CFj9LrITujOfGOTh3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9baca0e094c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":435210,"size_decoded":0,"mime_type":"audio/x-wav","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz","md5":"f606574bd90a6060662633933f88f838","sha1":"95199ee671129550266260af49988134932e8e16","sha256":"f2ac4d446aaade496772818694abaf07f9681e8dff7b85127c93072bbda245fd","sha512":"e02a3da04b1f788b8b30559e4e80bc7c056224de9bfa4895326093283790652001fdbb7436a5f5a65d49e7ec43167193ff6c5d8392a482cbea71a31e81771967","ssdeep":"3072:OM9wBuXg1TSdLJ2GskRzKSyL2ZAMo8fCZ9aSSKomJcjwNMVFbzlFbnId6xoi4sTX:twB7TSEUGSy6FfCsGMVRIdiTsKTh","tlshash":"e894fc82b340d951c4467a3a895adbf95333be46ef07a3233060bf2b7db25c25e592c5","first_seen":"2026-02-13T05:19:43.74899Z","last_seen":"2026-02-14T06:47:52.388343Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":686,"receive":566,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hiltonbet1303.com/","fqdn":"hiltonbet1303.com","domain":"hiltonbet1303.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T04:12:49.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hiltonbet1303.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 15:48:42 GMT","end":"Fri, 03 Apr 2026 16:47:04 GMT"},"fingerprint":{"sha1":"1D:E7:A5:3C:44:F8:39:A0:BC:95:5C:A0:F2:48:6B:59:A1:97:E6:33","sha256":"37:7B:6C:3F:00:AF:F5:65:55:D4:2B:1B:0A:6E:5E:B3:9C:9D:1C:14:B8:72:7C:5A:9F:13:42:EE:99:B4:F0:8D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hiltonbet1303.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 04:12:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 03 Feb 2026 13:30:38 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uBU62WYMWP%2BYdufUOmzcF2ledv3uXVerzcuSN2cgim%2FQwHhZLEKdpFiKscRoLnk5z%2BXNRjit5Jq4hebxv0UjshPRiQAPHukUyCtR3r2%2BX2px\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cd9bab8ce314c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3979,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1432)","md5":"827a77f487a323b28d1dc98be8b1d59c","sha1":"30e3fba89d3e5d06b9fdd33813445a45572f51a6","sha256":"c1d3127050f1bf5e131e972ac5aa67f3c13c8ce1bb392995b994a5f8052c34a7","sha512":"c13398484ed826bfc79956e4ac02f18a2d20685492220addeaba694e5f5a8a9a485c3e7a5180d3a6b031c010c03b6f619b103b591bf4e87122f8f5258b220060","ssdeep":"","tlshash":"958176ebc91a98663230d138b8f5f9014929948f87f99d50f28d648f9ecb7c9c5b3b50","first_seen":"2026-02-13T05:19:43.750379Z","last_seen":"2026-02-14T06:47:52.396816Z","times_seen":16,"resource_available":false,"data":null}},"time_used":688,"timings":{"blocked":79,"dns":65,"connect":1,"send":0,"wait":525,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Architects+Daughter\u0026family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Fira+Code:wght@300..700\u0026family=Geist+Mono:wght@100..900\u0026family=Geist:wght@100..900\u0026family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=IBM+Plex+Sans:ital,wght@0,100..700;1,100..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=JetBrains+Mono:ital,wght@0,100..800;1,100..800\u0026family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Outfit:wght@100..900\u0026family=Oxanium:wght@200..800\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Source+Code+Pro:ital,wght@0,200..900;1,200..900\u0026family=Source+Serif+4:ital,opsz,wght@0,8..60,200..900;1,8..60,200..900\u0026family=Space+Grotesk:wght@300..700\u0026family=Space+Mono:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hiltonbet1303.com/","date":"2026-02-14T04:12:50.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:41:02 GMT","end":"Mon, 20 Apr 2026 08:41:01 GMT"},"fingerprint":{"sha1":"CE:4C:7F:8F:8F:6A:C6:C8:7D:B4:2F:84:18:4E:0D:FB:63:4C:61:E5","sha256":"26:A1:50:21:90:A7:C5:05:61:2F:4B:99:EE:0C:BA:28:24:E5:BF:CB:00:37:F9:42:00:D8:72:4C:00:37:9B:B9"}}},"request":{"raw":"GET /css2?family=Architects+Daughter\u0026family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Fira+Code:wght@300..700\u0026family=Geist+Mono:wght@100..900\u0026family=Geist:wght@100..900\u0026family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=IBM+Plex+Sans:ital,wght@0,100..700;1,100..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=JetBrains+Mono:ital,wght@0,100..800;1,100..800\u0026family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Outfit:wght@100..900\u0026family=Oxanium:wght@200..800\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Source+Code+Pro:ital,wght@0,200..900;1,200..900\u0026family=Source+Serif+4:ital,opsz,wght@0,8..60,200..900;1,8..60,200..900\u0026family=Space+Grotesk:wght@300..700\u0026family=Space+Mono:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 04:12:50 GMT\r\ndate: Sat, 14 Feb 2026 04:12:50 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144073,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"f7779e80a412af4c3ec4d299fd805cd8","sha1":"af5627ba97c9f837aca0dbb34a86cb9893d3fbdc","sha256":"e38c2bc4e06ab9078d790b062efe48381366b5b1731b3524544a5a5e617831ea","sha512":"161b29269261f8fa96618ab2fa9aac7b58f0439b3788fbd66851b1cb719e7489ba9b0eb35d747a353e888e60f31acf7028e87ecba3c76ffd6487af094f4fe24c","ssdeep":"768:CHFCevmEAr+gCS5xFJNGo6n3wafwe0utoEA3mknhvshz2FfTD7XgrpBNiY+q83Et:xVXPNo/zmCNqHvDyWNpQ9","tlshash":"5ae30e91042ba004eb831cc233cfbe36ee4ea2557444d579affe2d99ac9bc26536471d","first_seen":"2025-11-21T18:01:56.29756Z","last_seen":"2026-02-18T16:57:48.392306Z","times_seen":145,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":84,"dns":1,"connect":15,"send":0,"wait":43,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hiltonbet1303.com/assets/index-CC7ZYKeH.css","fqdn":"hiltonbet1303.com","domain":"hiltonbet1303.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hiltonbet1303.com/","date":"2026-02-14T04:12:50.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hiltonbet1303.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 15:48:42 GMT","end":"Fri, 03 Apr 2026 16:47:04 GMT"},"fingerprint":{"sha1":"1D:E7:A5:3C:44:F8:39:A0:BC:95:5C:A0:F2:48:6B:59:A1:97:E6:33","sha256":"37:7B:6C:3F:00:AF:F5:65:55:D4:2B:1B:0A:6E:5E:B3:9C:9D:1C:14:B8:72:7C:5A:9F:13:42:EE:99:B4:F0:8D"}}},"request":{"raw":"GET /assets/index-CC7ZYKeH.css HTTP/1.1\r\nHost: hiltonbet1303.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:12:50 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 03 Feb 2026 13:30:38 GMT\r\netag: W/\"1a718-19c23b2acdb\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QEvqUbPQtDDzglCJoNUrvYI6QYjcf%2FY0TNnHU%2BYNCfkUujpy4fi4wOLFungrPSSd220wVmhCbE7r0Y%2F6Xp1rmB3xfutT4AZ5VUE02q9b1Kj7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cd9babd0e2f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108312,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"69ea69632e3e8aca9c180fc90e072a94","sha1":"837759bcef55e4862dd815f17d0a92f7a6d0161c","sha256":"582ecb183badd0829273cd4f799972cf9ad60d9062a2877d53938958e6c82a56","sha512":"0fb13cdb81355a0b630c54994168b13985f7866c1fb4a7f96f3ef6af02788b3bb53435d9b77cbcc8d8c88fbf7ae0714eb89066bfe2cbe954eab3578afa3927c9","ssdeep":"3072:Lox6Qh5iEuIdWL5cw8AE8MUreoGyfC378VQZkt5Fh/EWC:Lox6Qh5iEuIdWL5cw8IfC378VQZkt5Fs","tlshash":"e3b387296968507f3c17a0f4d38cb9acf51bf1c0de3e06a9bd86412567e23f65c9ba04","first_seen":"2026-02-13T05:19:43.743319Z","last_seen":"2026-02-14T06:47:52.391782Z","times_seen":16,"resource_available":false,"data":null}},"time_used":990,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":325,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hiltonbet1303.com/api/auth/me","fqdn":"hiltonbet1303.com","domain":"hiltonbet1303.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hiltonbet1303.com/","date":"2026-02-14T04:12:51.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hiltonbet1303.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 15:48:42 GMT","end":"Fri, 03 Apr 2026 16:47:04 GMT"},"fingerprint":{"sha1":"1D:E7:A5:3C:44:F8:39:A0:BC:95:5C:A0:F2:48:6B:59:A1:97:E6:33","sha256":"37:7B:6C:3F:00:AF:F5:65:55:D4:2B:1B:0A:6E:5E:B3:9C:9D:1C:14:B8:72:7C:5A:9F:13:42:EE:99:B4:F0:8D"}}},"request":{"raw":"GET /api/auth/me HTTP/1.1\r\nHost: hiltonbet1303.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\ndate: Sat, 14 Feb 2026 04:12:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 31\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\nratelimit-policy: 100;w=60\r\nratelimit-limit: 100\r\nratelimit-remaining: 99\r\nratelimit-reset: 60\r\netag: W/\"1f-+6QzNnV5epxAIN04tcijgCAz6Yw\"\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SwcYTTI95lxGuMOLj9SDTRfelKRkFNXKmP4iHqBs73yQFx%2FFwSkViqVU4H5VivVjY7WZdOb%2FixEiMuwipSklXGsprSSCGMPFtObSxNfFqyN%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9bac8dbe44c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"95be97568fee69e29acf9a225a14c078","sha1":"fba4333675797a9c4020dd38b5c8a3802033e98c","sha256":"7368628fac9988517cf84c8623899a1be9ff9c00d3c5cc043057eed59c8d0bcb","sha512":"f4af81d0c29a3fb408b80cda34723853aa3211133d8bd54fa81bd756f2ce1276bd4cd4475706e5208e3f1a668db718a71c7962ad09e99e5e4f41dbe37820c683","ssdeep":"","tlshash":"37800020c2802c2ac303c2e2b208208002822aa800e028028028280a820888e80ba2c2","first_seen":"2025-02-16T23:17:47.175672Z","last_seen":"2026-07-25T02:02:36.695307Z","times_seen":254,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":528,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hiltonbet1303.com/sounds/train_loop.wav","fqdn":"hiltonbet1303.com","domain":"hiltonbet1303.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hiltonbet1303.com/","date":"2026-02-14T04:12:52.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hiltonbet1303.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 15:48:42 GMT","end":"Fri, 03 Apr 2026 16:47:04 GMT"},"fingerprint":{"sha1":"1D:E7:A5:3C:44:F8:39:A0:BC:95:5C:A0:F2:48:6B:59:A1:97:E6:33","sha256":"37:7B:6C:3F:00:AF:F5:65:55:D4:2B:1B:0A:6E:5E:B3:9C:9D:1C:14:B8:72:7C:5A:9F:13:42:EE:99:B4:F0:8D"}}},"request":{"raw":"GET /sounds/train_loop.wav HTTP/1.1\r\nHost: hiltonbet1303.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 14 Feb 2026 04:12:52 GMT\r\ncontent-type: audio/wav\r\ncontent-length: 705644\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 03 Feb 2026 13:30:37 GMT\r\netag: W/\"ac46c-19c23b2ab53\"\r\ncontent-range: bytes 0-705643/705644\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6lTQSJRkuEWLTzZpxf6uRcUZGdQmNnp10GPbfEmHIs9pIXKiY1MIMsiN06ZbGq%2BHuJhM1ccvVSf1CDMl8GFu8hjQ3jfZMfYjtKBZadV%2Fb6Fh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9baca0dfa4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":705644,"size_decoded":0,"mime_type":"audio/x-wav","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, mono 44100 Hz","md5":"5f2bf2f5cd07406bdbe3ba705f85ff2d","sha1":"0f57ee73be113dbded9cbcbf17b0273a82074264","sha256":"87a566555db193261c19a337908bd9076410d5b6da7260e872918badd9d8529c","sha512":"e0502a54de660d0375c1eec24213ca845aee08f15b510045453bbdfeaf9fd16495027b17942b532812753e250b80c1b21aefe2bdd6b91568311d5583e26c52e4","ssdeep":"12288:MdRdEv1QJ8DerpgsGY6wHBBLE5/hSPwr5Fwpjx2vxcDSloULeKGDWjH/mRc:CRgagoLBREhE4rjMg5cGlPCUT","tlshash":"3ee4cf60ec83ca8763cfe766dbe15f414cf3a144e9a4952f31c84f2a52cb710766929b","first_seen":"2026-02-13T05:19:43.747061Z","last_seen":"2026-02-14T06:47:52.395274Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":680,"receive":688,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hiltonbet1303.com/sounds/coin_clink.wav","fqdn":"hiltonbet1303.com","domain":"hiltonbet1303.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hiltonbet1303.com/","date":"2026-02-14T04:12:52.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hiltonbet1303.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 15:48:42 GMT","end":"Fri, 03 Apr 2026 16:47:04 GMT"},"fingerprint":{"sha1":"1D:E7:A5:3C:44:F8:39:A0:BC:95:5C:A0:F2:48:6B:59:A1:97:E6:33","sha256":"37:7B:6C:3F:00:AF:F5:65:55:D4:2B:1B:0A:6E:5E:B3:9C:9D:1C:14:B8:72:7C:5A:9F:13:42:EE:99:B4:F0:8D"}}},"request":{"raw":"GET /sounds/coin_clink.wav HTTP/1.1\r\nHost: hiltonbet1303.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 14 Feb 2026 04:12:52 GMT\r\ncontent-type: audio/wav\r\ncontent-length: 435210\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 03 Feb 2026 13:30:37 GMT\r\netag: W/\"6a40a-19c23b2ab53\"\r\ncontent-range: bytes 0-435209/435210\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qF1LvVx0eu73wgGzQ7RnaFYdZ0YjAmsIynymHuCm%2B%2FQiEWeH4CtR4K3esLvMeNQ5Tfv6Aia0CdQ%2Fpdem1SuQDxO7K26ZEDjCTiBM6iUpFPTl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9baca0e0c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":435210,"size_decoded":0,"mime_type":"audio/x-wav","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz","md5":"f606574bd90a6060662633933f88f838","sha1":"95199ee671129550266260af49988134932e8e16","sha256":"f2ac4d446aaade496772818694abaf07f9681e8dff7b85127c93072bbda245fd","sha512":"e02a3da04b1f788b8b30559e4e80bc7c056224de9bfa4895326093283790652001fdbb7436a5f5a65d49e7ec43167193ff6c5d8392a482cbea71a31e81771967","ssdeep":"3072:OM9wBuXg1TSdLJ2GskRzKSyL2ZAMo8fCZ9aSSKomJcjwNMVFbzlFbnId6xoi4sTX:twB7TSEUGSy6FfCsGMVRIdiTsKTh","tlshash":"e894fc82b340d951c4467a3a895adbf95333be46ef07a3233060bf2b7db25c25e592c5","first_seen":"2026-02-13T05:19:43.74899Z","last_seen":"2026-02-14T06:47:52.388343Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":672,"receive":534,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hiltonbet1303.com/fv.jpg","fqdn":"hiltonbet1303.com","domain":"hiltonbet1303.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hiltonbet1303.com/","date":"2026-02-14T04:12:53.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hiltonbet1303.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 15:48:42 GMT","end":"Fri, 03 Apr 2026 16:47:04 GMT"},"fingerprint":{"sha1":"1D:E7:A5:3C:44:F8:39:A0:BC:95:5C:A0:F2:48:6B:59:A1:97:E6:33","sha256":"37:7B:6C:3F:00:AF:F5:65:55:D4:2B:1B:0A:6E:5E:B3:9C:9D:1C:14:B8:72:7C:5A:9F:13:42:EE:99:B4:F0:8D"}}},"request":{"raw":"GET /fv.jpg HTTP/1.1\r\nHost: hiltonbet1303.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:12:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 03 Feb 2026 13:30:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ikEKSkHeyWy8%2FhOsEN3DE%2FTBfAMbc6NdBkn%2F67ziCHT01UIuB2ap18GjCgQNR5kP9x0GyK8nbOYyZWsZy1ei5x7DJ0m7nhBz4MvhtDfUYMYW\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd9bad36ec14c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3979,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1432)","md5":"827a77f487a323b28d1dc98be8b1d59c","sha1":"30e3fba89d3e5d06b9fdd33813445a45572f51a6","sha256":"c1d3127050f1bf5e131e972ac5aa67f3c13c8ce1bb392995b994a5f8052c34a7","sha512":"c13398484ed826bfc79956e4ac02f18a2d20685492220addeaba694e5f5a8a9a485c3e7a5180d3a6b031c010c03b6f619b103b591bf4e87122f8f5258b220060","ssdeep":"","tlshash":"958176ebc91a98663230d138b8f5f9014929948f87f99d50f28d648f9ecb7c9c5b3b50","first_seen":"2026-02-13T05:19:43.750379Z","last_seen":"2026-02-14T06:47:52.396816Z","times_seen":16,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://hiltonbet1303.com/","date":"2026-02-14T04:12:52.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://hiltonbet1303.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 01:01:36 GMT\r\nexpires: Sat, 13 Feb 2027 01:01:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 97876\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-27T20:52:10.051335Z","times_seen":317119,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":53,"dns":1,"connect":7,"send":0,"wait":8,"receive":11,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hiltonbet1303.com/assets/index-DnOWITVq.js","fqdn":"hiltonbet1303.com","domain":"hiltonbet1303.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hiltonbet1303.com/","date":"2026-02-14T04:12:50.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hiltonbet1303.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 15:48:42 GMT","end":"Fri, 03 Apr 2026 16:47:04 GMT"},"fingerprint":{"sha1":"1D:E7:A5:3C:44:F8:39:A0:BC:95:5C:A0:F2:48:6B:59:A1:97:E6:33","sha256":"37:7B:6C:3F:00:AF:F5:65:55:D4:2B:1B:0A:6E:5E:B3:9C:9D:1C:14:B8:72:7C:5A:9F:13:42:EE:99:B4:F0:8D"}}},"request":{"raw":"GET /assets/index-DnOWITVq.js HTTP/1.1\r\nHost: hiltonbet1303.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 04:12:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 03 Feb 2026 13:30:38 GMT\r\netag: W/\"10af47-19c23b2acdb\"\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G6glkUBrmjFZdi1myHwxULRUyA3%2B%2B7rDpZdNpfZOBNlNwQwAVprdUrHjfPCa0dVa%2FGc7nqzFCtpOpE7WuMS3xcv9GkUMFIy7iPzyL8jie%2FEo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cd9babd0e2a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1093447,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37782)","md5":"0fb785f7b8e2ec7625db0727f7af1461","sha1":"6c6e96c95663e5735693d67284cab1de46cd1d5f","sha256":"3fc1b31d83237a95e08b7cd1f15e518251afab75b1b13225eed7054ae9206208","sha512":"cc110d1c5460a464273152186149d89d393f5da0e64566fae0dd7c6f1d3575649a2c235729609a4b97c1d0074c537c8656688b4adebc61327dd357fb232acf8a","ssdeep":"24576:9xygv6nQOQnwNA4WjuETLB9Z4Xh+otxueBKbxtXGYhxuUNawdhrj:9xygv6nQOQnwNA4WjuEnB9Z4X8otxuee","tlshash":"79254bc47192f57997a345e1403f4206f23e2954b80d8464f17ee8e63e7484aa27bfbe","first_seen":"2026-02-13T05:19:43.754374Z","last_seen":"2026-02-14T06:47:52.389954Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":683,"receive":836,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hiltonbet1303.com/sounds/bg_loop.mp3","fqdn":"hiltonbet1303.com","domain":"hiltonbet1303.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hiltonbet1303.com/","date":"2026-02-14T04:12:52.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hiltonbet1303.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 15:48:42 GMT","end":"Fri, 03 Apr 2026 16:47:04 GMT"},"fingerprint":{"sha1":"1D:E7:A5:3C:44:F8:39:A0:BC:95:5C:A0:F2:48:6B:59:A1:97:E6:33","sha256":"37:7B:6C:3F:00:AF:F5:65:55:D4:2B:1B:0A:6E:5E:B3:9C:9D:1C:14:B8:72:7C:5A:9F:13:42:EE:99:B4:F0:8D"}}},"request":{"raw":"GET /sounds/bg_loop.mp3 HTTP/1.1\r\nHost: hiltonbet1303.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 14 Feb 2026 04:12:52 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 699733\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\netag: W/\"aad55-19c23b2ab53\"\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 03 Feb 2026 13:30:37 GMT\r\ncontent-range: bytes 0-699732/699733\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nnPzXfsajK%2FAeSqdLk3ZDU%2BfnFPdpyQND3AGGougIYFaVxtyS6eGphAlktes0oxEDxHMpQPLyV%2F4j1RlKD%2F2ugzrD73wYu8esBIrRwzRG2Ut\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9baca0e014c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":699733,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo","md5":"98c2110550fe57bce88be3ec18380b05","sha1":"e29d81e5b5816fb60f4cf419c11632f23e698aff","sha256":"7edfc9658c13a81c972903c5f224040f14cbd277609d88410bc665d0894a19f4","sha512":"b44e189a2c4d847dda6a570cb97ede47b77acf1569ff7cde8205d5030cf469feb2e00230643b541f38bbfa60e128a8d6ec4074401db758c21d777293ff5b2048","ssdeep":"12288:gdY3zT8UFAzdzXfT/EMIeiy42Ewo4RikqXIX8pLmlV00X76bVB1b:gi3chT/ELXy42W4/qaga7B+p","tlshash":"49e4231387a8a00378576b38e7c6367ce43a241225d8b9cb3583a15539f7a9ef357387","first_seen":"2026-02-13T05:19:43.756628Z","last_seen":"2026-02-14T06:47:52.386326Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":694,"receive":703,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hiltonbet1303.com/sounds/coin_clink.wav","fqdn":"hiltonbet1303.com","domain":"hiltonbet1303.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hiltonbet1303.com/","date":"2026-02-14T04:12:52.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hiltonbet1303.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 15:48:42 GMT","end":"Fri, 03 Apr 2026 16:47:04 GMT"},"fingerprint":{"sha1":"1D:E7:A5:3C:44:F8:39:A0:BC:95:5C:A0:F2:48:6B:59:A1:97:E6:33","sha256":"37:7B:6C:3F:00:AF:F5:65:55:D4:2B:1B:0A:6E:5E:B3:9C:9D:1C:14:B8:72:7C:5A:9F:13:42:EE:99:B4:F0:8D"}}},"request":{"raw":"GET /sounds/coin_clink.wav HTTP/1.1\r\nHost: hiltonbet1303.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 14 Feb 2026 04:12:52 GMT\r\ncontent-type: audio/wav\r\ncontent-length: 435210\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 03 Feb 2026 13:30:37 GMT\r\netag: W/\"6a40a-19c23b2ab53\"\r\ncontent-range: bytes 0-435209/435210\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uh%2B4QsISCF0Yh5H3InXO2jXfelM4nkFvvwEQbjUy2CfXNg2sfxLNN4IPBpqPTxdgaiqRDpjQK1t3MB8FnHIjhAXXzqNQqnpS6Gubq%2B2dEp7E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9baca0e0e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":435210,"size_decoded":0,"mime_type":"audio/x-wav","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz","md5":"f606574bd90a6060662633933f88f838","sha1":"95199ee671129550266260af49988134932e8e16","sha256":"f2ac4d446aaade496772818694abaf07f9681e8dff7b85127c93072bbda245fd","sha512":"e02a3da04b1f788b8b30559e4e80bc7c056224de9bfa4895326093283790652001fdbb7436a5f5a65d49e7ec43167193ff6c5d8392a482cbea71a31e81771967","ssdeep":"3072:OM9wBuXg1TSdLJ2GskRzKSyL2ZAMo8fCZ9aSSKomJcjwNMVFbzlFbnId6xoi4sTX:twB7TSEUGSy6FfCsGMVRIdiTsKTh","tlshash":"e894fc82b340d951c4467a3a895adbf95333be46ef07a3233060bf2b7db25c25e592c5","first_seen":"2026-02-13T05:19:43.74899Z","last_seen":"2026-02-14T06:47:52.388343Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":670,"receive":587,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hiltonbet1303.com/sounds/crash_hit.wav","fqdn":"hiltonbet1303.com","domain":"hiltonbet1303.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hiltonbet1303.com/","date":"2026-02-14T04:12:52.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hiltonbet1303.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 15:48:42 GMT","end":"Fri, 03 Apr 2026 16:47:04 GMT"},"fingerprint":{"sha1":"1D:E7:A5:3C:44:F8:39:A0:BC:95:5C:A0:F2:48:6B:59:A1:97:E6:33","sha256":"37:7B:6C:3F:00:AF:F5:65:55:D4:2B:1B:0A:6E:5E:B3:9C:9D:1C:14:B8:72:7C:5A:9F:13:42:EE:99:B4:F0:8D"}}},"request":{"raw":"GET /sounds/crash_hit.wav HTTP/1.1\r\nHost: hiltonbet1303.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 14 Feb 2026 04:12:52 GMT\r\ncontent-type: audio/wav\r\ncontent-length: 79424\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 03 Feb 2026 13:30:37 GMT\r\netag: W/\"13640-19c23b2ab53\"\r\ncontent-range: bytes 0-79423/79424\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a64T4GP1yN%2FqdbrNHWSsMqqOOczC1CQYXXdIYp3T6dbdnWsd0yjOTXO3XE%2Fz8bZUIBNXzkgIx0nl7sqNsAX8V1kZOJegJv2NXFNIVekkqOGx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9baca0df44c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79424,"size_decoded":0,"mime_type":"audio/x-wav","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, mono 44100 Hz","md5":"b07fddeb4b41dcb2b33a2a958c8611d5","sha1":"c64ca5ce004cd88d6061f94488765b84b91ecccc","sha256":"2ba66f20703a1f0a9323ee8cf703371924b3e992dcd7a8272fbbb3a0a1dfa949","sha512":"5cac1186e2488039819b6071dde412ec10f2c71c3471d73fb1542d01123424694c35982faaabcd1161333799b3af4c4f76a0377948102ff0a75440e2cc308a22","ssdeep":"1536:nehQlYdsqk6Y3XS8OxraMh7u2L7kHEvzbfBLZ0S9gYbDrvg1GmrbX:7l5qs37oaoLY0bfBlV9gErvg1bX","tlshash":"dd733b82f045de50c8554e7a8e27a9a503337d9aff4b57177080ba6b38f30d29b39792","first_seen":"2026-02-13T05:19:43.757841Z","last_seen":"2026-02-14T06:47:52.382176Z","times_seen":16,"resource_available":false,"data":null}},"time_used":862,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":687,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hiltonbet1303.com/sounds/coin_clink.wav","fqdn":"hiltonbet1303.com","domain":"hiltonbet1303.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://hiltonbet1303.com/","date":"2026-02-14T04:12:52.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hiltonbet1303.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 15:48:42 GMT","end":"Fri, 03 Apr 2026 16:47:04 GMT"},"fingerprint":{"sha1":"1D:E7:A5:3C:44:F8:39:A0:BC:95:5C:A0:F2:48:6B:59:A1:97:E6:33","sha256":"37:7B:6C:3F:00:AF:F5:65:55:D4:2B:1B:0A:6E:5E:B3:9C:9D:1C:14:B8:72:7C:5A:9F:13:42:EE:99:B4:F0:8D"}}},"request":{"raw":"GET /sounds/coin_clink.wav HTTP/1.1\r\nHost: hiltonbet1303.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Sat, 14 Feb 2026 04:12:52 GMT\r\ncontent-type: audio/wav\r\ncontent-length: 435210\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 03 Feb 2026 13:30:37 GMT\r\netag: W/\"6a40a-19c23b2ab53\"\r\ncontent-range: bytes 0-435209/435210\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GW8N2w7yYz7DIf%2B7HRfpI8VJasgd1EHtC1CxgIZQthIO0RDhHq4JKhbYd8Vl4qLmB%2BuQXAfYBBS2xk1xO77UwyMkgiv9fQh26xnM%2BrGcT0mV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd9baca0df64c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":435210,"size_decoded":0,"mime_type":"audio/x-wav","magic":"RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz","md5":"f606574bd90a6060662633933f88f838","sha1":"95199ee671129550266260af49988134932e8e16","sha256":"f2ac4d446aaade496772818694abaf07f9681e8dff7b85127c93072bbda245fd","sha512":"e02a3da04b1f788b8b30559e4e80bc7c056224de9bfa4895326093283790652001fdbb7436a5f5a65d49e7ec43167193ff6c5d8392a482cbea71a31e81771967","ssdeep":"3072:OM9wBuXg1TSdLJ2GskRzKSyL2ZAMo8fCZ9aSSKomJcjwNMVFbzlFbnId6xoi4sTX:twB7TSEUGSy6FfCsGMVRIdiTsKTh","tlshash":"e894fc82b340d951c4467a3a895adbf95333be46ef07a3233060bf2b7db25c25e592c5","first_seen":"2026-02-13T05:19:43.74899Z","last_seen":"2026-02-14T06:47:52.388343Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":690,"receive":543,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}